How can you troubleshoot a Windows 10 update that won't install?

If the updates are not working, check the internet connection and bandwidth and troubleshoot the internet first. If the issue is still present, check whether the update service is enabled on the user's computer or in domain-joined machines check the GPO for the Windows updates are implemented and updated.

Make sure the Wuauserv/BITS services are running. Do the usual checks of your network settings and connections, make sure you can ping localhost, the gateway, and the update server. Check to make sure the disk space is not full. Check the registry to make sure the update server settings are set correctly in the WUServer key (you could try using the IP of the update server instead of the name, to rule out any DNS issue). Check the update history and OS build info to see when the last updates were installed (you might need to upgrade your version of Windows). If the update still isn't installing, stop the Wuauserv/BITS services and delete out the "\System32\Software Distribution" or rename it to .old and restart those services.

A built-in Windows update tool can be handy to troubleshoot the update problem. If the issue is not identified or resolved, check the system's health and integrity using SFC or DISM and restart the machine; also check the permissions. Try to download the update and install it manually.

This could be a better version of it: net stop wuauserv net stop cryptSvc net stop bits net stop msiserver ren C:\\Windows\\SoftwareDistribution SoftwareDistribution.old ren C:\\Windows\\System32\\catroot2 Catroot2.old net start wuauserv net start cryptSvc net start bits net start msiserver

Bit IT crowd.. but there is benefit to “have you turned it off and on again?” Restarts simply clear any queues or stopped processes - keep it simple

Beyond what was mentioned earlier in this article, try uninstalling the last successful update and reattempt. If that fails, inspect event viewer to see root cause and Google the error code. Last chance would be running SFC and/or DISM to clear up any system errors.

If you don't use WSUS as an approach, and the machines are downloading the patches from Microsoft, then Internet connectivity must be addressed first, especially if the issue is occuring on more than one machine. WuauServ/BITS/CryptSvc/TrkWks and MsiServer must not be disabled on the client. If you use WSUS, then intranet issues are not an exception, check to see if the affected system is able to connect to the target WSUS port, sometimes the firewall could be the whole issue. If a lot of machines are unable to get the patches then make sure, the WSUS Server has enough disk space for storage, as well as memory, and the services WSUSService, IISAdmin, W3SVC, Update Services, and WID or SQL Server working. WSUS APP POOL MUST BE EXECUTED!

Downloading the updates from the Microsoft Update Catalog and then installing manually may be able to bypass the problem. If working with multiple systems, these updates can be scripted or pushed through your preferred software distribution system. The Microsoft Update Catalog is also a good resource for obtaining patches to install on systems without and Internet connection.