I've got a Windows Server 2016 that refuses to patch. Whenever I check for updates, it claims there are none needed. I tried resetting Windows Update by renaming the software distribution folder, but that didn't solve the issue. I even installed Action1 to see if it could help, but it also stated that no updates were required. Manually attempting to apply the latest cumulative and security updates has failed as they're marked as not applicable. The server hasn't had updates in about five years, so I'm pretty anxious. I've checked the Windows update logs for anything unusual without any success. Windows Defender updates just fine, though. Are there any strategies or solutions before I resort to setting up a new VM?
4 Answers
What version of Server 2016 are you running? If it's 'Essentials', keep in mind that it won’t receive automatic updates after October 2025. If it's Essentials, you might have to manually install updates from the Microsoft catalog or consider upgrading to a Standard license and then perform a DISM conversion.
You could give Action1 or another patch management tool a shot to push needed patches temporarily, and then uninstall afterward.
You should also verify if there's a WSUS or SCCM server in the environment controlling your patch distribution. This could lead to issues if it's not managing updates for 2016 anymore.
First, make sure to check your OS build number in the Settings app under System > About. It might give you some clues. Also, look in the registry at HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindowsWindowsUpdateAU. If you find a 'UseWuServer' value there, it's best to remove the whole WindowsUpdate key and restart the server. This suggests that some outdated WSUS settings might still be in play.
Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures