[SOLVED] Defender Windows 2016 Server

[RalfB]

I uninstalled the antivirus program McAfee on the server. When attempting to reinstall Microsoft Defender with ServerManager, I receive the following error message:0x800f0831

Windows Server 2016 Version 1607(Build14393.6085)

Could someone kindly help me, please?

Ralf

 

[Maxstar]

Hi and welcome to Sysnative,

Follow these instructions to remove an update.

• Open the Start menu of Windows and type the command CMD
• When you see Command Prompt on the list, right-click on it and select Run as administrator.
• When command prompt opens, copy and paste the following command into it, then press enter.

wusa /uninstall /KB:5025228

• Let me know if it says it was successful or you get the message: The update KB5025228 is not installed on this computer.

 

[RalfB]

Thank you for the quick response. Unfortunately, the message Update 5025228 is not installed on this computer appears.

 

[Maxstar]

Hi,

Download the

Farbar Recovery Scan Tool and save it to your Desktop:

Download the 64 bit version: - Farbar Recovery Scan Tool Link

• Open the startmenu and type the command cmd.
• After you find the Command Prompt, right click on it and select Run as Administrator.
• Copy and paste the following into the Command Prompt and press enter.

reg load HKLM\COMPONENTS C:\WINDOWS\SYSTEM32\CONFIG\COMPONENTS

Right-click on the file FRST64.exe and choose Run as administrator.

• Copy and paste the following (code) into the Search box and click the Search Registry button.

KB5025228

• When the scan is complete, a message will display that SearchReg.txt is saved in the same folder FRST was started from.
• Post the logfile SearchReg.txt as attachment in your next reply.

 

[RalfB]

Thank you. The file is attached in this reply.

 

[Maxstar]

Start the

Farbar Recovery Scan Tool again.

Warning: This script was written specifically for this system. Do not run this script on another system.

• Download the attachment fixlist.txt and save it to your desktop.
• Right-click on FRST.exe and select "Run as administrator".
• Press the Fix button.
• If for some reason the tool needs a restart, please make sure you let the system restart normally.
• When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
• Post the logfile Fixlog.txt as attachment in your next reply.

 

[RalfB]

Ok, here is the Fixlog.txt

 

[Maxstar]

Please open an elevated command prompt, run the following commands and post the result of each update:

wusa /uninstall /KB:4593226
wusa /uninstall /KB:5003638
wusa /uninstall /KB:5005043
wusa /uninstall /KB:5008207
wusa /uninstall /KB:5010359
wusa /uninstall /KB:5013952
wusa /uninstall /KB:5014702
wusa /uninstall /KB:5022289
wusa /uninstall /KB:5026363

 

[RalfB]

Hi,
the message Update is not installed on this computer appears. Screenshot here.

 

[Maxstar]

1. Start the

Command Prompt as administrator.

• Open the startmenu and type the command cmd.
• After you find the Command Prompt, right click on it and select Run as Administrator.
• Copy and paste the following into the Command Prompt and press enter.

reg load HKLM\COMPONENTS C:\WINDOWS\SYSTEM32\CONFIG\COMPONENTS

2.Right-click on the file

FRST.exe and choose Run as administrator.

• Copy and paste the following (code) into the Search box and click the Search Registry button.

KB4593226;KB5003638;KB5005043;KB5008207;KB5010359;KB5013952;KB5022289;KB5014702;KB5026363

• When the scan is complete, a message will display that SearchReg.txt is saved in the same folder FRST was started from.
• Post the logfile SearchReg.txt as attachment in your next reply.

 

[RalfB]

OK, here is the file.

 

[RalfB]

OK, here is the file.

 

[Maxstar]

Hi,

Step 1. Start the

Farbar Recovery Scan Tool again.

Warning: This script was written specifically for this system. Do not run this script on another system.

• Download the attachment fixlist.txt and save it to your desktop.
• Right-click on FRST.exe and select "Run as administrator".
• Press the Fix button.
• If for some reason the tool needs a restart, please make sure you let the system restart normally.
• When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
• Post the logfile Fixlog.txt as attachment in your next reply.

Step 2. Run the following DISM command and post the result. If it fails attach a new copy of the CBS log.

DISM /online /cleanup-image /RestoreHealth

 

[RalfB]

Hi,

The tool is still running. I will write again as soon as it is ready.

Thank you for help

 

[Maxstar]

Hi,

Deleting all the keys and values in the registry may take some time, so please wait, this script was quite large so it could take some time to complete.

 

[RalfB]

The scan tool has been running for 15 hours. I have not cancelled it and now run the DISM command at the same time.
Dism was able to complete the recovery process successfully.

I am still running the tool in the background. Or should I cancel it?

Thanks
Ralf

 

[RalfB]

Hi,
you have solved the problem. I was able to install Defender now. Thank you very much for the great support. I will show my appreciation with a donation to the forum.

One more question. I have the same problem that Defender cannot be installed on another server.

Should I create a new thread or continue writing in this one?

Kind regards
Ralf

 

[Maxstar]

Hi,

You're welcome. Glad you were able to install the Windows Defender feature this time.
For the other server I would start a new thread, just to avoid confusions with log files and scripts.