PENDINGSCCM not pushing patches says up to date

[Cliff]

嗨
I have a 1000 devices win 10 /11 and several servers (16 servers as SUPs) all dotted around the country
for several months I have an issue that a lot of machines are saying that patches are up to date, I cant see any errors anywhere, the CU's and definition updates etc are downloading and showing in the console, but machines are refusing to take them, if I change the setting (gpedit) to stop the machine pointing at our sccm server it will then happily connect to windows update and download and install the patches.
not sure where to look next, getting a bit of pressure from above to get all machines compliant.
I did think it was an issue in my stripped out ISO build, but built a machine with a vanilla windows ISO and it still ignored updates
suggestions on what where to look would be great

thanks

Cliff

[Garth]

Try forcing a resync of SU status. See this blog.https://www.recastsoftware.com/resources/my-two-favorite-configmgr-run-scripts/

[Cliff]

嗨
unfortunately the link to the scripts is a dead link on that page

[Garth]

我已经要求固定但the script text is listed within the blog itself too.