Windows Update troubleshooting guidance

Try our Virtual Agent - It can help you quickly identify and fix common Windows Update issues

These solutions designed to get you started on Windows Update troubleshooting scenarios.

Troubleshooting checklist

Step 1: Run the diagnostic tool for your version of Windows

  • Windows 7, Windows 2008 R2 or Windows 2008 SP2: Run the System Readiness (CheckSUR) tool. For more information, see Fix errors that are found in the CheckSUR log file.

  • Windows 8 and later version of Windows: Open an administrative command prompt window, and then run the following command:

    Dism /online /cleanup-image /restorehealth
    

Step 2: Restart the computer

If the computer didn't restart after a previous update, pending actions may still have to be completed before you can apply new updates.

Step 3: Install the latest servicing stack update

For more information, see Latest Servicing Stack Updates.

Step 4: Check for and fix any Windows file corruption

For more information, see Fix Windows file corruption.

Step 5: Download the update package and try to install the update manually

To do this, follow these steps:

  1. Open Microsoft Update Catalog.

  2. In the search box, type the update number that you want to download, and then select Search.

  3. Find the update that applies to your operating system in the search results. Next to that update, select Add to add the update to your basket.

  4. Select View basket, and then select Download.

  5. To choose a destination for the update, select Browse, and then select Continue.

  6. When the download process finishes, select Close.

  7. Browse to the download location, and then double-click the download package to install the update.

Common issues and solutions

Error: The update is not applicable to your computer

This error has several possible causes. The following instructions help you identify the specific cause that affects you.

Step 1: Has the update been superseded?

Make sure that the update package contains newer versions of the binaries than the system that you're updating. Alternatively, check that the package is superseded by another new package.

As updates for a component are released, the updated component will supersede an older component that is already on the system. When this occurs, the previous update is marked as superseded. If the update that you're trying to install already has a newer version of the payload on your system, you might receive this error message.

Step 2: Has the update already been installed?

Verify that the package that you're trying to install isn't already installed.

Step 3: Is the update appropriate for this architecture?

  1. Verify that the package that you're trying to install matches the Windows version that you're using.

    The Windows version information can be found in the "Applies To" section of the article for each update. For example, Windows Server 2012-only updates can't be installed on Windows Server 2012 R2-based computers.

  2. Verify that the package you want to install matches the processor architecture of the Windows version that you're using.

    For example, an x86-based update can't be installed on x64-based installations of Windows.

Step 4: Have all prerequisite updates been installed?

Read the package's related article to find out if the prerequisite updates are installed. For example, if you receive the error message in Windows 8.1 or Windows Server 2012 R2, you might have to install the April 2014 update 2919355 as a prerequisite and one or more prerequisite servicing updates (KB 2919442 and KB 3173424).

To determine whether these prerequisite updates are installed, open a Windows PowerShell window and run the following command:

Get-HotFix KB3173424, KB2919355, KB2919442

If the updates are installed, the command returns the installed date in the InstalledOn section of the output.

The device isn't receiving an update that you deployed

Follow these steps to troubleshoot this issue.

  1. Check that the device's updates for the relevant category aren't paused.

    For more information, see Pause feature updates and Pause quality updates.

  2. Feature updates only: Check to see if the device might have a safeguard hold applied for the given feature update version.

    For more information about safeguard holds, see Safeguard holds and Opt out of safeguard holds.

  3. Check that the deployment to which the device is assigned has the state offering. Deployments that have the states paused or scheduled won't deploy content to devices.

  4. Check that the device has scanned for updates and is scanning the Windows Update service.

    To learn more about scanning for updates, see Scanning updates.

  5. Feature updates only: Verify that the device is successfully enrolled in feature update management by the deployment service. A device that's successfully enrolled is represented by a Microsoft Entra ID device resource. That resource documents an update management enrollment for feature updates, and has no Microsoft Entra ID device registration errors.

  6. Expedited quality updates only: Check that the device has the Update Health Tools installed (available for Windows 10 version 1809 or later in the update described in KB 4023057 - Update for Windows 10 Update Service components, or a more recent quality update).

    The Update Health Tools are required for a device to receive an expedited quality update. The program's location on the device is C:\Program Files\Microsoft Update Health Tools. To verify its presence, view the installed programs list or run the following PowerShell script:

    Get-WmiObject -Class Win32_Product | Where-Object {$_.Name -Match "Microsoft Update Health Tools"}
    

The device is receiving an update that you didn't deploy

To troubleshoot this issue, follow these steps:

  1. Check that the device is scanning the Windows Update service and not a different endpoint.

    For example, if the device is scanning for updates from a WSUS endpoint, it might receive different updates. To learn more about scanning for updates, see Scanning updates.

  2. Feature updates only: Check that the device is successfully enrolled in feature update management by the deployment service.

    A device that isn't successfully enrolled might receive different updates according to its feature update deferral period. A device that's successfully enrolled is represented by a Microsoft Entra ID device resource. That resource documents an update management enrollment for feature updates, and has no Microsoft Entra ID device registration errors.

Data collection

If you need assistance from Microsoft support, we recommend you collect the information by following the steps mentioned in Gather information by using TSS for deployment-related issues.

References