Issue
Windows Updates that are successfully applied are not displayed in Windows Update History
Environment
Applies to Windows workstations and servers
Cause
ThreatDown's Patch Management Module uses the Windows Update Agent API to initiate operating system patches to Windows devices. Windows updates applied through this method do not appear in the Windows Update History page.
Resolution
This is the expected behavior of the Windows OS. You can view patches recently installed on an endpoint by one of 2 methods:
Console:
- Navigate to the endpoints page by selecting Manage>Endpoints in the left banner of the console
- Click on the endpoint you would like to view applied patches for
- In the pull out, click on the Updates tab.
- From there, the applied patches are viewable in the Installed Updates section
Locally:
The history of updates that have been installed using the Windows Update Agent APIs can be viewed in Event Viewer. To view WUA update events:
- Right-click Start and select Event Viewer.
- Navigate to Windows Logs > System
- In the Actions pane, select Filter Current Log....
- In the Event sources drop-down, select WindowsUpdateClient.
- Click Ok to apply the filter to the results.