- Windows 10 Wsus Command Line Options
- Wsus Command Line Options
- Windows 10 Wsus Command Line Download
- Wsus Update For Windows 10
Sep 21, 2017 Run Windows Update from Command Line in Windows 10. Simply launch the Elevated command prompt in Windows 10. For that make right click on the Start button and from the WINX menu click Command Prompt admin. When UAC dialogue box appears, click to open it. Learn how to stop or start Windows update service – Windows 7, Windows 10 and server editions. Windows Commands, Batch files, Command prompt and PowerShell. Stop Windows Update service. This post explains how to stop Windows update service from command line(CMD). Make sure that you open elevated administrator command. Automatic Updates Client command line parameters Morgan Simonsen 2 Comments The Automatic Updates Client Utility (wuauclt.exe) supports a few command line parameters.
-->The wsusutil command-line utility is used in managing WSUS servers and is located in the WSUSInstallDirTools folder of WSUS servers. The table below summarizes the different parameters that can be used with this utility, and later sections explain the syntax and usage of each parameter.
Note
You can also use Windows® PowerShell® to access the WSUS 3.0 APIs from the command line.
Using the wsusutil utility
You must be an administrator to run the wsusutil utility. This utility is installed only on WSUS server machines, not on console-only installations.
Note
To see all wsusutil parameters, type wsusutil help on the command line. To see usage for each of the parameters, type wsusutil helpparameterName.
Summary of wsusutil Commands
Command | Description |
---|---|
configuressl | Updates the WSUS server registry key after the IIS configuration has changed. |
healthmonitoring | Configures health monitoring values in the database. If new values are not specified, the current values are displayed. |
export | Part of the export/import process used to synchronize a downstream WSUS without using a network connection.Exports update metadata to an export package file. You cannot use this parameter to export update files, update approvals, or server settings. |
import | The second part of the export/import process.Imports update metadata to a server from an export package file created on another WSUS server. This synchronizes the destination WSUS server without using a network connection. |
movecontent | Changes the file system location where the WSUS server stores update files, and optionally copies any update files from the old location to the new location |
listfrontendservers | Lists the front-end servers related to this WSUS server. |
deletefrontendserver | Deletes the specified front-end server from the WSUS database. |
checkhealth | Checks the health of the WSUS serve. Results will appear in the Application Event log. |
reset | Checks that every update metadata row in the database has corresponding update files stored in the file system. If update files are missing or have been corrupted, downloads the update files again. |
listinactiveapprovals | Returns a list of update titles with approvals that are in a permanently inactive state because of a change in server language settings. |
removeinactiveapprovals | Removes approvals for updates that are in a permanently inactive state because of a change in WSUS server language settings. |
usecustomwebsite | Changes the port number used by the WSUS Web services from 80 to 8530 or vice versa. |
configuressl
Updates the WSUS server registry key after the IIS configuration has changed. If this command is run with the optional parameter ServerCertificateName, it updates the certificate name. If it is run without the optional parameter, it updates the setting for host headers, if there are any. For more information about configuring SSL for WSUS, see 'Securing WSUS with the Secure Sockets Layer' in Deploying Microsoft Windows Server Update Services (http://go.microsoft.com/fwlink/?linkid=79983).
Syntax
The following command updates the host headers, if any:
wsusutil configuressl
The following command updates the server certificateName:
wsusutil configuresslServerCertificateName//sets the server certificate name
Parameter | Description |
---|---|
ServerCertificateName | An optional parameter. When present, it provides the name in the Issued to field of the server certificate. |
Output
The output from the wsusutil configuressl command is the address of the WSUS Web site (including the port number), for example https://serverName:443.
healthmonitoring
This command sets and gets the different parameters for WSUS health monitoring.
Syntax
Wsusutil healthmonitoringparameterName
Note
You may set or get only one parameter at a time.
Parameter | Description | ||
---|---|---|---|
IntervalsInMinutes[DetectInterval] [RefreshInterval] | Sets the values for detect and refresh intervals. If the detect interval is 0, the detect cycle will not run. If the refresh interval is 0, the refresh cycle will not run. For more information about the detect and refresh cycles, see Health Monitoring in WSUS 3.0. | ||
DiskSpaceInMegabytes[ErrorLevel] [WarningLevel] | Sets the amount of available disk space (in megabytes) at which a low disk space warning or error event should be logged. | ||
CatalogSyncIntervalInDays[Days] | Sets the number of days that should have passed after synchronization before a warning event should be logged.. | ||
InstallUpdatesInPercent[WarningPercent][ErrorPercent] | Sets the percentage of update installation failures at which a warning or error event should be given. | ||
InventoryInPercen[WarningPercent][ErrorPercent] | Sets the percentage of inventory reporting failures at which a warning or error should be given. | ||
SilentClientsInPercent[WarningPercent][ErrorPercent] | Sets the percentage of clients not reporting to the server at which a warning or error should be given. | ||
SilentClientsInDays[Days] | Sets the number of days clients can fail to report before an error should be given. | ||
TargetComputersInPercent[WarningPercent][ErrorPercent] | Sets the maximum percentage of target computers reporting to this server below which a warning or error event should be given. For example, if you set values of 80 and 60, a warning event will be logged if only 80 percent of computers have reported, and an error event will be logged if only 60 percent of computers have reported. | ||
CheckAclson|off | If on, health monitoring should check ACLs on the relevant directories. | ||
CheckForLowDiskSpaceon|off | If on, health monitoring should check for low disk space. | ||
CheckForCatalogSyncFailureson|off | If on, health monitoring should check for catalog synchronization failures. | ||
CheckForContentSyncFailureson|off | If on, health monitoring should check for content synchronization failures. | ||
CheckForEmailNotificationFailureson|off | If on, health monitoring should check for e-mail notification failures. | ||
CheckSelfUpdateon|off | If on, health monitoring should check for client self-update failures. | ||
CheckClientsExiston|off | If on, health monitoring should check whether this server has any clients. | ||
CheckForUpdateInstallFailureson|off | If on, health monitoring should check for update installation failures. | ||
CheckForInventoryFailureson|off | If on, health monitoring should check for clients failing to report inventory.. | ||
CheckForSilentClientson|off | If on, health monitoring should check for clients that have failed to report to the server. | ||
CheckForTooManyClientson|off | If on, health monitoring should check whether the number of clients is approaching the maximum number allowed. | ||
CheckReportingWebServiceon|off | If on, health monitoring should check the Reporting Web service. | ||
CheckApiRemotingWebServiceon|off | If on, health monitoring should check the API Remoting Web service. | ||
CheckServerSyncWebServiceon|off | If on, health monitoring should check the Server Synchronization Web service. | ||
CheckClientWebServiceon|off | If on, health monitoring should check the client Web service. | ||
CheckSimpleAuthWebServiceon|off | If on, health monitoring should check the Simple Authentication Web service. | ||
CheckDssAuthWebServiceon|off | If on, health monitoring should check the Downstream Server Authentication Web service. |
Output
The output from wsusutilparamName is usually the current state of the given parameter. Some examples are given below:
wsusutil healthmonitoringIntervalsInMinutes
Output:
Detect interval: 10 min, Refresh interval: 360 min
wsusutil healthmonitoringDiskSpaceInMegabytes
Output:
Error level: 200 MB, Warning level: 500 MB
However, with the parameters setting on or off the different health monitoring checks (for example, wsusutil healthmonitoringCheckAcls), the output will simply be a warning that the WSUS Service must be stopped and restarted for the change to take effect.
export
For more information about exporting and importing updates, see 'Set Up a Disconnected Network (Import and Export Updates)' in Deploying Microsoft Windows Server Update Services (http://go.microsoft.com/fwlink/?linkid=79983).
Syntax
wsusutil exportpackagelogfile
Parameter | Description |
---|---|
package | The path and file name of the package .cab to create. |
logfile | The path and file name of the log file to create. |
Note
Exporting from a WSUS 2.0 server to a WSUS 3.0 server (or from a WSUS 3.0 server to a WSUS 2.0 server) is not supported.
Import
For background and procedural information about exporting and importing updates, see 'Set Up a Disconnected Network (Import and Export Updates)' in Deploying Microsoft Windows Server Update Services (http://go.microsoft.com/fwlink/?linkid=79983).
Syntax
wsusutil importpackagelogfile
Parameter | Description |
---|---|
package | The path and file name of the package .cab to import. |
logfile | The path and file name of the log file to import. |
![Line Line](/uploads/1/2/6/8/126887913/670928680.png)
Note
Importing from a WSUS 2.0 server to a WSUS 3.0 server (or from a WSUS 3.0 server to a WSUS 2.0 server) is not supported.
Movecontent
When you run this command, wsusutil does the following:
- Copies the update files from the old location to the new location. The old location is not deleted.
- Updates the WSUS database to refer to the new location of the update files.
- Ensures that the content and metadata are synchronized. This check is always run, even if the –skipcopy parameter is used.
The destination folder to which update files are moved must be on an NTFS partition. The utility will not try to copy update files if they already exist in the destination folder. The destination folder will have the same permissions that were set on the original folder.
Note
You can use xcopy, the Backup utility, or other methods to copy update files from the old location to the new one. If you copy the files by using a method other than wsusutil, you still need to run wsusutil to perform the second part of the move, using the -skipcopy parameter. See the 'Syntax' section for more information.
There are two scenarios in which you might move update files from one WSUS drive to another:
- If the drive is full
- If the hard disk fails
If the drive is full
If the drive where WSUS stores update files is full, you can do one of the following:
- Add more space to your current drive by using NTFS functionality. This operation can be done without using wsusutil, because it does not affect WSUS configuration or operation.
- Install a new drive, and then move the update files from the old drive to the new location by using wsusutil.
If the hard disk fails
If the hard disk fails, you must do the following:
- Install the new disk on your computer, and then restore the update files from your backup files. Note: If you have not backed up your update files, WSUSutil.exe downloads the missing files at the end of the content move operation.
- Run wsusutil movecontentnewLocation, specifying the location for the new disk. In addition, you specify the -skipcopy parameter, because you are either putting the files in the new folder through the backup utility or the source folder does not exist; the update files will be downloaded at the end of this process.
- When the move operation is complete, all the missing files are downloaded.
Syntax
wsusutil movecontentcontentpath logfile-skipcopy
Parameter | Description |
---|---|
contentpath | The new root for content files. The path must exist. |
logfile | The path and file name of the log file to create. |
-skipcopy | Indicates that only the server configuration should be changed, and that the content files should not be copied. |
listfrontendservers
This command lists the different front-end servers in a network load balancing configuration. It can be useful in troubleshooting a NLB (network load balancing) configuration and after setting up a new front-end server to make sure that it is configured properly.
deletefrontendserver
This command deletes the given front-end server.
Syntax
wsusutil deletefrontendserverserverName
Parameter | Description |
---|---|
serverName | The name of the front-end server to be deleted. |
Important
This command removes the front-end server from the database only. You will need to run wsussetup /u on the front-end server to uninstall WSUS.
checkhealth
This command checks the health of the WSUS server. The health check is configured by wsusutil healthmonitoring). The results are written to the event logs.
Syntax
wsusutil checkhealth
reset
You use this command if you store updates locally on your WSUS server and want to ensure that the metadata information stored in your WSUS database is accurate. With this command, you verify that every update metadata row in the WSUS database corresponds to update files stored in the local update file storage location on your WSUS server. If update files are missing or have been corrupted, WSUS downloads the update files again. This command might be useful to run after you restore your database, or as a first step when troubleshooting update approvals.
Syntax
wsusutil reset
Windows 10 Wsus Command Line Options
listinactiveapprovals
If you change language options on an upstream WSUS server, the number of approved updates on the upstream server may not match the number of approved updates on a replica server. For example, consider the following scenario. You configure your upstream server to synchronize all languages, then synchronize and approve 300 updates, of which 50 are non-English language updates. Afterward, you change the language setting on the server to English only. Later, a replica server synchronizes from the upstream server and downloads the 'active' approvals, which now are only the English language ones (replica servers synchronize only active approvals). At this point, you will see 300 updates approved on the upstream server, but only 250 approved on the replica server. You can use listinactiveapprovals to see a list of the updates on the parent upstream server that are permanently inactive—in this case, the 50 updates that are not English. You do not have to run this command before running the removeinactiveapprovals command.
Syntax
wsusutil listinactiveapprovals
removeinactiveapprovals
See the explanation above for a description of situations in which you might need to use removeinactiveapprovals. You do not have to run the listinactiveapprovals command before running this command.
Syntax
wsusutil removeinactiveapprovals
usecustomwebsite
If you set this value to true, WSUS Setup will use port 8530 for its Default Web site. If you set it to false, WSUS will use port 80.
Important
You must use this command before you configure SSL.
Important
If you are installing SharePoint on the same machine as WSUS, the value of usecustomwebsite should be set to true before the install.
Important
Using this command after running WSUS Setup will fail if the index of the default Web site is set to a value other than 1.
Syntax
wsusutil usecustomwebsite true
Windows Update is an essential component on every major release of Windows 10, as it allows the OS to download and install the latest updates with bug fixes, security patches, and drivers. Also, on Windows 10, it’s also the mechanism to obtain new feature updates and preview builds. However, there will times when your device may not be able to download or install updates, because of a specific error message, Windows Update not being able to connect to the Microsoft servers, and many other problems.
Usually, users may come across this type of problems when the Windows Update agent related services stop working, there’s an issue with the update cache, or some components are corrupted. In these situations, you can reset the Windows Update on Windows 10 to fix most problems.
In this guide, you’ll learn the steps to reset the Windows Update components using the “Windows Update Troubleshooter” utility and the instructions to use Command Prompt to manually fix Windows Update and get security patches, drivers, and features downloading again on your computer. However, before using the Command Prompt option, make sure to use the instructions to install the most recent update manually, Service Stack Update (SSU), and repairing system files first.
Wsus Command Line Options
How to reset Windows Update using Troubleshooter tool
Use these steps to reset the Windows Update components using the automated troubleshooter:
- Download the Windows Update Troubleshooter from Microsoft.
- Double-click the WindowsUpdateDiagnostic.diagcab file to run the troubleshooter.
- Select the Windows Update option.
- Click the Next button.
- Click the Try troubleshooting as an administrator option (if applicable). Re-select your option and click the Next button again.
- Click the Close button.
- Open Windows Update Troubleshooter again.
- Select the Windows Networking Diagnostics option to resolve any networking issues preventing updates from downloading.
- Click the Next button.
- Click the Close button.
- Restart your computer.
Once your PC restarts try to update Windows 10 one more time and now it should work as expected.
How to fix Windows Update installing latest update manually
Use these steps to install an update manually, which can help to fix problems with Windows Update on Windows 10:
- Open the Windows 10 update history website.
- In the left pane, browse the latest update for your version of Windows 10 and note the KB number of the update.Quick tip: You can check your current version on Settings > System > About, and under the “Windows Specifications” section, see the version information.
- Open the Microsoft Update Catalog website.
- Search for the knowledge base (KB) number of the update.
- Download the update for version of Windows 10 that you’re running (32-bit (x86) or 64-bit (x64)).
- Double-click the file to install the update.
- Restart your computer.
Once you complete the steps, the device should have the latest update installed. The update should have also fixed the problem with Windows Update. You can check clicking the Check for updates button in the Windows Update settings page.
How to fix Windows Update installing latest Servicing Stack Update (SSU)
Use these steps to make sure your computer has the most recent Servicing Stack Update to fix Windows Update problems on Windows 10:
- Open Settings.
- Click on System.
- Click on About.
- Under the “System type” section, check whether you’re running the 32-bit or 64-bit version of Windows 10.
- Open the Microsoft Update Catalog website.
- Download the most recent Servicing Stack Update which is described as KB4090914 for version you’re running (32-bit (x86) or 64-bit (x64)).
- Double-click the file to install the update.
- Restart your computer.
After restarting your device, you should now be able to download and install the update using the Settings app.
How to fix Windows Update repairing corrupted system files
Use these steps to repair system files using Deployment Image Servicing and Management (DISM) and System File Checker (SFC) to fix Windows Update problems:
- Open Start.
- Search for Command Prompt, right-click the top result, and select the Run as administrator option.
- Type the following DISM command to repair corrupted system files and press Enter:
- Type the following SFC command to repair system files and press Enter:
Windows 10 Wsus Command Line Download
After completing the steps, Windows Update should have been repaired, and you can check for updates again to verify.
Wsus Update For Windows 10
How to reset Windows Update using Command Prompt
Use these steps to reset the Windows Update components manually using Command Prompt on Windows 10:
- Open Start.
- Search for Command Prompt, right-click the top result, and select the Run as administrator option.
- Type the following commands to stop the Background Intelligent Transfer Service (BITS), Windows Update service, and Cryptographic service, and press Enter on each line:Quick Tip: You may need to run the command more than ones until you see the message that the service has stopped successfully.
- Type the following command to delete all the qmgr*.dat files created by BITS from your PC. and press Enter:
- Type Y to confirm the deletion.
- Type the following commands to clear the Windows Update cache to allow Windows 10 re-download the updates, instead of using the files already downloaded on your system that might be damaged and press Enter on each line:Quick Tip: We’re using the remove directory
rmdir
command with the/S
switch to delete the specified directory and all subdirectories within the main folder, and the/Q
switch is used to delete directories quietly without confirmation. If you get the message “The process cannot access the file because it is being used by another process.”, then repeat step 1 and try again, as one of the services might have restarted unexpectedly. - Type the following commands reset the BITS and Windows Update services to their default security descriptor, and press Enter on each line:
- Type the following command to move to the System32 folder and press Enter:
- Type the following commands to register all the corresponding BITS and Windows Update DLL files on the Registry, and press Enter on each line:Note:
regsvr32
is a command-line tool that will help you to register .DLL files as command components in the registry, and we’re using the/S
switch to specify the tool to run the command silently without prompting additional messages. - Type the following commands to reset the network configurations that might be part of the problem (but do not restart your computer just yet), and press Enter on each line:
- Type the following commands to restart the BITS, Windows Update, and Cryptographic services, and press Enter on each line:
- Restart your computer.
Once you have successfully completed the process Windows Update should have reset and it should be working again on your Windows 10 device.
You can also use the above instructions to fix the problem when Surface Pro 6, Surface Book, Surface Laptop, or any other Surface can’t seem to download a new firmware update.
![Windows 10 Wsus Command Line Windows 10 Wsus Command Line](https://www.administrator.de/images/c/1/5/7bad90415364354bfe1219644fbd6124.jpg)
Update May 30, 2019: This guide has been updated to reflect to work with the latest version of Windows 10. (Originally published on February 2016, updated on May 2018.)
Windows 10 update KB4497935 (build 18362.145) releases for version 1903How to upgrade Windows 10 mounting an ISO file in File ExplorerDifficulty level: AdvancedHow-ToWindowsWindows 10Windows 10 Help