Azure Update Pending Update

Question

Azure Update Pending Update

Handian Sudianto 6,966

I have pending update KB890830 in azure update manager for several endpointm.

Actually this KB is alerady installed in some endpoints, let say for this endpoint

User's image

We can see in the endpoint this KB is installed

User's image

And for other endpoint even the KB already installed this KB is not showing in update history.

0 comments

Answer accepted by question author

0 additional answers

Your answer

Answer 1

Jerald Felix 11,550 Volunteer Moderator

Hello Handian Sudianto,

Thanks for raising it in the Q&A forum.

KB890830 is the Windows Malicious Software Removal Tool (MSRT) monthly update, released via Windows Update to detect and remove prevalent malware. In Azure Update Manager (AUM), it appears pending due to scan lag, even if installed on VMs, as compliance checks run every 12 hours.

Reasons for Discrepancy

Post-install sync delays cause AUM to report pending status; some VMs may not log it in standard history if superseded or installed outside AUM. Verify installation with Get-HotFix -Id KB890830 or wusa /uninstall /kb:890830 to test.

Fix Steps

Rescan immediately: AUM portal > Machines > Check for updates > Assess now.

Reset update agent on VM: Stop wuauserv, delete %windir%\SoftwareDistribution, restart service.

Exclude MSRT: Maintenance run configuration > Exclude KB890830 classification.

Check agent: Ensure Update Management Extension v1.10+ installed.

Reassess after 30 mins; if stuck, Azure support with VM diagnostics.

If it's helpful, please accept the answer.

Best regards,

Jerald

Handian Sudianto 6,966 Reputation points

2025-12-15T03:35:26.61+00:00

hi @Jerald Felix

I run that command in server which KB890830 was installed but the command say this KB is not installed.
Jerald Felix 11,550 Reputation points Volunteer Moderator

2025-12-15T03:54:10.5666667+00:00

Hi Handian Sudianto,,

Thanks for the follow-up and testing the command. MSRT (KB890830) often doesn't appear in Get-HotFix or Win32_QuickFixEngineering WMI because it's not registered as a standard hotfix it's a standalone tool. It shows in Windows Update history but skips typical hotfix queries.

Correct Verification Commands

Run these on the VM:

$mrtPath = "$env:SystemRoot\System32\mrt.exe"

if (Test-Path $mrtPath) {

Get-ItemProperty $mrtPath | Select-Object Name, @{Name='Version';Expression={$_.VersionInfo.FileVersion}}

# Or run: & $mrtPath -? for MRT details

} else { "MRT not found" }

Also check C:\Windows\KB890830*.htm for install log.

Get-WUHistory | Where-Object Title -like "KB890830" for history .

If mrt.exe exists with recent version, it's installed force AUM Assess now to sync. For no-history VMs, install via Update Catalog if needed, then rescan. Share output if still mismatched. If helpful, please accept.

Best regards,

Jerald Felix

Share via

Azure Update Pending Update

0 additional answers

Your answer