Hi guys,
First time posting for help on this sort of forum, but am at my wits end. Reinstalling or replacing this server is not an option at this point.
We've got a server (running 2008 R2 Standard) that's failing to update these two updates (KB4481252 and KB4499164 - the latter of which is a big concern considering recent news) and I've tried just about everything I can possible think of/find in order to resolve. Multiple updates including KB890830, KB4490628 and KB4499406 installed successfully on the same patch release day these started failing to install, 22/05. (Gives you an idea how long I've been investigating this!)
General and more specific error-code related steps I've already taken:
*Triggered our inhouse Windows Update Fix script (contains compiled bits of 'reset windows update components', clear 'WU AutoUpdate registry key' fixes etc. that we've used for years to great success)
*Done a manual reset of Windows Update Components as per Microsoft's guides.
*Cleared SoftwareDistribution.
*Attempted updating through our global patch management software, Centrastage/Datto Endpoint Management.
*Attempted installing manually by downloading and running the two updates from the Windows Update catalog.
*Attempted installing via WUSA and DISM (as well as trying to 'uninstall' the non-installed KB in case there were remnants)
*Ran Windows Update Troubleshooter.
*Ran WURT/CheckSur and found no errors.
*Ran SFC - no integrity violations were found.
*Ran a dism /checkhealth - no issues found.
*Investigated reports that error can stem from disabled peerdissvc, but Branchcache role is not installed on this server and the service is not present.
*Disabled the anti-virus, Sophos, from running on the machine temporarily.
*Tried with disabled Windows Firewall.
*Tried allowing both ports 443 and 80 inbound and outbound in Windows Firewall as a troubleshooting step.
*As per Microsoft articles, added 'http://*.microsoft.com' to trusted sites and loosened ActiveX settings for Trusted Sites as per their recommendations.
*Tried clearing AppCompFlags\Layers key as a solution that I found as a fix for similar issues relating to the same error code.
*Ran SFCFix.exe - reports no corruptions were detected. (see attached)
*Due to differing KB numbers it's difficult to tell exactly what the last security roll-up is, but I saw Feb's was definitely installed without a shadow of a doubt, so checked the KB for March's rollup (which wasn't showing installed) and tried to install. Same error code.
*Dug through the WindowsUpdate.log and followed down the path of numerous error codes I found in there including 0x80070490, 8007007e, 0x80070002 and 80070663.
SFCFix.txt attached and all files within CBS folder downloadable from
https://eu.soonr.com/2/filelink/bsyna-bygkh5o-to6xg2el
SFC and DISM have both been run a couple of times this week, but let me know if you need a more current set.
If anyone's able to assist I'd be eternally grateful, as I'm absolutely stumped.
TIA!
Pascal