There could be several reasons why updates are failing to install even though your PC is enrolled in the Extended Security Updates (ESU) program. Here are some potential issues to consider:
- Update Health Tools: Ensure that the Update Health Tools are installed on your device. These tools are required for receiving expedited quality updates. You can check for their presence in the Add or Remove Programs section or by using a PowerShell script to verify.
- Update Categories Paused: Check if updates of the relevant category are paused. If updates are paused, they will not install until the pause is lifted.
- Safeguard Holds: For feature updates, there might be a safeguard hold applied that prevents the update from being installed. This is a common practice to ensure device stability.
- Deployment State: Verify that the deployment to which your device is assigned has the state "offering". If the state is "paused" or "scheduled", the updates will not be deployed.
- Scanning for Updates: Make sure that your device has scanned for updates and is actively checking the Windows Update service. If it hasn't scanned, it won't receive updates.
If you continue to experience issues, you may want to consult further troubleshooting resources or consider reaching out to Microsoft support for assistance.
References: