At one client, Server 2012 R2 Essentials is telling me every day that important updates should be installed on client computers. But automatic updates are enabled for several hours during the night; why aren’t the updates being installed automatically?
The update in question is KB3101488, an important update to Office 2013. As you can see, it is marked Important, but is not checked for installation:
Using a handy-dandy PowerShell script, we can confirm that the update is not optional (not “BrowseOnly”), although it’s interesting that its MsrcSeverity is blank:
Also, we see the following:
AutoSelection = 1 (AutoSelectIfDownloaded)
AutoDownload = 2 (AlwaysAutoDownload)
So if it’s supposed to download, and to be selected if downloaded, why isn’t it?
It’s Update Regulation
This thread has the clue: it’s being regulated, i.e. throttled. Sure enough, checking C:\Windows\windowsupdate.log, we can see the download being skipped:
2015-11-20 03:00:45:879 1188 17cbc DnldMgr *********
2015-11-20 03:00:45:879 1188 17cbc DnldMgr * Call ID = {CD0E3362-2A58-44EB-9E9D-CF4DF40E4C34}
2015-11-20 03:00:45:879 1188 17cbc DnldMgr * Priority = 2, Interactive = 0, Owner is system = 1, Explicit proxy = 0, Proxy session id = -1, ServiceId = {7971F918-A847-4430-9279-4A52D1EFE18D}
2015-11-20 03:00:45:879 1188 17cbc DnldMgr * Updates to download = 1
2015-11-20 03:00:45:879 1188 17cbc Agent * Title = Update for Microsoft Outlook 2013 (KB3101488) 64-Bit Edition
2015-11-20 03:00:45:879 1188 17cbc Agent * UpdateId = {9C56823C-51E8-4840-AC3C-1F3C086DC1CA}.200
2015-11-20 03:00:45:879 1188 17cbc Agent * Bundles 1 updates:
2015-11-20 03:00:45:879 1188 17cbc Agent * {BB22A821-AA44-4A82-B603-D01DAC50C061}.200
2015-11-20 03:00:45:879 1188 17cbc DnldMgr *********** DnldMgr: Regulation Refresh [Svc: {7971F918-A847-4430-9279-4A52D1EFE18D}] ***********
2015-11-20 03:00:45:879 1188 17cbc DnldMgr Contacting regulation server for 2 updates.
2015-11-20 03:00:45:879 1188 17cbc Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\wuredir.cab with dwProvFlags 0x00000080:
2015-11-20 03:00:45:895 1188 17cbc Misc Microsoft signed: NA
2015-11-20 03:00:45:895 1188 17cbc Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\wuredir.cab with dwProvFlags 0x00000080:
2015-11-20 03:00:45:895 1188 17cbc Misc Microsoft signed: NA
2015-11-20 03:00:45:895 1188 17cbc Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\TMP80A2.tmp with dwProvFlags 0x00000080:
2015-11-20 03:00:45:895 1188 17cbc Misc Microsoft signed: NA
2015-11-20 03:00:45:895 1188 17cbc Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\wuredir.cab with dwProvFlags 0x00000080:
2015-11-20 03:00:45:895 1188 17cbc Misc Microsoft signed: NA
2015-11-20 03:00:45:910 1188 17cbc Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\wuredir.cab with dwProvFlags 0x00000080:
2015-11-20 03:00:45:910 1188 17cbc Misc Microsoft signed: NA
2015-11-20 03:00:45:910 1188 17cbc Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\TMP80B3.tmp with dwProvFlags 0x00000080:
2015-11-20 03:00:45:910 1188 17cbc Misc Microsoft signed: NA
2015-11-20 03:00:45:910 1188 17cbc DnldMgr Regulation server path: https://fe2.update.microsoft.com/v6/UpdateRegulationService/UpdateRegulation.asmx.
2015-11-20 03:01:01:557 1188 17cbc DnldMgr Per-Update: bb22a821-aa44-4a82-b603-d01dac50c061 at rate 0
2015-11-20 03:01:01:557 1188 17cbc DnldMgr * Regulation call complete. 0x00000000
2015-11-20 03:01:01:557 1188 17cbc DnldMgr *********** DnldMgr: New download job [UpdateId = {BB22A821-AA44-4A82-B603-D01DAC50C061}.200] ***********
2015-11-20 03:01:01:557 1188 17cbc DnldMgr Regulation: {7971F918-A847-4430-9279-4A52D1EFE18D} - Update BB22A821-AA44-4A82-B603-D01DAC50C061 is "PerUpdate" regulated and can NOT download. Sequence 5160 vs AcceptRate 0.
2015-11-20 03:01:01:557 1188 17cbc DnldMgr * Update is not allowed to download due to regulation.
2015-11-20 03:01:01:557 1188 17cbc DnldMgr Regulation: {7971F918-A847-4430-9279-4A52D1EFE18D} - Update BB22A821-AA44-4A82-B603-D01DAC50C061 is "PerUpdate" regulated and can NOT download. Sequence 5160 vs AcceptRate 0.
2015-11-20 03:01:01:557 1188 17cbc DnldMgr Regulation: {7971F918-A847-4430-9279-4A52D1EFE18D} - Update BB22A821-AA44-4A82-B603-D01DAC50C061 is "PerUpdate" regulated and can NOT download. Sequence 5160 vs AcceptRate 0.
2015-11-20 03:01:01:557 1188 17cbc Agent *********
2015-11-20 03:01:01:557 1188 17cbc Agent ** END ** Agent: Downloading updates [CallerId = AutomaticUpdates]
2015-11-20 03:01:01:557 1188 17cbc Agent *************
WHY it’s being regulated is not known but once it comes off regulation, it should install automatically.
Pingback: Print Detailed Windows Update Information | MCB Systems