Troubleshoot Windows Update errors in Windows 10

The Windows 10 Update service enables the operating system to download and install the latest updates, along with bug fixes, security patches, and drivers. The Update Service is also the mechanism to obtain new features and offer Insider preview builds for testers. The update process has been expanded and improved for Windows 10, but it is not always problem-free, perhaps more so when it comes to system integrity, security and new patches.

When problems with updates occur, often with a specific error messages, it may be because of not being able to connect to the Microsoft update servers, or the Windows Update agent related services have stopped running, or there is a problem with the update cache, or other important components are corrupted. It is in these type of situations that you need reset the Windows Update components. Read on.

This post outlines the steps to reset the Windows Update components by using the “Windows Update Troubleshooter” utility and, if needed, actions via the Command Prompt, to manually fix Windows Update issues and restore the update process for security patches, drivers, and other features. Only use the Command Prompt options as the last recovery option. First, do the following; 1) Use the Microsoft Troubleshooter Tool, 2) Try to install the most recent update manually, 3) Check for the latest Service Stack Update, and 4) (if necessary) repair system files.

Reset Windows Update using the Troubleshooter tool

Microsoft provides a “Windows Update Troubleshooter” utility that can often repair a damaged Windows Update component.

Download and run the Windows Update Troubleshooter from Microsoft (you can choose a specific download for Windows 7 & 8, or Windows 10).

Select Windows Update and then click Next.

If you are prompted, select the Try troubleshooting as an administrator option and click Next again.

Allow time for troubleshooter to attempt to resolve any problems and choose Close.

Run the tool again, and this time choose Windows Networking Diagnostics.

Allow time for troubleshooter to attempt to resolve any problems and choose Close.

Finally, perform a restart of the computer.

Now you can attempt to update Windows 10 and see if the issues are resolved.

Perform a manual update installation

Try downloading and installing the latest Windows 10 update available manually. The steps are:

Using a web browser Head visit the Windows 10 update history website.

On the left and top side of the site page, find and choose the latest update for your version of Windows 10 and note the KB####### number of an update.

To find your Windows Version from Settings > System > About. The version number is under the Windows Specifications.

With your web browser visit the Microsoft Update Catalog website.

Enter in the Search field the KB####### number of the update you require.

Download the required update matching the type of Windows 10 that you’re running (either 32-bit (x86) or 64-bit (x64)).

Double-click the downloaded KB####### file to allow the the update to begin the install process.

Next, re-start your computer.

Now you should have the latest selected update installed. The manual update should clear the original problem with automatic Windows Update. Now run Check for updates in the Windows Settings >  Update & Security page (choose “Check for updates“).

Install the latest Servicing Stack Update for Windows

The “servicing stack” is the code that installs other operating system updates. Having the latest servicing stack update is a prerequisite to reliably installing the latest quality updates and feature updates.

To check that your computer has the most Servicing Stack Update installed:

Open Settings > System > About.

In the field “System type” see if the computer is running the 32-bit or 64-bit version of Windows 10.

With your web browser visit this Microsoft Update Catalog website.

Select and download the most recent Servicing Stack Update for the KB4090914 update matching your system type (32-bit (x86) or 64-bit (x64)).

Double-click the downloaded KB####### file to allow the the update to begin the install process.

Next, re-start your computer.

Now run Check for updates in the Windows Settings >  Update & Security page (choose “Check for updates“).

Repair corrupted system files that effect Windows Update

Windows Update can fail if any system file component of the update feature is corrupted. The steps to remedy this:

Do a right mouse click over Start.

Choose Windows PowerShell(Admin) (basically an elevated Command Prompt).

Enter the following DISM command to begin a repair of corrupted system files:

dism.exe /Online /Cleanup-image /Restorehealth

Enter the following SFC command to begin a repair of corrupted system files:

sfc /scannow

After completing the above two steps, you can now check for updates to see if the problem has been resolved.

Use command prompt to reset Windows Update components

The following steps are used to reset the Windows Update components at the Command Prompt.

Do a right mouse click over Start. Choose Windows PowerShell(Admin) (basically an elevated Command Prompt)

The command below will stop the Background Intelligent Transfer Service (BITS), Windows Update service, and Cryptographic service. Use Enter after each command:

net stop bits
net stop wuauserv
net stop appidsvc
net stop cryptsvc

You should see the message that each service has stopped successfully. If not, try to repeat the above commands for success.

Now enter following command to remove all the qmgr*.dat files created by BITS from your computer:

Del "%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Downloader\*.*"

Enter Y to confirm the removal.

Enter the following commands to totally clear the current Windows Update cache:

rmdir %systemroot%\SoftwareDistribution /S /Q
rmdir %systemroot%\system32\catroot2 /S /Q

The /S switch is used to delete the specified directory and all sub-directories. The /Q switch means to delete directories quietly without user confirmation.

If you see a message “The process cannot access the file because it is being used by another process.”, then you can repeat the above steps, as one of the services may have restarted automatically.

Now we will reset the BITS service and the Windows Update services to their default state.

Enter the following commands followed by Enter:

sc.exe sdset bits D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)
sc.exe sdset wuauserv D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)

Now we will access the System32 folder:

cd /d %windir%\system32

In the steps below we are register all the corresponding BITS and Windows Update DLL files as ‘default’ components in the Windows Registry. Use Enter after each line:

regsvr32.exe /s atl.dll
regsvr32.exe /s urlmon.dll
regsvr32.exe /s mshtml.dll
regsvr32.exe /s shdocvw.dll
regsvr32.exe /s browseui.dll
regsvr32.exe /s jscript.dll
regsvr32.exe /s vbscript.dll
regsvr32.exe /s scrrun.dll
regsvr32.exe /s msxml.dll
regsvr32.exe /s msxml3.dll
regsvr32.exe /s msxml6.dll
regsvr32.exe /s actxprxy.dll
regsvr32.exe /s softpub.dll
regsvr32.exe /s wintrust.dll
regsvr32.exe /s dssenh.dll
regsvr32.exe /s rsaenh.dll
regsvr32.exe /s gpkcsp.dll
regsvr32.exe /s sccbase.dll
regsvr32.exe /s slbcsp.dll
regsvr32.exe /s cryptdlg.dll
regsvr32.exe /s oleaut32.dll
regsvr32.exe /s ole32.dll
regsvr32.exe /s shell32.dll
regsvr32.exe /s initpki.dll
regsvr32.exe /s wuapi.dll
regsvr32.exe /s wuaueng.dll
regsvr32.exe /s wuaueng1.dll
regsvr32.exe /s wucltui.dll
regsvr32.exe /s wups.dll
regsvr32.exe /s wups2.dll
regsvr32.exe /s wuweb.dll
regsvr32.exe /s qmgr.dll
regsvr32.exe /s qmgrprxy.dll
regsvr32.exe /s wucltux.dll
regsvr32.exe /s muweb.dll
regsvr32.exe /s wuwebv.dll

With regsvr32 the use of the /s switch will silently register the above .DLL files as command components in the registry. Basically, any additional messages are suppressed by the switch.

Now we will reset the network configurations that might have been a problem.

Enter the following commands, followed by Enter on each line:

netsh winsock reset
netsh winsock reset proxy

Now we can restart the BITS service, followed by the Windows Update service, and finally the Cryptographic service.

Enter the following commands, followed by Enter on each line:

net start bits
net start wuauserv
net start appidsvc
net start cryptsvc

Now re-start the computer.

The Windows Update components have been fully reset and now you can try to check for updates. In the Windows Settings >  Update & Security page (choose “Check for updates“).

Manage when automatic updates can reboot your computer

The automatic updates in Windows 10 are never meant to be disabled (only a registry ‘hack’ or policy editor can do that; it is also bad for security), however we can manage the time window for when the system may reboot after any automatic updates (a lot of Windows updates required a system reboot). This means we can manage the restart period to not interfere with our work needs and schedule a time when it is more convenient. The steps to manage this:

Go to Windows Settings >  Update & Security page (choose “Check for updates“)

Now select the “Windows Update” near the the top of the list on the left-hand side. Now, choose “Change active hours” underneath “Check for updates“.