Software updates still broken since july's mess
I'm hoping for some suggestions on where to go next with this. I applied the prescribed fix for the detectoid incident from MS at the very end of July (https://support.microsoft.com/en-us/servicing/os/windows/docs/2026/07/kb5121986-windows-server-update-service-sync-operations-issues-and-timeouts). I then had some planned PTO and came back just yesterday hoping that August Patch Tuesday had gone like normal but that has not been the case.
MS says "Client recovery is automatic" but this has not been my experience at all. My clients still are not getting updates. In all my SUGs almost all clients show as "unknown". Running check for updates through Settings as well as triggering SCCM client scan cycles through control panel doesn't get them fixed. Prompting them to check MS online for updates finds plenty that they require.
My ADRs are retrieving and downloading the updates and distributing them successfully. It's just that the clients don't seem to care at all. They claim proudly that they are up to date even though their last successful install was in June or July before patch Tuesday.
I tried checking the Troubleshooting 1 - Scan errors report. The biggest error count is on "content location request timeout occurred". The count of computers with that error is only 131 out of nearly 4000 machines. The Primary server has the SUP role, WSUS, and DBs all local on it. As far as I can tell they are all up and running. The server was rebooted at least once while I was away. No recent networking changes.
My server didn't seem to have a CPU problem but I changed the max connections in IIS to 100 based on the note in their article. Let it overnight last night and no change. I have not performed step 3 of the fix article to put the xml size back to default.
I'm tempted to restore the DB and try again, but I'm even more tempted to just blast away WSUS and the SUP role and reinstall them. I'm just not very confident that it will actually fix the situation.