Windows Update is Reporting That My Device is Missing Important Securtiy fixes

Topic

New Reply

For several years I have been using wushnhide along with GPedit to pause updates on four pc’s until Susan says they are safe. I currently have October updates hidden. Windows Defender anti virus update are installed daily.

This weekend Windows Update on all four PC’s started stating You’re not up to date. In red its says: Your device is missing important security and quality fixes.

This has never happened since I have been hiding updates until end of month.
I checked GPedit and it is set to stay on Windows 10, version 22H2.

This looks like Windows is going to install something. Not sure how to proceed so I don’t end up with updates I don’t want.

I have attached screen shot of Windows Update message.

Do I need to take some action to prevent unwanted updates?

Thanks for any advice to correct this.

Moderator’s Note: Topic spammed by mistake. Please accept our humblest apologies.

Reply | Quote

Replies

Click on “view configured update policies” at the top of Windows Update. Review all the GP policies to be sure there is nothing extra causing the problem. Be sure you have set “2” (notify download/install). Also, check what updates you have hidden to be sure you are not hiding ones you want to install.
If you don’t find anything, do the following.

In an elevated Command Prompt (cmd.exe run as Administrator) type:

chkdsk /f

it will ask you to reboot, choose Yes. Note any errors and report here.

Log back in after the reboot. In an elevated Command Prompt type:

DISM /Online /Cleanup-Image /RestoreHealth
note any errors, then
sfc /scannow
note any errors that the two commands report and report here.

Reply | Quote

Thanks for responding PKCano. I have an SSD for “C” drive. I’ve read in the past that chkdsk /f is not recommended for SSD’s. Will running this cause any issues?

view configured update policies looks ok. Only the items I have configured with GPedit are listed.

Reply | Quote

Running CHKDSK on SSDs is perfectly safe, although the firmware on an SSD should perform the same function. However, running DEFRAG is not recommended on SSDs.

https://www.crucial.com/support/articles-faq-ssd/my-ssd-has-bad-sectors

1 user thanked author for this post.

jimmythesaint53

Reply | Quote

OK, skip the chkdisk with the SSD.
In Group Policy, under Windows Update, Enable “Configure Automatic Updates.” Set the value to “2” (notify download/install). This will keep the updates from downloading when Windows Updates scans for updates until you click on “Download” (NOT “Check for Updates”).

Right click on wushowhide, in the Digital Signatures tab, be sure you have the sha256 version. If not, there is a download link in AKB2000016.

Run the DISM and sfc commands. Sometimes corrupt system files can stop WU from scanning. Report any errors.
Then try running wushowhide again to see what’s pending. (I am assuming you do not have “Pause” set, as it prevents Windows Update AND wushowhide from scanning by disabling the Windows Update Service)

Reply | Quote

skipped chkdsk. Group policy was configured properly upon check. Wushowhide version is correct. DISM did not find anything wrong. SFC found corrupted files and repaired them.Pause is not in use.

Restarted and checked WU and nothing has changed. Ran wushowide and found two Defender anti virus updates to download.

Reply | Quote

I was looking around update history and found that the last quality update installed was 2024-07 Cumulative Update. It is the same on all four computers. I follow Susan Bradley’s update recommendations every month.

I have installed all recommended updates on all four PC’s for August and September, but they have vanished.

When checking Wushowhide hide or hidden updates, I only see October updates that I have hidden until safe to install.

Reply | Quote

PKCano wrote:

OK, skip the chkdisk with the SSD.
In Group Policy, under Windows Update, Enable “Configure Automatic Updates.” Set the value to “2” (notify download/install). This will keep the updates from downloading when Windows Updates scans for updates until you click on “Download” (NOT “Check for Updates”).

Right click on wushowhide, in the Digital Signatures tab, be sure you have the sha256 version. If not, there is a download link in AKB2000016.

Run the DISM and sfc commands. Sometimes corrupt system files can stop WU from scanning. Report any errors.
Then try running wushowhide again to see what’s pending. (I am assuming you do not have “Pause” set, as it prevents Windows Update AND wushowhide from scanning by disabling the Windows Update Service)

I don’t know why this topic was marked as SPAM. My issue remains unresolved and I don’t seem to be able to post to the forum for additional help.

Moderator’s Note: Entire topic was accidentally marked as spam, but is now restored. Please accept our humblest apologies for the error.

Reply | Quote

Going forward, consider image backups. They are my monthly updates stress buster. With an up to the moment image backup at the ready and tucked safely away on two drives, taking the monthly update is stress free. Same goes for all the command line drive diagnostics including chkdsk /f.

I’ve used chkdsk /f on my SSD drives for years without an issue.

Again, the above is for consideration. We all do what we what we do as our comfort level permits.

Desktop Asus TUF X299 Mark 1, CPU: Intel Core i7-7820X Skylake-X 8-Core 3.6 GHz, RAM: 32GB, GPU: Nvidia GTX 1050 Ti 4GB. Display: Four 27" 1080p screens 2 over 2 quad.

1 user thanked author for this post.

jimmythesaint53

Reply | Quote

The Windows Update ‘mechanism’ has long been a complex and fragile beast. I realise that they are ‘all the rage’ on this site but it is the many cases like these that convince me not to use WU managers – just use the Pause function if you don’t want to install updates on the day of release.

First of all, I would try Windows’ own built-in Troubleshooter for Windows Update:

Start > Settings > Windows Update > Troubleshoot > Additional Troubleshooters > Windows Update

Run the Troubleshooter and restart your device at the end of the process.

Second, ensure Fast Start-Up is switched OFF and do a few Shut Downs / Start Ups – as well as Restarts – over the next few days. If you start your device up in the morning, leave it alone for a good 20 minutes or so; Windows Update problems like this will often ‘wash their way through’ the system.

1 user thanked author for this post.

jimmythesaint53

Reply | Quote