Microsoft has fixed a known issue preventing Windows 11 24H2 feature updates from being delivered via Windows Server Update Services (WSUS) after installing the April 2025 security updates.
WSUS was introduced as Software Update Services (SUS) almost twenty years ago, and it is designed to help IT admins defer, approve, and schedule updates for Microsoft products on large enterprise networks from a single local update server instead of relying on endpoints to update from Microsoft’s servers on their own.
Redmond confirmed the Windows 11 24H2 upgrade problems in late April following widespread reports across online platforms, including Reddit and its own community website.
As the company said when it acknowledged this issue, affected users see Windows Update Service (wuauserv) errors with 0x80240069 codes when attempting to update systems running Windows 11 23H2 or Windows 11 22H2.
Luckily, home users are unlikely to experience these update problems since WSUS is designed to be used only in business and enterprise environments.
“Devices which have installed the April Windows monthly security update, released April 8, 2025, or later (starting with KB5055528) might be unable to update to Windows 11 24H2 via Windows Server Update Services (WSUS),” Microsoft said last month in a Windows release health update.
“As part of this issue, the download of Windows 11 24H2 does not initiate or complete. Windows updates log can show error code 0x80240069, and further logs might include text similar to ‘Service wuauserv has unexpectedly stopped’.”
Fix available via Known Issue Rollback
While the fix is not yet shipping to all customers through Windows Update, Microsoft is now rolling it out automatically through Known Issue Rollback (KIR) to all enterprise-managed devices.
To address it on impacted Windows enterprise-managed devices, Windows admins must install this Known Issue Rollback Group Policy on impacted endpoints running Windows 11 22H2 and 23H2.
To deploy the policy, use the Group Policy Editor to choose the Windows version you want to target in the Local Computer Policy or the Domain policy on the domain controller, and restart the affected device(s) to apply the group policy setting.
Microsoft provides additional guidance on deploying and configuring KIR Group Policies on its documentation website.
The company is also working on addressing what it described as a “latent code issue” that is causing some PCs to be upgraded to Windows 11 despite Intune policies designed to block Windows 11 upgrades.
This is not the first instance in recent months where Windows systems have been upgraded without prior notice. Microsoft acknowledged in November that some Windows Server 2019 and Windows Server 2022 devices were upgraded to Windows Server 2025 without user consent.
Based on an analysis of 14M malicious actions, discover the top 10 MITRE ATT&CK techniques behind 93% of attacks and how to defend against them.