WIndows Update on Server 2019

Having problems with Windows Update on a Windows Server 2016 on AWS Lightsail. 

AWS turn off Windows Update by default, and there is some other tool AWS uses to process update, however I don't think it manages LightSail machines. 

I made some changes to the group policy, and that seems to have started Windows Updates, but they don't seem to be installable on demand. 

I found this at https://docs.microsoft.com/en-us/answers/questions/356003/windows-10-updates-kb2267602-security-intelligence.html

Run Windows update troubleshooter firstly, this tool can diagnose and repair update issue automatically.

Then, restart computer and check for updates again.

If still no help, reset Windows update component manually:

Open an elevated command prompt windows, type the following commands one after the other, and hit Enter:

• net stop wuauserv
• net stop bits
• rename c:\windows\SoftwareDistribution SoftwareDistribution.bak
• net start wuauserv
• net start bits

Open an elevated Command Prompt, type the following command one after the other and hit Enter:

• net stop cryptsvc
• md %systemroot%\system32\catroot2.bak
• xcopy %systemroot%\system32\catroot2 %systemroot%\system32\catroot2.bak /s

Move to C:\Windows\System32\catroot2.

• Then, Delete everything from this folder ( C:\Windows\System32\catroot2) 

Now, Run the following command.

• net start cryptsvc

Once you have done, restart computer and check for updates.