WSUS更新卡在98%求助：上游服务器向虚拟机客户端部署更新异常

Hey there, let's work through this WSUS update stuck at 98% issue—this is a super common pain point with virtualized clients, so we’ve got several actionable fixes to try:

一、清理客户端本地更新缓存（最基础的第一步） #

Stuck updates often happen because corrupted temporary download files are blocking progress. Here's how to clear them:

• Open a Command Prompt with Administrator permissions, then stop the core Windows Update services one by one:

  net stop wuauserv
  net stop cryptSvc
  net stop bits
  net stop msiserver
  

• Open File Explorer and navigate to C:\Windows\SoftwareDistribution\Download. Delete all files and folders in this directory—these are just temporary update packages, and Windows will re-download what it needs.
• Restart the services you stopped earlier:

  net start wuauserv
  net start cryptSvc
  net start bits
  net start msiserver
  

• Go to Settings > Update & Security > Windows Update, click Check for updates, and see if the installation resumes.

二、重置Windows Update组件（更彻底的修复） #

If clearing the cache doesn't work, resetting the entire Windows Update stack can fix deeper configuration glitches:

• Repeat the step to stop the four services listed above.
• Rename the core update folders to force Windows to rebuild them:

  ren C:\Windows\SoftwareDistribution SoftwareDistribution.old
  ren C:\Windows\System32\catroot2 Catroot2.old
  

• Restart the services, then run this command to trigger an immediate update detection:

  wuauclt /detectnow
  

三、排查客户端更新日志（定位具体故障点） #

To figure out why it's stuck at 98%, check the Windows Update logs for error codes or specific failures:

• Open Event Viewer, navigate to Windows Logs > Application, then filter events by the source Windows Update Client. Look for error codes (like 0x80070002 or 0x80240034)—these can point to missing files or permission issues.
• For a more detailed log, run this command in an Administrator PowerShell:

  Get-WindowsUpdateLog
  

  This generates a plain-text log file that will show exactly which step of the installation is failing.

四、检查WSUS服务器端的更新完整性 #

Sometimes the issue isn't on the client—your WSUS server might have a corrupted update package:

• On your WSUS server (mcsa-wds), open the WSUS Console. Locate your test update, right-click it, and select Re-download update.
• Wait for the download to complete (check the download status in the console), then go back to the client and recheck for updates.

五、快速排查小细节 #

Don't overlook these simple checks:

• Restart the client VM: A quick reboot can kill stuck installation processes that are hanging in the background.
• Verify disk space: Make sure the client's C: drive has at least 5GB of free space—updates need temporary room to unpack and install.
• Temporarily disable antivirus: Some endpoint protection tools block Windows Update processes. Try turning it off temporarily (only do this on a test VM!) and see if the installation finishes.

内容的提问来源于stack exchange，提问作者Jim Steven