Microsoft KB Archive/938220

= Over time, client computers that obtain updates from Windows Server Update Services 2.0 take longer to scan for updates and to apply updates =

Article ID: 938220

Article Last Modified on 7/12/2007

-

APPLIES TO


 * Microsoft Windows Server Update Services 2.0

-



SYMPTOMS
You use Microsoft Windows Server Update Services (WSUS) 2.0 to deploy software updates to client computers. However, over time, the client computers that obtain updates from WSUS 2.0 take longer to scan for updates and to apply updates. Sometimes, the client computers stop responding (hang) during the installation of updates.

You experience this problem if WSUS 2.0 is configured as follows:  On the Automatic Approval Options page of the WSUS administration tool, the following option is selected under Revisions to Updates:

Continue using the older revision and manually approve the new update revision

 On the Synchronization Options page of the WSUS administration tool, the Definition Updates check box is selected in the Add/Remove Classifications -- Web Page Dialog box.

Note If you have Microsoft Forefront Client Security or Windows Defender installed, the Definition Updates check box appears in this dialog box



CAUSE
This problem occurs because approval is not automatically removed from earlier definition updates if the following option is selected in WSUS 2.0:

Continue using the older revision and manually approve the new update revision

Definition updates are frequently updated. In this situation, the earlier definitions expire. We recommend that you approve the latest version of a definition update and, at the same time, remove approval from the expired version of a definition update.

If the Automatically approve the latest revision of the update option is selected in WSUS 2.0, approval is automatically removed from the expired version of the definition update. However, if the Continue using the older revision and manually approve the new update revision option is selected, approval is not automatically removed from expired definition updates.

Therefore, over time, many definition updates may remain approved for installation by WSUS clients. Therefore, client computers may experience longer scan times. Or, client computers may stop responding during the installation of updates.



WORKAROUND
To work around this issue, use one of the following methods.

Method 1: Install WSUS 3.0
Obtain WSUS 3.0, and then install it. For more information about how to obtain WSUS 3.0, visit the following Microsoft Web site:

http://www.microsoft.com/downloads/details.aspx?FamilyId=E4A868D7-A820-46A0-B4DB-ED6AA4A336D9&displaylang=en

Important The problem that is described in the &quot;Symptoms&quot; section no longer occurs after you install WSUS 3.0. However, if you experience this problem, you must manually remove approval from the existing expired definition updates. For more information about how to do this, see the &quot;More Information&quot; section.

Method 2: Enable automatic approval of the latest update revisions
In WSUS 2.0, enable automatic approval of the latest version of updates. To do this, follow these steps:
 * 1) Start the Microsoft Windows Server Update Services administration tool. To do this, click Start, point to All Programs, point to Administrative Tools, and then click Microsoft Windows Server Update Services.
 * 2) On the Home page, click Options, and then click Automatic Approval Options.
 * 3) Click Automatically approve the latest revision of the update, and then click Save settings.
 * 4) When you are prompted with a message that states that the settings have been saved, click OK.

Method 3: Create a custom tool to automatically approve definition updates
Create a tool that uses the WSUS 2.0 API. Configure this tool to automate the process for removing approval from expired definition updates. Additionally, configure this tool to automate the process for approving new definition updates.



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the &quot;Applies to&quot; section.



MORE INFORMATION
If you experience the problem that is described in the &quot;Symptoms&quot; section, you must manually remove approval from the expired definition updates. Additionally, you may have to resolve a problem in which one or more client computers stop responding during an update scan. To do this, follow these steps.

Step 1: Remove approval from expired definition updates
 On the computer that is running WSUS 2.0, start the Windows Server Update Services administration tool. On the Home page, click Updates. Create a custom filter to return all the definition updates. To do this, follow these steps: <ol style="list-style-type: lower-alpha;"> In the Products and classifications list, click Custom.</li> Click Change custom view, type Definition updates in the Custom view name box, click to clear all the check boxes under Classifications, click to select the Definition Updates check box, and then click Save.</li> In the Approval list, click Any approval.</li> In the Synchronized list, click Any time, and then click Apply.</li></ol> </li> Examine the returned results for definition updates that are approved for installation. In these results, look for definition updates that have an exclamation mark (!) next to them. These definition updates are expired.</li> Select all the definition updates that have an exclamation mark next to them, and then click Change approval.</li> In the Approval list, click Not approved, and then click OK.</li> If you are prompted to replace existing approvals, click OK.</li></ol>

Step 2: Troubleshoot stuck client computers
To resolve an issue in which a client computer stops responding during an update scan, follow these steps:
 * 1) On the affected client computer, set the startup type for the Automatic Updates service (Wuauserv) to Disabled.
 * 2) Restart the computer.
 * 3) Delete the %WINDIR%\SoftwareDistribution folder.
 * 4) Set the startup type for the Automatic Updates service to Automatic, and then start the Automatic Updates service.

<div class="references_section">