The wsus script solves the client because SID cannot find the problem.
@ ECHO OFF
> "% Temp%.\ DefOpen.reg" ECHO Windows Registry Editor Version 5.00
> > "% Temp%.\ DefOpen.reg" ECHO.
Start cmd / c "net stop wuauserv"
> "% Temp%.\ DefOpen.reg" ECHO [HKEY_LOCAL_MACHINE\ SOFTWARE\ Microsoft\ Windows\ CurrentVersion\ WindowsUpdate]
> "% Temp%.\ DefOpen.reg" ECHO "PingID" =-
> "% Temp%.\ DefOpen.reg" ECHO "AccountDomainSid" =-
> "% Temp%.\ DefOpen.reg" ECHO "SusClientId" =-
Start cmd / c "net start wuauserv"
Start cmd / c "wuauclt.exe resetauthorization"
Start cmd / c "wuauclt.exe detectnow"
Start cmd / c "net start wuauserv"
> > "% Temp%.\ DefOpen.reg" ECHO.
> "% Temp%.\ DefOpen.reg" ECHO [HKEY_LOCAL_MACHINE\ SOFTWARE\ Policies\ Microsoft\ Windows\ WindowsUpdate]
> "% Temp%.\ DefOpen.reg" ECHO "WUServer" = "http://66.76.32.138:8530""
> "% Temp%.\ DefOpen.reg" ECHO "WUStatusServer" = "http://66.76.32.138:8530""
> > "% Temp%.\ DefOpen.reg" ECHO.
> "% Temp%.\ DefOpen.reg" ECHO [HKEY_LOCAL_MACHINE\ SOFTWARE\ Policies\ Microsoft\ Windows\ WindowsUpdate\ AU]
> "% Temp%.\ DefOpen.reg" ECHO "NoAutoUpdate" = dword:00000000
> "% Temp%.\ DefOpen.reg" ECHO "AUOptions" = dword:00000004
> "% Temp%.\ DefOpen.reg" ECHO "ScheduledInstallDay" = dword:00000000
> "% Temp%.\ DefOpen.reg" ECHO "ScheduledInstallTime" = dword:0000000c
> "% Temp%.\ DefOpen.reg" ECHO "UseWUServer" = dword:00000001
> > "% Temp%.\ DefOpen.reg" ECHO.
> > "% Temp%.\ DefOpen.reg" ECHO.
> > "% Temp%.\ DefOpen.reg" ECHO.
START / WAIT REGEDIT / S "% Temp%.\ DefOpen.reg"
DEL "% Temp%.\ DefOpen.reg"