Fixing WUA Policy Error in SCCM Script
In the realm of software updates, encounters with errors can sometimes be unavoidable. One such error is the WSUS Error 0x80004005, which often indicates a failure related to Group Policy settings that control Windows Update Agent (WUA) interactions. Here's a guide to help you troubleshoot and resolve this issue.
Understand the Cause
The error in WSUS contexts is typically a sign of a failure due to Group Policy settings. This can happen if clients are running a Windows version prior to having critical update rollups or Known Issue Rollbacks (KIR) applied.
Check Windows Updates and KBs
Microsoft has addressed various WSUS and update-related issues, including Group Policy conflicts, with specific cumulative updates on server and client OS versions. For instance, Windows 11 22H2 and 23H2 received fixes via KB5058405 on May 13, 2025, or later, while Windows Server and Windows 10 1809 related WSUS issues, including error , were resolved with updates around September 10, 2024 (KB5043050).
Apply the Relevant Known Issue Rollback (KIR) Group Policy
If installation of the above updates is not possible or you still experience issues, you can download and install the special Group Policy templates known as Known Issue Rollbacks specific to your OS version. These are found in the Group Policy path: .
After applying, restart the client devices to enforce the policy.
Use Fix-DMGSCCMWUAPolicy.ps1 Appropriately
The PowerShell script Fix-DMGSCCMWUAPolicy.ps1 is designed to repair or reset related Group Policy settings for SCCM/WSUS clients, particularly fixing incorrect or conflicting policies that block update detection or installation.
Run the script with administrative privileges on affected client machines. This script often resets or corrects the Windows Update Agent policy registry keys or GPO conflicts as part of WSUS client troubleshooting. Make sure that after running the script, you refresh Group Policy () and restart the device if recommended.
Additional WSUS Client Troubleshooting Tips
- Verify the client can communicate properly with the WSUS server.
- Clear the Windows Update cache (stop , delete , restart ).
- Check event logs and Windows Update logs for more detailed error messages.
In summary, resolving WSUS error 0x80004005 involves ensuring your clients have the necessary Microsoft updates, deploying the Known Issue Rollback Group Policy objects if updates cannot be installed immediately, and using Fix-DMGSCCMWUAPolicy.ps1 to fix local Group Policy conflicts. Always follow with a Group Policy refresh and system restart to apply changes fully.
Technology plays a crucial role in resolving the WSUS Error 0x80004005, as the suggested solutions primarily involve keeping up-to-date with the latest Microsoft updates and utilizing specific Group Policy templates known as Known Issue Rollbacks (KIR). These updates and KIRs are designed to address Group Policy conflicts and WSUS-related issues, helping to resolve the error. Additionally, a PowerShell script called Fix-DMGSCCMWUAPolicy.ps1 is used to repair or reset related Group Policy settings, further alleviating the issue.
