Select the product you need help with
- Internet Explorer
- Windows Phone
- More products
A WSUS client that is connected to a WSUS or Configuration Manager 2007 SUP server takes longer than expected to finish an update scan
Article ID: 938947 - View products that this article applies to.
Consider the following scenario:
- A Microsoft Windows Server Update Services (WSUS) client computer is connected to a WSUS or Configuration Manager 2007 SUP (Software Update Services) server.
- The WSUS client computer runs a scan to determine whether an update applies to the client computer.
In this scenario, the WSUS client computer takes longer than expected to finish the scan. For example, the scan may take hours or days to finish. Additionally, you experience the following problems on the WSUS client computer:
- Task Manager indicates high CPU usage for the Svchost.exe process.
- You cannot stop the Svchost.exe process.
This problem occurs if you do not decline expired definition updates or expired malicious software (also known as malware) updates on the WSUS or SUP server.
To resolve this problem, set the option to approve update revisions on the WSUS or SUP server automatically. Also, set the option to decline expired updates on the server.
On Windows Server Update Services 3.0
On Windows Server Update Services 2.0
By default, the Automatically approve new revisions of approved updates and Automatically decline updates when a new revision causes them to expire options are selected. If you decide not to approve update revisions automatically, the WSUS server will use the older update revision. In this case, you must manually approve the update revision.
Note A revision is an update version that has changed. For example, the update version may have expired or the update version may have applicability rules that have updated.
Important The default settings for the Automatically approve new revisions of approved updates and Automatically decline updates when a new revision causes them to expire options let you maintain good performance on the WSUS network. If you do not want expired updates to be automatically declined, you can manually decline them. However, make sure that you do this periodically.
Recommended It is recommended that you run the server clean-up wizard regularly. For more information see the following Knowledge Base article:
2517455 : General guidance on optimizing WSUS client performance (http://support.microsoft.com/default.aspx?scid=kb;EN-US;2517455).
Troubleshoot stuck client computersTo resolve an issue in which a client computer stops responding during an update scan, follow these steps:
Article ID: 938947 - Last Review: August 29, 2011 - Revision: 4.0