[SOLVED] Every DISM error is unique - can not remove Windows Defender in Server 2016

[venka91]

I have been struggling to remove windows defender either through GUI and powershell. The DISM command says component store is corrupted however when trying to do a Restore health it hangs at 73% and asking to specify source.

Even though i have used the switch source and pointed to restore the files from the local WIM, DISM command still says me the error. attaching the DISM logs here.

 

[Maxstar]

Hi and welcome to Sysnative,

Step 1. Download

SFCFix and save it to your desktop.

Warning: This fix was written specifically for this system. Do not run this fix on another system.

• Save any work you have open, and close all programs.
• Download the attachment SFCFix.zip and save it to your desktop.
• Drag the SFCFix.zip file over the SFCFix.exe executable and release it.

• SFCFix will launch, let it complete.
• Once done, a file will appear on your desktop, called SFCFix.txt.
• Post the logfile (SFCFix.txt) as attachment in your next reply.

Step 2. Run the following DISM command and post the result. If it fails attach a new copy of the CBS log.

DISM /online /cleanup-image /RestoreHealth

 

[venka91]

Please find the attached. DISM did not report any errors.

 

[Maxstar]

Hi,

Great, please try to remove the Windows Defender feature and post the result. If it fails attach a new copy of the CBS logs.

 

[venka91]

 

[Maxstar]

Could you please attach the latest CBS logs, the logs in you're latest reply are the same as in the first post!

 

[venka91]

Hi maxstar,

i can see the logs are appended today.

 

[Maxstar]

Hi,

Follow these instructions to remove an update.

• Open the Start menu of Windows and type the command CMD
• When you see Command Prompt on the list, right-click on it and select Run as administrator.
• When command prompt opens, copy and paste the following command into it, then press enter.

wusa /uninstall /KB:4467691

• Let me know if it says it was successful or you get the message: The update KB4467691 is not installed on this computer.

 

[venka91]

This update is not installed.

 

[Maxstar]

Download the

Farbar Recovery Scan Tool and save it to your Desktop:

Download the 64 bit version: - Farbar Recovery Scan Tool Link

• Open the startmenu and type the command cmd.
• After you find the Command Prompt, right click on it and select Run as Administrator.
• Copy and paste the following into the Command Prompt and press enter.

reg load HKLM\COMPONENTS C:\WINDOWS\SYSTEM32\CONFIG\COMPONENTS

Right-click on the file FRST64.exe and choose Run as administrator.

• Copy and paste the following (code) into the Search box and click the Search Registry button.

KB4467691

• When the scan is complete, a message will display that SearchReg.txt is saved in the same folder FRST was started from.
• Post the logfile SearchReg.txt as attachment in your next reply.

 

[venka91]

Hi there, please find the file.

 

[Maxstar]

Start the

Farbar Recovery Scan Tool again.

Warning: This script was written specifically for this system. Do not run this script on another system.

• Download the attachment fixlist.txt and save it to your desktop.
• Right-click on FRST.exe and select "Run as administrator".
• Press the Fix button.
• If for some reason the tool needs a restart, please make sure you let the system restart normally.
• When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
• Post the logfile Fixlog.txt as attachment in your next reply.

 

[venka91]

Hi there, pls find the file.

 

[Maxstar]

Please try to remove the Windows Defender feature again. I suspect it will fail again for another KB, so attach the the latest CBS logs in your next post.

 

[venka91]

It was not. I could successfully uninstall it. By the way, what is the trick.. i have seen lot of post in this forum, and all CBS logs are getting fixed. But i do not understand the thumb rule to identify the error. Basically what we need to look for. If you could share, you can share with the tutorial. Even i like to contribute in fixing DISM errors.

 

[Maxstar]

Hi,

Glad to hear the uninstallation was successful this time. Due to the complexity there is no 'general' tutorial, this because each case is different. But in this case several files were missing, and the remnants of KB4467691 causes the 0x80073701 error when you tried to remove Windows Defender.

If there are no remaining issues we can mark this thread as solved!

 

[venka91]

Very glad maxstar. I will be very thankful to you and definately this is saved our production from getting the OS reinstalled. Because we want to update the servers with Sophos endpoint, and this became show stopper to us.

Very much thankful to you for your effort and continuous support. You can mark this resolved.

 

[Maxstar]

You're welcome. Glad I could help to resolve this issue...