Windows Server Update Services 2.0: Over time, client computers that obtain updates from Windows Server Update Services 2.0 take longer to scan for updates and to apply updates

SUPPORT SOLUTION:
You use Microsoft Windows Server Update Services (WSUS) 2.0 to deploy software updates to client computers. However, over time, the client computers that obtain updates from WSUS 2.0 take longer to scan for updates and to apply updates. Sometimes, the client computers stop responding (hang) during the installation of updates.You experience this problem if WSUS 2.0 is configured as follows:On the Automatic Approval Options page of the WSUS administration tool, the following option is selected under Revisions to Updates:Continue using the older revision and manually approve the new update revisionOn the Synchronization Options page of the WSUS administration tool, the Definition Updates check box is selected in the Add/Remove Classifications — Web Page Dialog box.Note If you have Microsoft Forefront Client Security or Windows Defender installed, the Definition Updates check box appears in this dialog box.This problem occurs because approval is not automatically removed from earlier definition updates if the following option is selected in WSUS 2.0:Continue using the older revision and manually approve the new update revision Definition updates are frequently updated. In this situation, the earlier definitions expire. We recommend that you approve the latest version of a definition update and, at the same time, remove approval from the expired version of a definition update. If the Automatically approve the latest revision of the update option is selected in WSUS 2.0, approval is automatically removed from the expired version of the definition update. However, if the Continue using the older revision and manually approve the new update revision option is selected, approval is not automatically removed from expired definition updates. Therefore, over time, many definition updates may remain approved for installation by WSUS clients. Therefore, client computers may experience longer scan times. Or, client computers may stop responding during the installation of updates.
.To work around this issue, use one of the following methods. .Method 1: Install WSUS 3.0
2, ‘workaround’);
Obtain WSUS 3.0, and then install it. For more information about how to obtain WSUS 3.1, visit the following Microsoft Web site:http://www.microsoft.com/downloads/details.aspx?FamilyId=F87B4C5E-4161-48AF-9FF8-A96993C688DF&displaylang=en
(http://www.microsoft.com/downloads/details.aspx?FamilyId=F87B4C5E-4161-48AF-9FF8-A96993C688DF&displaylang=en)
Important The problem that is described in the “Symptoms” section no longer occurs after you install WSUS 3.0. However, if you experience this problem, you must manually remove approval from the existing expired definition updates. For more information about how to do this, see the “More Information” section..Method 2: Enable automatic approval of the latest update revisions
2, ‘workaround’);
In WSUS 2.0, enable automatic approval of the latest version of updates. To do this, follow these steps:Start the Microsoft Windows Server Update Services administration tool. To do this, click Start, point to All Programs, point to Administrative Tools, and then click Microsoft Windows Server Update Services.On the Home page, click Options, and then click Automatic Approval Options.Click Automatically approve the latest revision of the update, and then click Save settings.When you are prompted with a message that states that the settings have been saved, click OK..Method 3: Create a custom tool to automatically approve definition updates
2, ‘workaround’);
Create a tool that uses the WSUS 2.0 API. Configure this tool to automate the process for removing approval from expired definition updates. Additionally, configure this tool to automate the process for approving new definition updates.
.Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the “Applies to” section..If you experience the problem that is described in the “Symptoms” section, you must manually remove approval from the expired definition updates. Additionally, you may have to resolve a problem in which one or more client computers stop responding during an update scan. To do this, follow these steps..Step 1: Remove approval from expired definition updates

On the computer that is running WSUS 2.0, start the Windows Server Update Services administration tool.On the Home page, click Updates.Create a custom filter to return all the definition updates. To do this, follow these steps:In the Products and classifications list, click Custom.Click Change custom view, type Definition updates in the Custom view name box, click to clear all the check boxes under Classifications, click to select the Definition Updates check box, and then click Save.In the Approval list, click Any approval.In the Synchronized list, click Any time, and then click Apply.Examine the returned results for definition updates that are approved for installation. In these results, look for definition updates that have an exclamation mark (!) next to them. These definition updates are expired.Select all the definition updates that have an exclamation mark next to them, and then click Change approval.In the Approval list, click Not approved, and then click OK.If you are prompted to replace existing approvals, click OK..Step 2: Troubleshoot stuck client computers

To resolve an issue in which a client computer stops responding during an update scan, follow these steps:On the affected client computer, set the startup type for the Automatic Updates service (Wuauserv) to Disabled.Restart the computer.
Delete the %WINDIR%\SoftwareDistribution folder.
Set the startup type for the Automatic Updates service to Automatic, and then start the Automatic Updates service.
.

For more information, click the following article number to view the article in the Microsoft Knowledge Base:

927891 

(http://support.microsoft.com/kb/927891/
)

You receive an access violation error and the system may appear to become unresponsive when you try to install an update from Windows Update or from Microsoft Update

.

For File Repair and Data Recovery, visit File Repair / Data Recovery