Cannot add any new Windows Server roles on 2016

[vmantia1980]

Hey guys,
Tried everything before coming here.
Server 2016 will not install any new roles. Specifically adding AD DS and DNS.
Definitely issues in the CBS.log.
DISM cannot find the source, even after I specify it in the path.
CBS.zip is attached as well as the DISM log and Components Scanner.
SFCFix attempts the repair but then runs DISM but it fails again due to source.
Appreciate the assist!
Vinny

 

[vmantia1980]

Good morning,
Any advice on this one?

 

[Maxstar]

Hi and welcome to Sysnative,

Step 1. Download

SFCFix and save it to your desktop.

Warning: This fix was written specifically for this system. Do not run this fix on another system.

• Save any work you have open, and close all programs.
• Download the attachment SFCFix.zip and save it to your desktop.
• Drag the SFCFix.zip file over the SFCFix.exe executable and release it.

• SFCFix will launch, let it complete.
• Once done, a file will appear on your desktop, called SFCFix.txt.
• Post the logfile (SFCFix.txt) as attachment in your next reply.

Step 2. Run the following DISM command and post the result. If it fails attach a new copy of the CBS log.

DISM /online /cleanup-image /RestoreHealth

 

[vmantia1980]

Thank you Maxstar!
I am attaching 3 log files.
1 is the SFCFix log
2 is the CBS Log after the DISM cleanup
3 is the CBS2 Log after attempting to install AD DS again - Failed

 

[Maxstar]

Hi,

Step 1. Follow these instructions to remove an update.

• Open the Start menu of Windows and type the command CMD
• When you see Command Prompt on the list, right-click on it and select Run as administrator.
• When command prompt opens, copy and paste the following command into it, then press enter.

wusa /uninstall /KB:4550929

• Let me know if it says it was successful or if there are any errors.
• When you get the message: The update KB4550929 is not installed on this computer, then perform step 2.

Step 2. Follow these instructions to perform a regsearch with FRST.

Download the

Farbar Recovery Scan Tool and save it to your Desktop:

Download the 64 bit version: - Farbar Recovery Scan Tool Link

• Open the startmenu and type the command cmd.
• After you find the Command Prompt, right click on it and select Run as Administrator.
• Copy and paste the following into the Command Prompt and press enter.

reg load HKLM\COMPONENTS C:\WINDOWS\SYSTEM32\CONFIG\COMPONENTS

Right-click on the file FRST64.exe and choose Run as administrator.

• Copy and paste the following (code) into the Search box and click the Search Registry button.

KB4550929

• When the scan is complete, a message will display that SearchReg.txt is saved in the same folder FRST was started from.
• Post the logfile SearchReg.txt as attachment in your next reply.

 

[vmantia1980]

Hello Maxstar,
You were right on Step 1, the update was not found on the computer.
I ran Step 2 from cmd
Then ran FRST64.exe (had to Unblock the EXE from Properties)
I am attaching the SearchReg log here.
MUCH appreciated.

 

[Maxstar]

Hi,

Start the

Farbar Recovery Scan Tool again.

Warning: This script was written specifically for this system. Do not run this script on another system.

• Download the attachment fixlist.txt and save it to your desktop.
• Right-click on FRST.exe and select "Run as administrator".
• Press the Fix button.
• If for some reason the tool needs a restart, please make sure you let the system restart normally.
• When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
• Post the logfile Fixlog.txt as attachment in your next reply.

Please reboot the server and try to install one of the roles again, if it failes attach a new copy of the CBS log.

 

[vmantia1980]

Hey Maxstar,
I am attaching the Fixlog here.
I will reboot the server this evening and try to install the rolls again and report back!
Appreciate your time!!

 

[Maxstar]

Hi,

Hopefully you can install the rolls without any issues after removing the remnants of an update.

 

[vmantia1980]

Hey Max,
Finally was able to get some downtime with the production server.
After performing your fix I was able to install AD DS but broke all other things including plain old RDP to the server.
I ran "sfc /scannow" and corruption was found.
Then I ran "DISM /online /cleanup-image /RestoreHealth".
Attaching the CBS.Log here.
Thanks again for the help!

 

[Maxstar]

2022-10-24 07:04:57, Info                  CSI    00000007 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-d..c-usersandcomputers_31bf3856ad364e35_10.0.14393.0_none_685eeff41f6af95f\Active Directory Users and Computers.lnk do not match actual file [l:40]'Active Directory Users and Computers.lnk' :
  Found: {l:32 e5w7k3u7jLOHp9Wj62egE6zOo/8wb5pf09oBXJFC/BQ=} Expected: {l:32 GpTNQuXdTAcYORrGqakxs3/2LiZLb64enysmQbm1DkA=}

(p)    CSI Payload Corrupt            amd64_microsoft-windows-d..c-usersandcomputers_31bf3856ad364e35_10.0.14393.0_none_685eeff41f6af95f\Active Directory Users and Computers.lnk
Repair failed: Missing replacement payload.

Hi,

Warning: This fix was written specifically for this system. Do not run this fix on another system.

• Save any work you have open, and close all programs.
• Download the attachment SFCFix.zip and save it to your desktop.
• Drag the SFCFix.zip file over the SFCFix.exe executable and release it.

• SFCFix will launch, let it complete.
• Once done, a file will appear on your desktop, called SFCFix.txt.
• Post the logfile (SFCFix.txt) as attachment in your next reply.

Step 2. Run the System File Checker and post the result. If it fails attach a new copy of the CBS log.

SFC /Scannow