The strange thing is, WSUS server puts a green check mark for Windows Server 2016s, but I am sure there are some updates available for them.
The full path is c:\program files\update service\tools\reset . Tried reset, checked permissions, even cancelled all downloads and it sat at 0.00MB of 0.00MB forever. Redmond said installing KB3159706 on Windows Server 2012 will give WSUS the ability to automatically decrypt upgrades from Microsoft in the same way client-side Windows Update software does.WSUS defines "upgrades" as feature additions, separate from "updates" that typically include security patches.Here's the script, which I didn't write, but don't have the link handy ATM. I've cloned my deployment task sequence with the only difference being that one is using the 1511 media and the other the 1607.It could be a permissions issue on the WSUSCONTENT folder, or it could be because something went wrong during the WSUS installation: "Until now, we have been manually decrypting these packages prior to releasing to the WSUS channel, the process of which is both time consuming and error prone," explained Windows Server program manager Steve Henry.