Microsoft KB Archive/938947

= A WSUS client computer that is connected to a WSUS server takes longer than expected to finish an update scan =

Article ID: 938947

Article Last Modified on 11/21/2007

-

APPLIES TO


 * Microsoft Windows Server Update Services 3.0
 * Microsoft Windows Server Update Services 2.0

-



SYMPTOMS
Consider the following scenario:
 * A Microsoft Windows Server Update Services (WSUS) client computer is connected to a WSUS server.
 * The WSUS client computer runs a scan to determine whether an update applies to the client computer.

In this scenario, the WSUS client computer takes longer than expected to finish the scan. For example, the scan may take hours or days to finish. Additionally, you experience the following problems on the WSUS client computer:
 * Task Manager indicates high CPU usage for the Svchost.exe process.
 * You cannot stop the Svchost.exe process.



CAUSE
This problem occurs if you do not decline expired definition updates or expired malicious software (also known as malware) updates on the WSUS server.



RESOLUTION
To resolve this problem, set the option to approve update revisions on the WSUS server automatically. Also, set the option to decline expired updates on the WSUS server.

On Windows Server Update Services 3.0

 * 1) Click Start, point to All Programs, point to Administrative Tools, and then click Microsoft Windows Server Update Services.
 * 2) Click Options, and then click Automatic Approvals.
 * 3) Click the Advanced tab, make sure that the following check boxes are selected, and then click OK:
 * 4) * Automatically approve new revisions of approved updates
 * 5) * Automatically decline updates when a new revision causes them to expire

On Windows Server Update Services 2.0

 * 1) Click Start, point to All Programs, point to Administrative Tools, and then click Microsoft Windows Server Update Services.
 * 2) Click Options, and then click Automatic Approval Options.
 * 3) In the Revisions to Updates area, make sure that the Automatically approve the latest revision of the update option is selected.
 * 4) Under Tasks, click Save settings, and then click OK.



MORE INFORMATION
By default, the Automatically approve new revisions of approved updates and Automatically decline updates when a new revision causes them to expire options are selected. If you decide not to approve update revisions automatically, the WSUS server will use the older update revision. In this case, you must manually approve the update revision.

Note A revision is an update version that has changed. For example, the update version may have expired or the update version may have applicability rules that have updated.

Important The default settings for the Automatically approve new revisions of approved updates and Automatically decline updates when a new revision causes them to expire options let you maintain good performance on the WSUS network. If you do not want expired updates to be automatically declined, you can manually decline them. However, make sure that you do this periodically.

Troubleshoot stuck client computers
To resolve an issue in which a client computer stops responding during an update scan, follow these steps:
 * 1) On the affected client computer, set the startup type for the Automatic Updates service (Wuauserv) to Disabled.
 * 2) Restart the computer.
 * 3) Delete the %Windir%\SoftwareDistribution folder.
 * 4) Set the startup type for the Automatic Updates service to Automatic, and then start the Automatic Updates service.

Keywords: kbtshoot kbexpertiseadvanced KB938947

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.