DISM and SFC failing on Windows Server 2019

beardedmogul

Active member
Joined
Oct 26, 2021
Posts
28
I have a number of issues on a couple virtual Server 2019 servers.

  1. I can't install KB5006672 - Error 0x800f0986
  2. I can't run sfc /scannow - Fails at 73% or 74% with 'Windows Resource Protection could not perform the requested operation.'
  3. I can't run dism.exe /Online /Cleanup-Image /RestoreHealth - Fails at 89.6% with 'The source files could not be found.'
Please help.

Also note, IIS is installed. This is the only difference I can find between a couple servers that I have finally managed to work out of this mess and the ones I can't.
 
Last edited:
I have a number of issues on a couple virtual Server 2019 servers.

  1. I can't install KB5006672 - Error 0x800f0986
  2. I can't run sfc /scannow - Fails at 73% or 74% with 'Windows Resource Protection could not perform the requested operation.'
  3. I can't run dism.exe /Online /Cleanup-Image /RestoreHealth - Fails at 89.6% with 'The source files could not be found.'
Please help.

Also note, IIS is installed. This is the only difference I can find between a couple servers that I have finally managed to work out of this mess and the ones I can't.
In addition to the above, SFCFix.exe crashes with an unhandled exception.
 
Hello beardedmogul :-)

If you are still needing help with this please follow step 5 in the Posting Instructions so that we can review all the CBS log files.
 
Hello beardedmogul :-) ,

Thank you so much for being patient - I do apologise that I missed your post back in November and unfortunately December was busy and I rarely got onto the forums.

The CBS logs indicate a couple of files are missing so lets start with repairing those.

Code:
2021-11-29 12:03:34, Info                  CBS    =================================
2021-11-29 12:03:34, Info                  CBS    Checking System Update Readiness.
2021-11-29 12:03:34, Info                  CBS  
2021-11-29 12:03:34, Info                  CBS    (p)    CSI Payload Corrupt    (n)            amd64_microsoft-windows-network-security_31bf3856ad364e35_10.0.17763.1432_none_1aa976d7fc6052e8\r\wfplwfs.inf
2021-11-29 12:03:34, Info                  CBS    Repair failed: Missing replacement payload.
2021-11-29 12:03:34, Info                  CBS    (p)    CSI Payload Corrupt    (n)            amd64_microsoft-windows-setup-component_31bf3856ad364e35_10.0.17763.1518_none_7fa42c0d7f22467f\r\diagnostic.dll
2021-11-29 12:03:34, Info                  CBS    Repair failed: Missing replacement payload.

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

  1. Download SFCFix.exe (by niemiro) and save this to your Desktop.
  2. Download the file below, SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
  3. Save any open documents and close all open windows.
  4. On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
  5. Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
  6. SFCFix will now process the script.
  7. Upon completion, a file should be created on your Desktop: SFCFix.txt.
  8. Attach this SFCFix.txt file into your next post for me to check please.
After this has completed you can try another DISM restorehealth to see if it has worked this time. Please upload a new CBS log file afterwards.
 

Attachments

SFCFix version 3.0.2.1 by niemiro.
Start time: 2021-12-30 09:00:48.591
Microsoft Windows Server 10 Build 17763 - amd64
Using .zip script file at C:\Users\adm_darylb\Downloads\SFCFix.zip [0]




PowerCopy::
Successfully took permissions for file or folder C:\Windows\WinSxS\amd64_microsoft-windows-setup-component_31bf3856ad364e35_10.0.17763.1518_none_7fa42c0d7f22467f\r
Successfully took permissions for file or folder C:\Windows\WinSxS\amd64_microsoft-windows-network-security_31bf3856ad364e35_10.0.17763.1432_none_1aa976d7fc6052e8\r

Successfully copied file C:\Users\adm_darylb\AppData\Local\niemiro\Archive\WinSxS\amd64_microsoft-windows-setup-component_31bf3856ad364e35_10.0.17763.1518_none_7fa42c0d7f22467f\r\diagnostic.dll to C:\Windows\WinSxS\amd64_microsoft-windows-setup-component_31bf3856ad364e35_10.0.17763.1518_none_7fa42c0d7f22467f\r\diagnostic.dll.
Successfully copied file C:\Users\adm_darylb\AppData\Local\niemiro\Archive\WinSxS\amd64_microsoft-windows-network-security_31bf3856ad364e35_10.0.17763.1432_none_1aa976d7fc6052e8\r\wfplwfs.inf to C:\Windows\WinSxS\amd64_microsoft-windows-network-security_31bf3856ad364e35_10.0.17763.1432_none_1aa976d7fc6052e8\r\wfplwfs.inf.

Successfully restored ownership for C:\Windows\WinSxS\amd64_microsoft-windows-setup-component_31bf3856ad364e35_10.0.17763.1518_none_7fa42c0d7f22467f\r
Successfully restored permissions on C:\Windows\WinSxS\amd64_microsoft-windows-setup-component_31bf3856ad364e35_10.0.17763.1518_none_7fa42c0d7f22467f\r
Successfully restored ownership for C:\Windows\WinSxS\amd64_microsoft-windows-network-security_31bf3856ad364e35_10.0.17763.1432_none_1aa976d7fc6052e8\r
Successfully restored permissions on C:\Windows\WinSxS\amd64_microsoft-windows-network-security_31bf3856ad364e35_10.0.17763.1432_none_1aa976d7fc6052e8\r
PowerCopy:: directive completed successfully.




Successfully processed all directives.
SFCFix version 3.0.2.1 by niemiro has completed.
Currently storing 2 datablocks.
Finish time: 2021-12-30 09:00:49.482
Script hash: ISEbdaVAnxyRnxWkUvHF6VZMyUUNJ6o+QX66m0AG0aI=
----------------------EOF-----------------------
 
Looks good! Let me know how you get on with the DISM restorehealth.
 
DISM runs great. SFC still fails at 73% with 'Windows Resource Protection could not perform the requested operation.'
 
2021-12-30 10:20:18, Info CSI 000046e5 [SR] Beginning Verify and Repair transaction
2021-12-30 10:20:19, Info CSI 000046e6 Hashes for file member [l:27]'MSFT_MpComputerStatus.cdxml' do not match.
Expected: {l:32 ml:4096 b:250a58b9ec6c327e7d165cecbdbae0b1fdca203cd342dba12616527b47a44486}.
Actual: {l:32 b:cbfca6cb14b5a84f5bd30cbc9b05f008f4916e54a33a513fcedf8bff90002f5d}.
2021-12-30 10:20:19, Info CSI 000046e7 [SR] Cannot repair member file [l:27]'MSFT_MpComputerStatus.cdxml' of Windows-Defender-Management-Powershell, version 10.0.17763.831, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} in the store, hash mismatch
2021-12-30 10:20:19, Info CSI 000046e8 Hashes for file member [l:19]'MSFT_MpThreat.cdxml' do not match.
Expected: {l:32 ml:4096 b:ae595236832a3884d2aa3f913454ac6ff4c735f55e819c7f391c94b653281f92}.
Actual: {l:32 b:dd2decdbc6ec0357ddbd952ad3c29c0a05fc7368badb377648bb8f0964eedeec}.
2021-12-30 10:20:19, Info CSI 000046e9 [SR] Cannot repair member file [l:19]'MSFT_MpThreat.cdxml' of Windows-Defender-Management-Powershell, version 10.0.17763.831, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} in the store, hash mismatch
2021-12-30 10:20:19, Info CSI 000046ea Hashes for file member [l:26]'MSFT_MpThreatCatalog.cdxml' do not match.
Expected: {l:32 ml:4096 b:106d459542c3ec7dd9b7e545d74a4a98f0ad74c7db6a1333cfcd9168e2a3c076}.
Actual: {l:32 b:ff8bbde3d74745abc4b8bef6278c46bd9bba05c2e61f0eb033787443cde80f44}.
2021-12-30 10:20:19, Info CSI 000046eb [SR] Cannot repair member file [l:26]'MSFT_MpThreatCatalog.cdxml' of Windows-Defender-Management-Powershell, version 10.0.17763.831, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} in the store, hash mismatch
2021-12-30 10:20:19, Info CSI 000046ec Hashes for file member [l:28]'MSFT_MpThreatDetection.cdxml' do not match.
Expected: {l:32 ml:4096 b:a19bf000eb950ddd8438c30562c0fa6f3c0848432f55a219ef3d79b302aa6cf1}.
Actual: {l:32 b:3c082a55cd0e2d835764bb55c35292277b3c3a7a909543123a9b75bddf7ef20f}.
2021-12-30 10:20:19, Info CSI 000046ed [SR] Cannot repair member file [l:28]'MSFT_MpThreatDetection.cdxml' of Windows-Defender-Management-Powershell, version 10.0.17763.831, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} in the store, hash mismatch
2021-12-30 10:20:19, Info CSI 000046ee Hashes for file member [l:23]'MSFT_MpPreference.cdxml' do not match.
Expected: {l:32 ml:4096 b:8bbe2742d4284d6a9578cada99243b282e6be6df9a6f796d19e6e72eafa1e382}.
Actual: {l:32 b:dd557986b51074f3e4b7d5c0923903bf10ba919a1235605f5cba8a49b05ef07d}.
2021-12-30 10:20:19, Info CSI 000046ef [SR] Cannot repair member file [l:23]'MSFT_MpPreference.cdxml' of Windows-Defender-Management-Powershell, version 10.0.17763.831, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} in the store, hash mismatch
2021-12-30 10:20:19, Info CSI 000046f0 Hashes for file member [l:17]'MSFT_MpScan.cdxml' do not match.
Expected: {l:32 ml:4096 b:a27630566684ee79af41ac68dc70bbdbffc968b2489aa16be0d0fa0e0eccf0c8}.
Actual: {l:32 b:52a143a0bcb954c7ec8b35044ef9284055c75e7e2fe316cbaa120d665c06b1a7}.
2021-12-30 10:20:19, Info CSI 000046f1 [SR] Cannot repair member file [l:17]'MSFT_MpScan.cdxml' of Windows-Defender-Management-Powershell, version 10.0.17763.831, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} in the store, hash mismatch
2021-12-30 10:20:19, Info CSI 000046f2 Hashes for file member [l:20]'MSFT_MpWDOScan.cdxml' do not match.
Expected: {l:32 ml:4096 b:80ddeca09c6c85cde406bd9352c24cb6ca58ab17062159713f0591c46fa7b9fd}.
Actual: {l:32 b:064d8c62e1d613524ab6f414d4906ba77d8eefc4ba2bae3ac796b3332b1681ec}.
2021-12-30 10:20:19, Info CSI 000046f3 [SR] Cannot repair member file [l:20]'MSFT_MpWDOScan.cdxml' of Windows-Defender-Management-Powershell, version 10.0.17763.831, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} in the store, hash mismatch
2021-12-30 10:20:19, Info CSI 000046f4 Hashes for file member [l:22]'MSFT_MpSignature.cdxml' do not match.
Expected: {l:32 ml:4096 b:dbb84a0489a5dfeecb4e850412aabb72e725e5f89319d9e158a8baa9be6470da}.
Actual: {l:32 b:956a869d006ef2b477e146835befea9e9da6af260506389e79ce8a669906f0b3}.
2021-12-30 10:20:19, Info CSI 000046f5 [SR] Cannot repair member file [l:22]'MSFT_MpSignature.cdxml' of Windows-Defender-Management-Powershell, version 10.0.17763.831, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} in the store, hash mismatch
2021-12-30 10:20:19, Info CSI 000046f6 Hashes for file member [l:13]'Defender.psd1' do not match.
Expected: {l:32 ml:4096 b:1b1971fcbdc0abc871748d7409c696bb509c4ede12b0c748af0af96e629961b7}.
Actual: {l:32 b:b096112fba4e3abcde87ad6dfc843c7e2d74fb469125a00404e12fbe5f054ecb}.
2021-12-30 10:20:19, Info CSI 000046f7 [SR] Cannot repair member file [l:13]'Defender.psd1' of Windows-Defender-Management-Powershell, version 10.0.17763.831, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} in the store, hash mismatch
2021-12-30 10:20:19, Info CSI

I believe this may be caused by this, but trying their suggested fixes does not help.
 
That's good to know the DISM completes. Please upload the new set of CBS logs like you did in post #5 and I will take a look at the results. We now have family arriving for New Year so I may not be able to find time to explore this until next week.
 
Hello beardedmogul :-)

It looks as if you have some file hash problems on two other files which will need to be put right.

Code:
2021-12-30 10:46:21, Info                  CSI    00004748 Hashes for file member [l:10]'srpapi.dll' do not match.
 Expected: {l:32 ml:4096 b:15bc68bf3f422b61ea685325452a142295a27cf92cb8d2849168a90f17787b45}.
 Actual: {l:32 b:3284e093f151c8cc63e13c3e7f456c9ff6058c3d0d2a077d5a1984b3f359fb3a}.
2021-12-30 10:46:21, Info                  CSI    00004752 Hashes for file member [l:9]'appid.sys' do not match.
 Expected: {l:32 ml:4096 b:ca8e98e3e91a0f90bd3784eaa08b5845838bf66a189bbbde5cddf9b792d74304}.
 Actual: {l:32 b:574bb68ce6951d11a2f04ad71a8a59f67c546fd03a4b35641db36afa7ee73f21}.

These are part of the component Microsoft-Windows-AppIDCore, version 10.0.17763.2366

Please send me your components Hive and I will look into creating a fix for you.

Retrieve Components Hive
1. Navigate to C:\Windows\System32\Config and locate the COMPONENTS file.
2. Please copy this file to your desktop.
Note: If you receive an error that this file is in-use, simply reboot your computer and try again.
3. Right-click on this file on your desktop and select Send To...Compressed (zipped) folder. This will create a file named COMPONENTS.ZIP on your desktop.
4. The file will likely be too large to upload here so please upload to a file sharing service. Examples of services to upload to are Dropbox or OneDrive or SendSpace and then just provide the link in your reply.
 
Hello beardedmogul :-)

The registry entries for Microsoft-Windows-AppIDCore, version 10.0.17763.2366 were incomplete and so I have provided a registry fix below.

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

  1. Download SFCFix.exe (by niemiro) and save this to your Desktop.
  2. Download the attached file, SFCFixScript.txt, and save this to your Desktop. Ensure that this file is named SFCFixScript.txt - do not rename it.
  3. Save any open documents and close all open windows.
  4. On your Desktop, you should see two files: SFCFix.exe and SFCFixScript.txt.
  5. Drag the file SFCFixScript.txt onto the file SFCFix.exe and release it.
  6. SFCFix will now process the script.
  7. Upon completion, a log should be created on your Desktop: SFCFix.txt.
  8. Attach this file into your next post for me to analyse please
After this fix has completed please rerun SFC /scannow and upload the latest CBS.log. I am expecting there will be more to fix before it will complete but hopefullly we are making progress.
 

Attachments

Hello beardedmogul,

I have a fix for a new error I found in your latest logs. I've named the new zip file SFCFix2.zip so that you don't get confused. Feel free to delete the previous zip files now that you have used them.

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

  1. Download SFCFix.exe (by niemiro) and save this to your Desktop.
  2. Download the file below, SFCFix2.zip, and save this to your Desktop. Ensure that this file is named SFCFix2.zip - do not rename it.
  3. Save any open documents and close all open windows.
  4. On your Desktop, you should see two files: SFCFix.exe and SFCFix2.zip.
  5. Drag the file SFCFix2.zip onto the file SFCFix.exe and release it.
  6. SFCFix will now process the script.
  7. Upon completion, a file should be created on your Desktop: SFCFix.txt.
  8. Please Attach this file into your next post for me to check.

Once this is done then redo the SFC /scannow and if it completes with no errors you can try to update again. If there are errors please post the new set of CBS logs. It would also be worth running another DISM RestoreHealth to check that all is well.
 

Attachments

SFCFix version 3.0.2.1 by niemiro.
Start time: 2022-01-24 11:04:11.986
Microsoft Windows Server 10 Build 17763 - amd64
Using .zip script file at C:\Users\adm_darylb\Downloads\SFCFix.zip [0]




PowerCopy::
Successfully took permissions for file or folder C:\Windows\WinSxS\amd64_windows-defender-management-powershell_31bf3856ad364e35_10.0.17763.831_none_5892c02f26f780e5\MSFT_MpComputerStatus.cdxml

Successfully copied file C:\Users\adm_darylb\AppData\Local\niemiro\Archive\WinSxS\amd64_windows-defender-management-powershell_31bf3856ad364e35_10.0.17763.831_none_5892c02f26f780e5\MSFT_MpComputerStatus.cdxml to C:\Windows\WinSxS\amd64_windows-defender-management-powershell_31bf3856ad364e35_10.0.17763.831_none_5892c02f26f780e5\MSFT_MpComputerStatus.cdxml.

Successfully restored ownership for C:\Windows\WinSxS\amd64_windows-defender-management-powershell_31bf3856ad364e35_10.0.17763.831_none_5892c02f26f780e5\MSFT_MpComputerStatus.cdxml
Successfully restored permissions on C:\Windows\WinSxS\amd64_windows-defender-management-powershell_31bf3856ad364e35_10.0.17763.831_none_5892c02f26f780e5\MSFT_MpComputerStatus.cdxml
PowerCopy:: directive completed successfully.




Successfully processed all directives.
SFCFix version 3.0.2.1 by niemiro has completed.
Currently storing 4 datablocks.
Finish time: 2022-01-24 11:04:12.361
Script hash: JK4q8cIBQY6Ht7kl86cikSjXqWbAkAwOTPcafq1uZu0=
----------------------EOF-----------------------
 

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top