Microsoft has mounted a recognized subject stopping Windows 11 24H2 function updates from being delivered by way of Windows Server Update Services (WSUS) after putting in the April 2025 safety updates.
WSUS was launched as Software Update Services (SUS) virtually twenty years in the past, and it’s designed to assist IT admins defer, approve, and schedule updates for Microsoft merchandise on massive enterprise networks from a single native replace server as a substitute of counting on endpoints to replace from Microsoft’s servers on their very own.
Redmond confirmed the Windows 11 24H2 improve issues in late April following widespread experiences throughout on-line platforms, together with Reddit and its personal neighborhood web site.
As the corporate stated when it acknowledged this subject, affected customers see Windows Update Service (wuauserv) errors with 0x80240069 codes when trying to replace programs working Windows 11 23H2 or Windows 11 22H2.
Luckily, house customers are unlikely to expertise these replace issues since WSUS is designed for use solely in enterprise and enterprise environments.
“Devices which have put in the April Windows month-to-month safety replace, launched April 8, 2025, or later (beginning with KB5055528) may be unable to replace to Windows 11 24H2 by way of Windows Server Update Services (WSUS),” Microsoft stated final month in a Windows launch well being replace.
“As a part of this subject, the obtain of Windows 11 24H2 doesn’t provoke or full. Windows updates log can present error code 0x80240069, and additional logs would possibly embody textual content much like ‘Service wuauserv has unexpectedly stopped’.”
Fix out there by way of Known Issue Rollback
While the repair just isn’t but delivery to all prospects by way of Windows Update, Microsoft is now rolling it out mechanically by way of Known Issue Rollback (KIR) to all enterprise-managed units.
To deal with it on impacted Windows enterprise-managed units, Windows admins should set up this Known Issue Rollback Group Policy on impacted endpoints working Windows 11 22H2 and 23H2.
To deploy the coverage, use the Group Policy Editor to decide on the Windows model you need to goal within the Local Computer Policy or the Domain coverage on the area controller, and restart the affected machine(s) to use the group coverage setting.
Microsoft gives extra steering on deploying and configuring KIR Group Policies on its documentation web site.
The firm can also be engaged on addressing what it described as a “latent code subject” that’s inflicting some PCs to be upgraded to Windows 11 regardless of Intune insurance policies designed to dam Windows 11 upgrades.
This just isn’t the primary occasion in latest months the place Windows programs have been upgraded with out prior discover. Microsoft acknowledged in November that some Windows Server 2019 and Windows Server 2022 units had been upgraded to Windows Server 2025 with out consumer consent.
Based on an evaluation of 14M malicious actions, uncover the highest 10 MITRE ATT&CK strategies behind 93% of assaults and the best way to defend towards them.