Select the product you need help with

A WSUS client that is connected to a WSUS or Configuration Manager 2007 SUP server takes longer than expected to finish an update scan

Article ID: 938947 - View products that this article applies to.

SYMPTOMS

Consider the following scenario:

- A Microsoft Windows Server Update Services (WSUS) client computer is connected to a WSUS or Configuration Manager 2007 SUP (Software Update Services) server.

- The WSUS client computer runs a scan to determine whether an update applies to the client computer.

In this scenario, the WSUS client computer takes longer than expected to finish the scan. For example, the scan may take hours or days to finish. Additionally, you experience the following problems on the WSUS client computer:

- Task Manager indicates high CPU usage for the Svchost.exe process.

- You cannot stop the Svchost.exe process.

Back to the top | Give Feedback

CAUSE

This problem occurs if you do not decline expired definition updates or expired malicious software (also known as malware) updates on the WSUS or SUP server.

Back to the top | Give Feedback

RESOLUTION

To resolve this problem, set the option to approve update revisions on the WSUS or SUP server automatically. Also, set the option to decline expired updates on the server.

On Windows Server Update Services 3.0

Click Start, point to All Programs, point to Administrative Tools, and then click Microsoft Windows Server Update Services.
Click Options, and then click Automatic Approvals.
Click the Advanced tab, make sure that the following check boxes are selected, and then click OK:
- Automatically approve new revisions of approved updates
- Automatically decline updates when a new revision causes them to expire

On Windows Server Update Services 2.0

Click Start, point to All Programs, point to Administrative Tools, and then click Microsoft Windows Server Update Services.
Click Options, and then click Automatic Approval Options.
In the Revisions to Updates area, make sure that the Automatically approve the latest revision of the update option is selected.
Under Tasks, click Save settings, and then click OK.

Back to the top | Give Feedback

MORE INFORMATION

By default, the Automatically approve new revisions of approved updates and Automatically decline updates when a new revision causes them to expire options are selected. If you decide not to approve update revisions automatically, the WSUS server will use the older update revision. In this case, you must manually approve the update revision.

Note A revision is an update version that has changed. For example, the update version may have expired or the update version may have applicability rules that have updated.

Important The default settings for the Automatically approve new revisions of approved updates and Automatically decline updates when a new revision causes them to expire options let you maintain good performance on the WSUS network. If you do not want expired updates to be automatically declined, you can manually decline them. However, make sure that you do this periodically.

Recommended It is recommended that you run the server clean-up wizard regularly. For more information see the following Knowledge Base article:

2517455 : General guidance on optimizing WSUS client performance (http://support.microsoft.com/default.aspx?scid=kb;EN-US;2517455).

(http://support.microsoft.com/default.aspx?scid=kb;EN-US;2517455)

Troubleshoot stuck client computers

To resolve an issue in which a client computer stops responding during an update scan, follow these steps:

On the affected client computer, set the startup type for the Automatic Updates service (Wuauserv) to Disabled.
Restart the computer.
Delete the %Windir%\SoftwareDistribution folder.
Set the startup type for the Automatic Updates service to Automatic, and then start the Automatic Updates service.

Back to the top | Give Feedback