[SOLVED] Cumulative Updates Windows Server 2016 not installing

A

AlexMilotin

Member
Joined
Aug 4, 2019
Posts
10
Hello,

We've been trying since few months to figure out why no Cumulative update can be installed on one of our Windows Server 2016.
What we've tried so far :

1. Installing patches manually (the click click way) => Updates hanging at a specific time without getting an error
2. Expanding MSU and using DISM to add the packages manually : dism /online /add-package /packagepath:<path to cab file>

1564910312138.png

This last step was when we've figure out that something is wrong and the db might be corrupted.

I've attached the CBS,DISM and SFCFix logs.

3. Check the CAT DB integrity as suggested for Win2008R2 but i was curious if it applies to Win 2016 as well.(https://social.technet.microsoft.co...id-257-system-catalog-database-integrity.aspx)
1564910552166.png

After performing the steps mentioned in the link.

1564910586902.png

4. To be mentioned that on the system there is only 1 Cumulative installed (KB4471321), which we've also tried to uninstall it, without success

Processing 1 of 1 - Removing package Package_for_RollupFix~31bf3856ad364e35~amd64~~14393.2665.1.5
[==========================100.0%==========================]
An error occurred - Package_for_RollupFix Error: 0x8007371b

Error: 14107

One or more required members of the transaction are not present.
1564910700646.png

5. Ran DISM /online /cleanup-image /RestoreHealth (ended successfully, but no improvement)
6. Ran SFC /scannow normally and also using an offbootdir (Windows Resource Protection did not find any integrity violations for both)
7. Mounted the HDD to another VM and ran DISM on the image using a WIM source (ended successfully, but not improvement).
8. Based on a suggestion from one of my colleagues followed the below steps, but unfortunately it seems it doesn't apply because the 2 mentioned Reg subkeys does not exists)
Code: 
Highlight HKEY_LOCAL_MACHINE and from the File menu click on Load Hive

The select Hive location (sources) will open then browse to C:\Windows\System32

Locate the folder C:\Windows\System32\Config\Components and click to select.

When you are prompted for a name, type Offline_Components

You will now see Offline_Components - expand the + and locate then delete the following registry keys -

HKEY_LOCAL_MACHINE\Offline Components\AdvancedInstallersNeedResolving

HKEY_LOCAL_MACHINE\Offline Components\PendingXmlIdentifier

Go back to Offline_Components - highlight it then from the File menu select Unload Hive

Close the registry up and reboot

I ran out of ideas at this point i'm taking any suggestion that could be performed.

To be mentioned that the VM we are doing the tests is a clone of the productive environment, and we've also tried disabling every non-microsoft services from msconfig.
 

Attachments

Oh i forgot to add some other things we've done, even though i am sure i've missed a lot others

We have also used the Reset Windows Update Tool going through every of the marked files.
No improvement.
1564912318360.png
 
Hi!

Please check for updates and let me know which updates are listed as needed to be installed. Let them try to install and attach CBS.log if they happen to fail again.
 
Hello @softwaremaniac.
Unfortunately that is not a solution. The system is in a protected environmnent and its not connected to a WSUS server.
We are using as patching tool BMC Bladelogic Server Automation (shavlik based), but on the analysis the only patches found are always the latest Cumulative and by need/release the corresponding SSU.
For instance this would be the KBs found as missing for the July scan
1564994652939.png

The HotFixes that shows as installed
1564995098667.png
 
Just to ensure I understand you correctly, your system is not connected to the internet nor can you use msu files to install updates directly due to policies and your only option is to use DISM?
 
Not quite.
The server is connected to network, but it gets outside internet through a firewall. There is also a GPO that sets disables updates from MS directly since we're using and internal automation tool.
I can install the patches manually running them from MSU but it the progress bar stops around 20% but it never shows as fail or something, it just stucks there.
I went forward using DISM as an alternative to injecting the packaged on the "harsh" way, hoping i can get at least an error, errors stated in the CBS log i first attached.

If you want have anything in mind, i`m open
 
Last edited:
To be more specific from the CBS Log, this is where it fails when installing any cumulative update

Code: 
2019-08-04 00:40:37, Info                  CBS    Appl: Evaluating package applicability for package Package_5732_for_KB4471321~31bf3856ad364e35~amd64~~10.0.1.5, applicable state: Installed Invalid
2019-08-04 00:40:37, Info                  CBS    Unexpected: Source State: Staged, Target State: Installed Invalid
2019-08-04 00:40:37, Info                  CBS    ASSERT: Assertion failed in onecore\base\cbs\core\cbsexecutionitem.cpp(108)
Unable to match state from StateToAction table
2019-08-04 00:40:37, Info                  CBS    Failed to FinalizeEx using worker session [HRESULT = 0x800706be]
2019-08-04 00:40:37, Info                  CBS    Failed to ping TiWorker, looks like TiWorker crashed, re-launch it
2019-08-04 00:40:37, Info                  CBS    Terminate call on TiWorker returns non-S_OK. [HRESULT = 0x800706ba]
2019-08-04 00:40:39, Info                  CBS    Starting TiWorker initialization.
2019-08-04 00:40:39, Info                  CBS    Ending TiWorker initialization.
2019-08-04 00:40:39, Info                  CBS    Starting the TiWorker main loop.
2019-08-04 00:40:39, Info                  CBS    TiWorker starts successfully.
2019-08-04 00:40:39, Info                  CBS    Universal Time is: 2019-08-03 15:40:39.873
2019-08-04 00:40:39, Info                  CBS    Loaded Servicing Stack v10.0.14393.3081 with Core: C:\windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.14393.3081_none_7f2efc9421cf4805\cbscore.dll
2019-08-04 00:40:39, Info                  CSI    00000001@2019/8/3:15:40:39.904 WcpInitialize (wcp.dll version 0.0.0.6) called (stack @0x7ffb6f956cc9 @0x7ffb6fc95e7b @0x7ffb6fc96c32 @0x7ff66bca2d9d @0x7ff66bca35e0 @0x7ffb7c3a82d3)
2019-08-04 00:40:39, Info                  CBS    Could not load SrClient DLL from path: SrClient.dll.  Continuing without system restore points.
2019-08-04 00:40:39, Info                  CBS    NonStart: Set pending store consistency check.
2019-08-04 00:40:39, Info                  CBS    Session: 30755345_3447005648 initialized by client DISM Package Manager Provider, external staging directory: (null), external registry directory: (null

I've started a new DISM session. It will take around 20 minutes and i will upload the CBS right after. Stay around please :D We've been missing the updates since Dec 2018 and its starting to become annoying :)
1565028760256.png
 
The CBS logs might be a little mixed up since i did a new WU reset and started checking for updates online, just to see if there will any other KB found, other than the ones discovered in our patching tool,but now.
1565029188883.png

Also in the meantime, the DISM session failed with the same error.
CBS Log attached.
 

Attachments

Let's try the following:

Step#1 - Capture Process Monitor Trace
1. Download and run Process Monitor. Leave this running while you perform the next steps.
2. Try running DISM just like you have in the past.
3. Stop Process Monitor as soon as the it fails. You can simply do this by clicking the magnifying glass on the toolbar as shown below.
i3yiUac.png


4. Select the File menu...Save... and save the file to your desktop. This is likely the default location. The name (unless changed) will be LogFile.PML. This is fine.
5. Zip up and provide the link to the LogFile.PML file as well as your CBS.log Examples of services to upload to are Dropbox or OneDrive or SendSpace.
 
Hi!

Thanks for the info. Please do the following.

1. Click your Start button and type cmd in the search box. Right-click on cmd from the search results and select Run as administrator. Answer Yes if the UAC prompt comes up.
2. Copy/Paste the following in to the command-prompt window and hit enter.
wmic qfe list brief /format:texttablewsys > "%USERPROFILE%\desktop\hotfix.txt"

3. This will create a file on your desktop named hotfix.txt. Please attach this to your next reply.
 
Hi!

This is rather interesting. I've never seen this before. My apologies for troubling you with so many logs, but we need to research before we act.

When able, please provide the following file:

C:\Windows\WindowsUpdate.log

Registry export of the following keys:

  • HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
  • HKEY_LOCAL_MACHINE\SYSTEM\Internet Communication Management\Internet Communication
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate
  • HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU

Please let me know should you require guidance on key exports. :-)
 
Would it sound weird and will it make you feel loosing faith in humanity if i'd tell you that an In place upgrade using the right image did the trick ?
I can still get the Keys from the clone of the production system if you really want to find a fix.
Personally i don't like InPlace upgrade, but i had to try it
 
You must log in or register to reply here.

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top