Microsoft Updates Installation (WSUS or Microsoft Update Site ?).

Posted on: September 22, 2012

Hello All, Prashant here again,

Since from few days I am getting my hands dirty with Microsoft update services. I am working in an environment where patching play’s very important and vital role . So , I built my lab to understand the process in depth and found some useful stuff which I want to share here.

Today , I will describe ,

  1.  Why WSUS over Microsoft Update site (Manual stuff )?
  2. Known Issues with WSUS 3.0 SP2 3.2.7600.226
  3. Can I download the updates from microsoft even my client systems are pointing to the internal WSUS server?

Question 1 : Why WSUS over Microsoft Update site (Manual stuff )?

Answer –  We all know WSUS is the central database software which distribute the updates which an administrator approves for all the server/client machines . WSUS Knocks down manual task of installing updates on all the computers ( I can not imagine , if I have 300 systems , I can not go to the systems one by one and check for updates manually every month) . Hence WSUS .

If any one what to know about this in deeper , I would suggest them to go through the below links ( Which even I did to understand the concepts)

Above link has everything if you are looking to learn WSUS  ,Specially deployment guide and installation and operations guide.

Question 2.Known Issues with WSUS 3.0 SP2 3.2.7600.226?

One of the most encountered error with WSUS 3.2.7600.226 is 800B0001 . If you see this error code in your windowsupdate.log file then it is WUAgent Compatibility issue . The Reason behind this error code is WUAgent version , Basically If any one of your client (Where this error code is popping up) has this error then first you need to check its WUAgent Version ( How to check WUAgent Version is Here ) If the WUAgent version is 7.6.7600.256 (which is the latest ) then you need to download the agent to 7.4.76000.226.

WUAgent 7.6.7600.256 will not go well with the WSUS 3.0 SP2 3.2.7600.226 , This will cause the Agent to stop searching for updates from WSUS server . Below is the link which explains it better

Downgrade procedure of WUAgent from 7.6.7600.256 to 7.4.76000.226

  • Download the WUAgent 7.4.76000.226 from here and store in it C:\Temp folder
  • Open command prompt and go to C:\Temp directroy
  • Run WindowsUpdateAgent30-<platform>.exe /quiet /norestart /wuforce . This is open up a dialog box and force the installation of WUAgent 7.4.7600.226
  • Again go to command prompt and run C:\wuauclt.exe /resetauthorization /detectnow . This is detect/reports the client to WSUS

Question 3 – Can I download the updates from microsoft even my client systems are pointing to the internal WSUS server?

Answer – Yes . You can download the udpates directly from microsoft , even if your client systems are pointing to the WSUS (Check Regsitry key on client system to know whether it is pointing to WSUS Server , Registry : HKLM/Software/Policies/Microsoft/Windows/WindowsUpdate/AU Key UseWUServer set to 1 it is using WSUS , if set to 0 then not using the WSUS).

One Can go to control panel , Automatic updates and click on install updates from “Windows Update Web Site”

Note – when you click on this , client system directly contacts and the windows update web site and  it will list out the appropriate updates . One can select the update and discard updates depending one the OS and the needs.

When you are carrying out this procedures you might see some error messages in windowupdate.log file , you can ignore them. Basically these are generated due to your client registry setting are made to contact your internal WSUS server for updates.


Hope this helps . This is what I have learnt in a month of my research 🙂 .




7 Responses to "Microsoft Updates Installation (WSUS or Microsoft Update Site ?)."

Hello, This is really helpful. Hovewer i have problem with some of my windows server 2008r2 clients, that do not let me to install older version of update manager, do You maby know how to deal with this?

Try this
WindowsUpdateAgent30-.exe /quiet /norestart /wuforce

However I am not understanding why you want downgrade the agent ? If you not updated WSUS 3.0 its time to update , Since some of your client may download latest agent and it will cause problems in downloading the updates.

Hi Prashant, thanks for this useful post. This worked well on Windows Server 2003. However, the agent 7.6.7600.256 is refusing to downgrade to 7.4.76000.226.

As you have mentioned above that 7.6.7600.256 will not work well with WSUS 3.0 SP2 3.2.7600.226 which is true.

How can the agent on Windows 2008 be downgraded to 7.4.76000.226.

If you need x64 agent download it from

and if you need 32 bit download it from

Once you have downloaded the agent try below commandlines

WindowsUpdateAgent30-.exe /quiet /norestart /wuforce.

If above does not work , then it is better to update your WSUS server with Latest update to aviod this kind of problems in future


-Prashant Girennavar.

I like the helpful info you provide on your articles.
I will bookmark your weblog and test once more right here
regularly. I am slightly certain I’ll be informed many new stuff proper here! Best of luck for the following!

I like the helpful info you provide in your articles.
I will bookmark your weblog and check again here frequently.
I am quite certain I’ll learn a lot of new stuff right here!
Best of luck for the next!

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: