Share via

WSUS on Server 2022 will not download Windows 11 CUs

Jason Shipley 0 Reputation points
2026-04-10T17:14:55+00:00

Starting with the 2026-02 cumulative update for Windows 11, my WSUS console will not complete the download of files for Windows 11 CUs. I have started with a fresh WSUS and tried to approve only the 2026-02 or 2026-03 Windows 11 CU and it gets to 8855.29 MB of 12869.89 MB and stops there, with updates needing files: 1.

I can approve 2026-01 and it downloads without issue. Other updates approve and download without issue.

Windows for business | Windows Server | Devices and deployment | System management components
0 comments No comments

Answer recommended by moderator

Jason Shipley 0 Reputation points
2026-04-13T12:06:34.27+00:00

I'm not sure what changed since the January update, but this appeared to be related to content inspection on my Palo Alto firewall. Once I turned off content inspection for this server the update downloaded fully without issue.

Was this answer helpful?

0 comments No comments

2 additional answers

Sort by: Most helpful
  1. Adam J. Marshall 10,786 Reputation points MVP
    2026-04-11T14:30:17.4966667+00:00

    I too feel this is UUP related. I doubt this is the reason, because theoretically if you have the latest CU installed on the server you shouldn't need this, but I'm posting here just to have you verify you have the mimetypes.

    https://www.ajtek.ca/guides/how-to-prepare-for-on-prem-wsus-uup-updates/

    I can tell you that it's working for me. Just loaded my test box and synced 2026.03's 25H2 CU (12,869.98MB) successfully.

    You may or may not need to tell BITS to use Foreground priority mode.

    https://www.ajtek.ca/wsus/wsus-bits-foreground-priority-mode-vs-background-priority-mode/

    Was this answer helpful?

    0 comments No comments

  2. Scott Nguyen 1,470 Reputation points Independent Advisor
    2026-04-10T17:57:11.61+00:00

    Hello.

    I would guess that it is likely caused by the Unified Update Platform payloads. To solve this, on your WSUS server, open IIS Manager, navigate to the WSUS Administration site, and increase the maxAllowedContentLength in Request Filtering to at least 20GB so the file isn't being rejected by the web server.

    If the transfer is stuck in a transient error state, stop the BITS service and purge the metadata cache located at C:\ProgramData\Microsoft\Network\Downloader\ before restarting the service to clear the queue. Also ensure your IIS server is configured to handle .msu and .psf files by adding them to the MIME Types section if they are missing. Lastly, run wsusutil.exe reset from the C:\Program Files\Update Services\Tools directory to force WSUS to re-examine the file system and resume the download for the missing files.

    If you find my answer useful, please mark it as the "Accepted Answer" so other members can find the solution easily. Your help in supporting the community is much appreciated!
    Best regards,
    Scott Nguyen

    Was this answer helpful?

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.