Why do clients not install anything??

Question

New Win2k12 R2 WSUS server, Win2k8 R2 clients detect updates properly, even appear to download them...
RSOP on the Win2k8 client servers shows the proper Group Policy and GPO are applied to the client.
The clients can readily access http://wsus:8530/selfupdate/iuident.cab.
Checking the registry in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results registry key shows the client
detects and downloads are current (a few days ago), but Install is not current, it is last month when I manually updated.
Nothing obvious in %SystemRoot%\WindowsUpdate.log, but no
one ever tells what to look for, anyway. :) :)
I did the Solarwinds WSUS tester, only errors that came back were:
  content:                                           Error: Forbidden (Incorrect proxy client configuration - use settings tab to test proxy configuration
settings; may also be caused by misconfigured SSL implementation or access rights on WSUS server)
NO proxy servers etc. are in use, NO SSL is in use, and I don't know what or where to check regarding access rights.
  selfupdate/iuident.cab:                            OK 
  iuident.cab:                                       Error: NotFound (Omitting required port suffix on URL to access WSUS installed to port 8530 or resource
is unreachable)
As stated above the client can touch iuident.cab when the 8530 port is used. I found outdated instructions for putting iuident.cab on port 80. :) :) Clients can't get iuident.cab without 8530. 8530 is open internally.
GPOs and whatnot are correct, gpupdate /force was done yesterday...
What else should I do??
Thank you, Tom

Answer 1

1. Some structuring of info would help readers to get better into problem.
2. What GPO have you used? (client side, version of update 3 or 4, ....etc)
3. Have you enabled automatic approval?
4. WSUS need some time to start properly.
5. Have you updated clients (resetauthorization, detectnow,... and from the point of GPO - force gp)? For updating clients that are trying to take part in centralized update process any trace in logs are expected to appeare...
6. W2K8 R2 seems to work correctly and W2K8 has not yet, what is the difference between configuration(s) in both groups.
Rgds
Milos
1) I don't possess a crystal ball to know in advance how everyone wants problems or questions presented to them.
2) GPO is to automatically update, use the WSUS server, etc., I will double-check this...
3) Automatic approval is ON, I know the updates are approved, they show as downloaded or not yet installed, etc.
4) These clients have been waiting for several DAYS and nothing has happened.
5) Clients are updated, I already said gpupdate /force has been run. Some have even been rebooted, which would also do the same thing. I already said I verified detection etc. by reviewing the registry.
6) I do not understand this. The WSUS server is Win2k12 R2 OS, the current clients are all Win2k8 R2 SP1 OS, fully patched as of March 2014. There are no Win2k8 servers.
Thank you, Tom