Reading Windows 10 WindowsUpdate.log

Last Modified

Thu Apr 30 14:44 GMT 2020

Description

• Windows 10 changes the logging for WindowsUpdate.log, which causes problems when trying to troubleshoot.
• The article goes over something that can be done to correct this, and issues why it might not work.

Environment

• N-able N-central
• Windows 10

Solution

• First thing to do is try the Powershell command in the link below (the links provide more in-depth information).
• How to read Windows Update logs in Windows 10
  • https://support.microsoft.com/en-us/kb/3036646
• ?You need to use the x64 (not the x86) version of PowerShell:

1. Open Command Prompt (Admin)
2. Enter command: powershell
3. Enter command: Get-WindowsUpdatelog

• The other option is

1. Search for PowerShell
2. Open Windows PowerShell
3. Enter command: Get-WindowsUpdatelog

• Now that you have tried the Powershell command and you check the log and what you see is the lines below.
  • This means that there are missing symbols libraries on the device, and the only way to get these are from Microsoft.
  • The symbols should be downloaded when you run the Powershell command, but if it doesn't you can manually get these from Microsoft.
  • It is also possible that the account being used (this happens often with Local System for example) doesn't have access to the symbols even though they are otherwise available; simply use another logged-in user account.

1600/12/31 17:00:00.0000000 1088  4724                  Unknown( 10): GUID=5e0ee4cc-3618-f43a-06ca-9d3b0dabc11a (No Format Information found).1600/12/31 17:00:00.0000000 1088  4724                  Unknown( 189): GUID=d2788044-38f2-1691-3c34-c3fd1437fc24 (No Format Information found).1600/12/31 17:00:00.0000000 1088  4724                  Unknown( 27): GUID=31ca3cef-8afe-c510-1cb4-36acd097dd79 (No Format Information found).1600/12/31 17:00:00.0000000 1088  7372                  Unknown( 146): GUID=d2788044-38f2-1691-3c34-c3fd1437fc24 (No Format Information found).1600/12/31 17:00:00.0000000 1088  7372                  Unknown( 153): GUID=d2788044-38f2-1691-3c34-c3fd1437fc24 (No Format Information found).1600/12/31 17:00:00.0000000 1088  7372                  Unknown( 154): GUID=d2788044-38f2-1691-3c34-c3fd1437fc24 (No Format Information found).

• Download Windows Symbol Packages
  • https://msdn.microsoft.com/en-us/windows/hardware/gg463028.aspx?f=255&MSPPError=-2147217396
  • Example Powershell command after downloading the symbols library, if the symbols fails to properly install:

Get-WindowsUpdateLog -SymbolServer \\<localmachinename>\c_drive\path to local symbol cache

• Note: Windows symbol downloads may not be available anymore, we may try to look through MS technet for a workaround: LINK