I had a customer report an issue this week trying to install MS17-006 on all 2012 R2 and 2008 R2 servers in their environment.
The WUAHandler.log file produced an error:
“User cancelled the installation”
The update then showed it had failed to install.
The maximum runtime limit set in this update was only 5 minutes
Changed this value to 30 minutes to be on the safe side, gave it time to marinade (just like everything with SCCM) and it installed.
Please note, the time you set here will impact the calculations of Maintenance Windows, so if you have a few updates to get through in a small amount of time be cautious and always pilot the deployment changes.