Install Windows Server Updates, without a GUI! You'll never patch the same way again!

Here's how you can patch your servers using "sconfig" and the Command Prompt! It's that easy, and yes it supports WSUS (Windows Server Update Services). Read more below!
Blog Post: www.stephenwag...
Using "sconfig" (Server Configuration) is the method used to manually update Windows Server Core instances that do not have a GUI, but it also works on normal Windows Server instances that do have a GUI. Sometimes it just feels better to work without all those fancy graphical windows :)0
To run Windows Update using the CLI (using Command Prompt):
1. Open elevated Administrative Command Prompt
2. Run "sconfig" (without quotations)
3. Choose option 6 for "Download and Install Updates"
4. Follow the prompts
For more content visit my blogs at www.stephenwag...
To hire me and my company, visit:
-www.stephenwag...
-www.digitallya...
#WindowsServer, #sconfig, #WindowsUpdates, #CLI, #GUI, #ServerConfiguration, #TipsandTricks

[@mentezari]

Thank you so much for your tip. One of my 2016 servers would not update through GUI but did through sconfig. Have a great day.

[@StephenWagner]

Glad to hear!

[@swmitchell76]

I'm a Network Engineer, and I often get sysadmin work thrown at me... this was a GEAT tip. BTW, your videos' are great quality. short punchy, the sound is great.. Keep it up. I cant beleive you only have 3k subscribers

[@StephenWagner]

I really appreciate the comment and support! I'm happy the video(s) helped!

[@dennisheler1225]

i've been an Administrator since 2011 and i didn't know that as well. Thank you so much! Great video, greetings from Germany

[@StephenWagner]

You're welcome! Glad it helped!

[@zijadzikedzehovic6206]

Is that possible to find job as "junior" admin in Germany, and if, where to apply?

[@simonouting6538]

Great Video - I never knew of this either. But from today, this is the way I am also going to be updating my server going forward. Thanks and keep up the fantastic work.

[@StephenWagner]

Isn't it awesome?!? :D Glad that it helped!

[@jbzeigler]

Updating via GUI keeps failing. I wonder if this will work.

[@constantinsiriteanu4859]

Great video! Top Top Top as usual straight to the point and very useful info, thanks, much appreciated and keep up with this great work you do mate :)

[@StephenWagner]

Thank you Constantin, I really appreciate the feedback!

[@steveabba8463]

I did not know about this, thanks for the video!!!

[@StephenWagner]

Glad it helped!

[@IvanAlvarezCPACMA]

Great video! Fantastic! I agree...updates will never be the same again!

[@StephenWagner]

Thanks Ivan, glad the video helped! Happy New Year!

[@Tomersss222]

wow thanks a lot, the "Start" button on server wasn't working and ms-settings / WIN+i didn't work to open settings so you saved me with the only option left

[@bhanskidum5056]

Yes I m doing like this before some days it's good 👍 can you plz make a vedio on SCCM !

[@steve4334]

Great tutorial very helpful, any chance you can do a troubleshooting\fixes for wsus patches not either being seen by a server, or patches are being seen but failing? Much appreciated!

[@StephenWagner]

Hey Steve, thanks for the comment! Unfortunately that would be a little tricky as there's numerous (possibly hundreds) of reasons why you might have issues with Windows Updates and WSUS. I don't think there could be a one-video-fits-all solution for that.

[@steve4334]

@@StephenWagner You are absolutely right. I've been working on a list of 30 DC's and some have been the same thing "hand full - disk space" the rest has been a multitude of just straight suckage. Much appreciate your videos! Keep em coming!

[@StephenWagner]

While I don't like to recommend this, if you have systems where the Windows Update have become corrupt, it is possible to completely reset Windows Update. I think MS has a tool that will do this (deleted the WU database, cache files, etc), and there's ways to manually do this as well. I've had to do this a few times on various servers where the WU DB become corrupt, and it saved the day, but it's extremely risky.

[@steve4334]

@@StephenWagner yes wu_rest tool. That did save the day.

[@Deejaychachi]

This is great tip, Thank You

[@StephenWagner]

Glad if it helped!!!

[@georginagraham5809]

i tried it on server 2019 and restarted the server after installation when completed but didnt see the updates under "Update History'?

[@syafiq3543]

so if my wsus server notworking to push update, i can use this method to update? is this something like manual update?

[@supronoono]

Nice info

[@Eugensson]

You cannot run sconfig from a remote PS session.

[@kelemvor3333]

Can this be used as a one-liner so I can do something like sconfig -downloadall or something like that? Or does it have to be done as individual commands? Wondering if it can be scripted so I can remotely send a single command to a server and have it go check for updates and download whatever it finds and install them but not reboot (or something like that).

[@StephenWagner]

Unfortunately "sconfig" is just what I call the text equivalent of Server Manager for CLI. When you choose the option for Windows Updates, I believe it kicks off a different script. If you did some digging, you might be able to find the script it kicks off, and then you could use that to automate and perform what you want to do! :)

[@chijiiloabachie3836]

the best

[@Tortuga89R]

I am having H-E-Double L of a problem with KB5021237 for Server 2019. Trying this method now. I've tried the built in Windows version, the manual file download version, and when it starts installing, it reboots and fails the update.

[@StephenWagner]

Hi Rick, you'll need to troubleshoot the update. Check to see if there's any known issues. I'd also recommend checking the event log viewer to see if it tells you where it's failing.

[@100amazing6]

When using the sconfig command via cmd, does it prompt me to restart the server once the download/install of updates are completed?

[@StephenWagner]

Windows Update (when using the GUI or CLI), will prompt for restart when the updates require it. If the updates do not require a restart, it will not request and prompt for one.

[@DJMNM310]

followed your step by step but i get "There are no applicable updates" and then i have to exit... what if I have the KB for an update that i want to install... how can i push that to a server core installation? THANK YOU ! !

[@StephenWagner]

Hi DJ-MnM, if it reports "There are no applicable updates", it sounds like your Windows Instance is fully up to date, or if you're using WSUS, there are not pending approved updates requiring install. If you need to install a specific KB, you'll need to download it, then copy it to the Server Core install, and then execute via Command Prompt to install it. Hope that helps!

[@DJMNM310]

@@StephenWagner Thank you for getting back to me.... i guess my other question is, how can i copy a KB to the Server Core install.....i think i have the command on how to execute but just need some help on how to copy the KB over

[@StephenWagner]

Most Windows server have their admin c$ share open for administrative tasks. To access this, it would be \\SERVERNAME\c$ and you'd use the domain administrative credentials to access. Or, if you want a GUI, you can open up notepad (by typing notepad at the cmd prompt) and then use "File -> Open" and use that interface and address bar to navigate to a share to copy/paste. Nice little workaround.,

[@mrmuffin5046]

does this work in windows 11? i keep getting sconfig is not recognized as an internal or external command

[@StephenWagner]

Hello, "sconfig" is only for Windows Server unfortunately.

[@mrmuffin5046]

how would you go about studying vmware? other than installing it on the computer how else can i do? whats there to practice?@@StephenWagner

[@m55uka4]

When i type sconfig ‘sconfig’ is not recognized as an internal or external command, operable program or batch file.

[@StephenWagner]

What version of Windows Server are you running?

[@m55uka4]

@@StephenWagner 1809

[@StephenWagner]

Hi there, 1809 doesn't co-inside with a Windows Server version. Is there a chance you're running Windows instead of Windows Server? sconfig only works on Windows Server.

[@m55uka4]

idk how to check it but my windows edition is windows 10 enterprisel ltsc@@StephenWagner

[@jbzeigler]

*Windows Server 2012 R2* - how do I force a group of computers to restart at a scheduled time? *Windows Server 2012 R2* - how do I push Windows updates to a group of computers? TIA

[@StephenWagner]

To force a group of computers to restart, you can make a GPU that configures automatic updates to install at a certian time, which will trigger a restart. To push Windows Updates to a group of computers, you can use WSUS and manage/approve them. I have another video covering that.

[@jbzeigler]

Great. Do you have a link? I looked through your KZbin Channel but didn't find anything. @@StephenWagner

[@StephenWagner]

Link to video: kzbin.info/www/bejne/jIWmq6awrs55sJY

[@network9535]

How to uninstall windows update through command prompt

[@chusamaroyal]

Using this on Core Servers.

[@Casper.G2]

I attempted to use the simple "sconfig" command, but my system could not recognize it. The first issue is that my system is unable to download any updates. I tried everything, including clearing, flushing, and changing DNS. I also ran a sfc scan and DISM recovery. The sfc discovered corrupted files and "fixed" them, but the DISM recovery failed with an error. My software was most likely still broken, so I downloaded from the windows site an image ISO to overwrite the current software file and maybe correct the problem, but it did not work. Now I'm attempting to completely reset my PC from scratch; I tried the Cloud option for a factory reset, but that too failed... It keeps loading with the message "getting system ready." So I forced a shutdown and am currently looking for other options. Is there anyone who knows how to finally reset the software? Thank you!

[@StephenWagner]

Hi Casper, it sounds like you're working on your PC, however the "sconfig" is for Windows Server, not workstation operating systems. What software are you trying to reset? It sounds like your OS is corrupt, and you need to perform a format and/or re-install of the OS.

[@Casper.G2]

@@StephenWagner Yes, I see. What's going on with my computer right now is interesting. I'm running Windows 11 Professional. I'm connected to the Wi-Fi. I can watch videos and browse the internet, but I couldn't connect to the Windows Update server. I also tried to access Microsoft Shop, but it kept loading. Side note: ( Ubisoft Connect also failed to connect ) I had to download the Software Repair Tool from an external source, and when I opened the app, it said I wasn't connected to the internet, even though I was. I'm currently looking for a factory reset to start over. However, when I tried the reset, it kept loading. Basically, I can't update my PC and programs won't connect to servers because I don't have a connection, despite having an Internet connection. Is it possible to perform a factory and clean installation without using the internet? Or what do you recommend at this point? Thanks for the support !

[@StephenWagner]

Hi Casper, it sounds like your best option is to format and re-install the OS. You can get the media creation tool here www.microsoft.com/en-ca/software-download/windows11 , create media, and then re-install the OS.

[@Casper.G2]

​@@StephenWagner Yes, I downloaded and installed a media creation tool, but it did not work. It gave an error code of 0x8007000D - 0x90002, indicating that there was an issue running this tool. That's why I chose to install the Windows 11 Disk Image (ISO), which also didn't solve the problem. I guess I'm out of options at this point. I appreciate your help.

[@StephenWagner]

You should use a different computer to prepare all the media. It sounds like your current install of your OS is messed up, and I wouldn't use it at all until you reformat.

[@zijadzikedzehovic6206]

Need to repeat lectures, did not work in Win Ser for long. This advice should advancemy skills. Thy.

[@medusagaming1818]

I have tried. It is not working.

[@StephenWagner]

Can you be more specific? Does it provide an error, or any type of indication?

[@thenson1Halo]

Do you have a way to run a specific MSU file silently from the command prompt or powershell? There is a replacement CU for domain controllers after the monthly CU broke Kerberos authentication. The update isn't available to windows update and has to be downloaded directly from the Windows Update Catalog. I've been trying wusa.exe C:\path\updatename.msu /quiet /norestart but it just takes the command and the update never seems to install. I have to do this to a couple hundred domain controllers so doing them one by one manually doesn't sound appealing.

[@StephenWagner]

Hey thenson1halo, I'm actually not sure. Do you have any management platform you could use to deploy the MSU?

[@thenson1Halo]

@@StephenWagner We do, but unfortunately it basically just orchestrates handling the windows update service and has no repository of its own. I did solve this problem though for future reference. The CMD/batch command is as below: dism.exe /online /add-package /packagepath:"C:\Source\Temp\Windows10.0-KB5021655-x64.cab" /quiet /norestart /logpath:"C:\Source\TEMP\OOB.log" In the above command it shows a cab file rather than msu because I extracted it for the sake of speed (that lets you skip it searching for updates first and just processes the one specified). The exact same command works for an msu file. Since all paths are specified you don't need to worry about the file being in your current working directory. Depending on the patch (this one was 1.6GB and domain controllers don't usually get much resources) this process will be very slow and you won't see any progress because it is silent. If you're not worried about when it restarts then you can remove the /norestart switch and it will still be fine. I advise having the file on a network share and using robocopy if run as a script for multiple machines. Thank you for responding!

[@StephenWagner]

I'm glad you figured it out, and a very big thank you for posting that fix. Sharing is caring, and the community no doubt appreciates it! Thanks again! Cheers!