windows Updatewindows Update

Start Windows Update Service Compliance item

I have seen some environments where they only monitor services but not force them to restart. The logic in here can be used for any other service needed. This is especially helpful for the McAfee Framework Agent and WDS Service in the event the service has stopped. You are able to download a copy of the functional compliance item at the bottom of this post.

First we will stop the service and verify in a number of ways that the service is not running.

1. Powershell

get-service -serviceName wuauserv

2. Launching Services.MSC & searching for Windows Update

3. WMI Explorer

Creating the configuration item

Discovery Script

If ((get-service -name wuauserv).status -eq “Running”) {write-host “true”} Else {write-host “false”}

Remediation Script

get-service -name wuauserv | start-service

Compliance Setting

Create your own configuration baseline and associate it with the configuration we just created.

On my test machine you can see from the earlier screenshots that we WUAUServ was not running. This is reflected as “Not Compliant” in my evaluation.

Select Evaluate and after a refresh I see the system is now compliant meaning this service has been started.

You can track the Compliance item in the log files below.
DCMAgent.log: Records high-level information about the evaluation, conflict reporting, and remediation of configuration items and applications.
CIAgent.log: Records details about the process of remediation and compliance for compliance settings, software updates, and application management.
CMReporting.log : Records information about reporting policy platform results into state messages for configuration items.
DcmWmiProvider.log Records information about reading configuration item synclets from Windows Management Instrumentation (WMI).

EXTRA: I love status messages so here is how you check that.

From SCCM Console search for your compliance Item and make sure you grab the CI Unique ID

Open up the StateMesage.log and filter for the below


Please follow the link below to my TechNet page where you can download this compliance item.


chris buck

Founder of SCCMF12TWICE.

Lead SCCM Architect/Engineer for various environment all over the world. Primarily focused on reducing complexity of enterprise environments. This also includes migrating customers to the cloud, and to windows 10 with servicing upgrades.

Strong believer in data driven operations. If we can identify problems with analytics, and visualize it to management we can reduce the amount of problems, at the same time improve customers experience, reducing support costs.

Add comment

fifteen − 12 =

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Follow us

Don't be shy, get in touch. We love meeting interesting people and making new friends.