[SOLVED] 2022-03 Cumulative Update for Windows Server 2019 - Failure

V

VraKoth

Member
Joined
Apr 19, 2022
Posts
10
I cannot install "2022-03 Cumulative Update for Windows Server 2019 for x64-based Systems (KB5011503)" (WSUS or manually downloaded wont install)

What I tried:
Resetting Windows Update Components
Try to manually download and install the update from Microsoft Update-Catalog
Try to manually download and install the next update "2022-04 Cumulative Update for Windows Server 2019 for x64-based Systems (KB5012647)" from Microsoft Update-Catalog

Logfiles on OneDrive: Support

Outputs of sfc and dism below:
---------------------
sfc /scannow

Beginning system scan. This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection found corrupt files but was unable to fix some of them.
For online repairs, details are included in the CBS log file located at
windir\Logs\CBS\CBS.log. For example C:\Windows\Logs\CBS\CBS.log. For offline
repairs, details are included in the log file provided by the /OFFLOGFILE flag.

---------------------
Dism /Online /Cleanup-Image /RestoreHealth

Deployment Image Servicing and Management tool
Version: 10.0.17763.1518

Image Version: 10.0.17763.1518

[===========================91.7%===================== ]
Error: 0x800f0954

DISM failed. No operation was performed.
For more information, review the log file.

The DISM log file can be found at C:\Windows\Logs\DISM\dism.log

---------------------
I hope someone can help fix this Server / Update ;)
 
Update: I created new Logs in the shared folder.

Tried:
Disconnected this server from WSUS (Install of 2022-04 CU for .NET was successful, Security Update for SQL Server was also successful, just the 2022-03 or 2022-04 CU for Server 2019 fails)
Resetting Update Components again
dism /online /cleanup-image /analyzecomponentstore (worked)
dism /online /cleanup-image /startcomponentcleanup (worked)
dism /online /cleanup-image /restorehealth /source:C:\Windows\WinSxS (failed)
dism /online/ cleanup-image /restorehealth (failed)

With or without source fails with the following message:
Image Version: 10.0.17763.1518

[===========================92.0%===================== ]
Error: 0x800f081f

The source files could not be found.
Use the "Source" option to specify the location of the files that are required to restore the feature. For more information on specifying a source location, see Configure a Windows Repair Source.



 
Hi and welcome to Sysnative,

I will look into your problem.
Note: I'm currently in training so my posts will need to be approved by the Sysnative instructors.
 
Hi,

Step 1. Download
56f31e53c97da-SFCFix.PNG
SFCFix and save it to your desktop.

Warning: This fix was written specifically for this system. Do not run this fix on another system.
  • Save any work you have open, and close all programs.
  • Download the attachment SFCFix.zip and save it to your desktop.
  • Drag the SFCFix.zip file over the SFCFix.exe executable and release it.
6190d993a26f3-SFCFix-Zip-Eng.gif

  • SFCFix will launch, let it complete.
  • Once done, a file will appear on your desktop, called SFCFix.txt.
  • Post the logfile (SFCFix.txt) as attachment in your next reply.


Step 2. Run the System File Checker.
  • Click the Start button and in the search box, type Command Prompt
  • When you see Command Prompt on the list, right-click on it and select Run as administrator.
  • When command prompt opens, copy and paste the following command into it, and press enter.
    Code: 
    sfc /scannow
  • Take a screenshot of the commandprompt window and paste it into your next reply.
 

Attachments

Hi,

Just a question, the username is anonymized. But does it contain Russian symbols?
 
Hi,

Step 1. Run SFCFix again with the attached script (SFCFixScript.txt)
Warning: This fix was written specifically for this system. Do not run this fix on another system.
  • Save any work you have open, and close all programs.
  • Download the attachment SFCFixScript.txt and save it to your desktop.
  • Drag the SFCFixScript.txt file over the SFCFix.exe executable and release it.
62151e1bebac4-SFCFix-Txt-Eng.gif

  • SFCFix will launch, let it complete.
  • Once done, a file will appear on your desktop, called SFCFix.txt.
  • Post the logfile (SFCFix.txt) as attachment in your next reply.


Step 2. Download the
577bf0efb8088-FRST.png
Farbar Recovery Scan Tool and save it to your Desktop:

Download the 64 bit version: - Farbar Recovery Scan Tool Link

  • Download the attachment fixlist.txt and save it to your desktop.
  • Right-click on FRST.exe and select "Run as administrator".
  • Press the Fix button.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally.
  • When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
  • Post the logfile Fixlog.txt as attachment in your next reply.
 

Attachments

Open an elevated commandpromt and run the following command - copy and paste the result in your next post.

Code: 
icacls C:\Windows\WinSxS\amd64_microsoft-windows-utilman_31bf3856ad364e35_10.0.17763.1_none_f36f99d48966bace\Utilman.exe
 
Hi,

In the last Fixlog (of FRST) I noticed that the replaced files and folders has not the default DACLs, but the Full Control ACL Everyone:(F) ownership? This could be a major security risk, maybe you can give more information about this server and the privileges for XXXXXXXX.admin and/or other users - and the permissions set?

With servers I'm extremely careful in fixing, that's why I ask some more information about permissions/privileges that have been set.
 
I dont think this was set intentionally, it must have been somewhere in the process to fix this problem.
Permissions and owner in WinSxS can be set to defaults.

My admin user is domain-admin, the server has no important services running.
 
Hi,

SFCFix was not able to restore the permissions and ownership, so there was already a problem with the permissions.

VraKoth said:
Permissions and owner in WinSxS can be set to defaults.
Click to expand...
You can use the following command in a elevated commandprompt. Let me know the result of this.

Code: 
icacls "C:\Windows\*" /T /Q /C /RESET
 
Hi,

Please run this fixlist again to compare the permissions with the previous result.

Start the
577bf0efb8088-FRST.png
Farbar Recovery Scan Tool again.

  • Download the attachment fixlist.txt and save it to your desktop.
  • Right-click on FRST.exe and select "Run as administrator".
  • Press the Fix button.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally.
  • When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
  • Post the logfile Fixlog.txt as attachment in your next reply.
 

Attachments

Hi,

The permissions have been successfully reset, are there any other problems with this system?
 
You must log in or register to reply here.

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top