KB4023057: Microsoft Update Health Tools

How uhssvc works and why KB4023057 comes back

The package installs the Microsoft Update Health Tools and registers uhssvc, the Microsoft Update Health Service. It acts as a small remediation agent for the Windows Update client, covering three jobs:

• Resets broken network or Windows Update client policies and re-enables disabled servicing services.
• Compresses files in the user profile directory when free disk space is too low to stage critical cumulative updates.
• Gives Windows Update for Business and Microsoft Intune the local service they need to apply expedited quality updates (Intune Expedite) outside the normal deferral schedule.

The last job is why it is worth keeping: with no uhssvc, an Expedite policy has nothing on the PC to act on. Microsoft refreshes the tools by re-releasing the package under the same KB, so each new build appears as another KB4023057 entry in your update history.

Check the service and binary version

Verify whether the uhssvc service and binary are present on the PC in PowerShell:

# Check the Microsoft Update Health Service and installed binary version> Get-Service uhssvc -ErrorAction SilentlyContinue | Select-Object Name, Status, StartType> Get-Item "C:\Program Files\Microsoft Update Health Tools\uhssvc.exe" -ErrorAction SilentlyContinue | Select-Object -ExpandProperty VersionInfo | Select-Object ProductVersion, FileVersion

For administrators (Intune Expedite & WSUS)

• Required for Intune Expedite: If an endpoint lacks KB4023057 (uhssvc), expedited quality updates configured in Microsoft Intune or Windows Autopatch cannot be deployed immediately.
• Why it is not in WSUS: Microsoft does not publish KB4023057 to WSUS because WSUS-administered endpoints do not use cloud remediation or Intune expedite policies.