<p>Yet again I&#8217;ve run into issues with Windows Updates when using the WSUS server. This time updates could not be installed automatically on Windows 10 client even though everything was fine with the client and the WSUS server. The user received the following error message:</p>
<p><strong>Your device is missing important security and quality fixes</strong>. The Check for updates button was grayed out.</p>
<p><img class="alignnone size-full wp-image-3973" src="https://www.wincert.net/wp-content/uploads/2020/11/missing-updates.png" alt="" width="450" height="398" /></p>
<p>I have tried the usual steps like stopping the Windows Update, and BITS services along with renaming the Software Distribution folder but without luck. So, to solve this issue I just had to remove the troublesome client from the WSUS for a while.</p>
<p>In order to do that, open the registry editor by typing <em><strong>regedit</strong> </em>in the <strong>Run prompt</strong>.<br />
Navigate to the following handle to the registry key:</p>
<p><strong>Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Update\AU</strong></p>
<p>In the right pane change the Value of <strong>UseWUServer key to 0</strong>. Click <strong>OK</strong> and close the registry editor. You can also delete contents of the AU registry key leaving only the <strong>(Default) REG_SZ</strong> key.</p>
<p><img class="alignnone size-full wp-image-2907" src="https://www.wincert.net/wp-content/uploads/2019/01/windows-10-1809-rsat.png" alt="" width="695" height="543" /></p>
<p>Now, open the Services add-in by typing the <strong>services.msc</strong> in the <strong>Run prompt</strong>.<br />
Browse to <strong>Windows Update</strong> service and <strong>Restart</strong> the service.</p>
<p><img class="alignnone size-full wp-image-2908" src="https://www.wincert.net/wp-content/uploads/2019/01/windows-update-restart.png" alt="" width="638" height="275" /></p>
<p>Wait for a few minutes and you should be able to check for updates and install them manually. Once the server restarts the AU key that we have changed/deleted will be recreated again by the Group Policy.</p>
<p>If you still haven&#8217;t managed to install updates you can also temporarily move the problematic PC to another Organizational Unit (OU) in AD so you can restart it without WSUS policy being applied until you&#8217;re done.</p>
<p>As you can see below, after the changes described in this article you should be able to update this PC.</p>
<p><img class="alignnone wp-image-3977 size-full" title="Your device is missing important security and quality fixes" src="https://www.wincert.net/wp-content/uploads/2020/11/update-2-1.png" alt="Your device is missing important security and quality fixes" width="434" height="343" /> <img class="alignnone wp-image-3974 size-full" title="Your device is missing important security and quality fixes" src="https://www.wincert.net/wp-content/uploads/2020/11/update-4.png" alt="Your device is missing important security and quality fixes" width="452" height="401" /></p>
<p><img class="alignnone wp-image-3978 size-full" title="Your device is missing important security and quality fixes" src="https://www.wincert.net/wp-content/uploads/2020/11/update5-1.png" alt="Your device is missing important security and quality fixes" width="377" height="234" /></p>
<p>Comments are welcome!</p>

Your device is missing important security and quality fixes
