What should I do when JetPatch is not pulling all of the Windows patches?

Assumptions

• Relevant patches are in WSUS
• Relevant machines are reporting fine to WSUS (and show as 100% in endpoint readiness)
• It's been more than 24 hours since patch Tuesday (see relevant configuration below)

Observations

• Endpoints have Patching Status = No Status
  • Note: for non-domain joined machines, please check if there is a local policy object overriding registry settings 
• Endpoints have patching status, but do not have latest patches

Next Steps

1. Check what is the total number of patches in WSUS and compare that to what is showing in JetPatch
2. Check intigua.properties and remove any line regarding pg.wsus.update.num-to-fetch and then restart tomcat
3. Run a full WSUS scan (it may take 10-20 mins across a few script cycles)
4. Check manager logs: vmanage.log (errors on wsus get updates)

If there is still an issue, please do the following in order:

1. Remove WSUS discovery source
2. Remove WSUS connector from servers tab
3. Remove WSUS entry from servers tab
4. Re-add WSUS server as standalone device
5. Re-deploy WSUS connector (latest version)
6. Re-add WSUS discovery source

Relevant Configuration

By default, WSUS get Updates runs once a day, you can modify that by adjusting the following property.  Example, if you would like 18 hours:

# Configure the 'WSUS get Updates' Script interval
pg.wsus.update.job.interval.sec=64800

In addition, you can manually run WSUS get updates by following this article.