[SOLVED] Help with Windows Server 2016 Corruption

Rhplace

Member
Joined
Feb 11, 2025
Posts
14
I have a 2016 Server that has the following errors when running SFC and DISM.

The sfc /scannow comes back with

Windows Resource Protection found corrupt files but was unable to fix some of them.

DISM also indicates errors, but that they are fixable. However when I run dism /online /cleanup-image /restorehealth when it reaches 96.2% it throws the error 1734 with "The array bounds are invalid."

I have attached the log files.

Any help would be appreciated
 

Attachments

Hi @Rhplace,

Welcome to Sysnative Forums!

If you haven't already, please review the posting instructions here, and attach the requested log files. Without log files, our helpers will not be able to assist, and this will slow down fixing your machine.

If logs have been already been provided, our team of volunteers will analyse the provided log files to build a fix for your system. Please be aware that this may take several days from your initial post, due to the high volume of threads that we receive.


- Sysnative Windows Update Team
 
Hello and welcome,

Copy all files in the folder C:\Windows\Logs\CBS to your desktop.
Zip the copied files and attach the zipfile to your next reply.
 
Have the logs I attached been helpful? I have tried everything I know with SFC and DISM.

Thanks.
 

Attachments

Step 1:
WARNING! The following fix is specific to the user's system in this thread only. No one else should follow these instructions, as it could damage your system.
  • Download
    myjIXnC.png
    SFCFix and move the executable to your desktop.
  • Download the attachment SFCFix.zip and save it on your desktop.
  • Save any work you have open, and close all programs.
  • Drag the SFCFix.zip file over the SFCFix.exe executable and release it.
    1p8eDnI.gif
  • SFCFix will launch, let it complete.
  • Once done, a file will appear on your desktop, called SFCFix.txt.
  • Open the file, then copy and paste its content in your next reply.

Step 2:
Restart the machine.
Run the command sfc /scannow in an elevated commandprompt and report the result.
If it fails, copy the file C:\Windows\Logs\CBS\cbs.log to your desktop.
Zip the copied file and attach the zipped cbs.log to your next reply.
 

Attachments

Ok, so I ran SFCfix as suggested. I've attached the .txt output. Several things failed. I am not able to restart the server until after hours.
 

Attachments

Ok, I tried SFC /scannow even though I could not restart the server at this time and it returned a message indicating that all files were repaired successfully. I have attached the log for your reference. I was also able to start the Windows Server Management service which previous would not start at all. So far the server seems to be working. Thank you so much.
 

Attachments

Looks good.
Report the result again after a server restart.
 
Thank you.

So I did restart the server and ran SFC /SCANNOW. That seemed to pass fine, but I've included the cbs.log for your reference. However, the server also tried to install 2025-01 Cumulative Update for .NET Framework 4.8 for Windows Server 2016 for x64 (KB5049614) and 2025-02 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5052006), but both failed with error 0x800f0922. The 2025-01 Servicing Stack Update for Windows Server 2016 for x64-based Systems (KB5050109) installed just fine. I ran the Window Update Troubleshooter which indicated that there is a "potential windows update database error detected". I have not attempted any additional repairs.
 

Attachments

WARNING! The following fix is specific to the user's system in this thread only. No one else should follow these instructions, as it could damage your system.
  • Download the attachment SFCFixScript.txt and save it on your desktop.
  • Save any work you have open, and close all programs.
  • Drag the SFCFixScript.txt file over the SFCFix.exe executable and release it.
    1p8eDnI.gif
  • SFCFix will launch, let it complete.
  • Once done, a file will appear on your desktop, called SFCFix.txt.
  • Open the file, then copy and paste its content in your next reply.
 

Attachments

FRST Registry Search
  1. Download the Farbar Recovery Scan Tool and save it to your Desktop:
    64-bit: Downloading Farbar Recovery Scan Tool
    Note: Your antivirus program may report FRST incorrectly as an infection. If so, disable the real-time protection when downloading and running FRST.
  2. Right-click on the file FRST64.exe and choose Run as administrator.
  3. Copy and paste S-1-5-21-1286403237-2850087599-2869142982-1131 into the Search box and click the Search Registry button.
  4. When the scan is complete, a message will display that 'SearchReg.txt' is saved in the same folder FRST was started from. Notepad will open this file also. Close Notepad and attach the file 'SearchReg.txt' to your next reply.
  5. You may close any remaining open windows now.
 
Is the user "QBDataServiceUser28" still in use ?
It might be created by a program called "QuickBooks".
 
Quickbooks is installed on the server in server mode. This was probably created by Quickbooks to run the QB database.
 
FRST Scan:
Warning: This script was written specifically for this user, for use on that particular machine. Do not run this script on another machine.
  1. Download the attachment fixlist.txt and save it to your desktop.
  2. Right-click on FRST64.exe and select "Run as administrator".
  3. Press the Fix button.
  4. The tool will now process fixlist.txt.
  5. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  6. When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
  7. Attach the logfile Fixlog.txt to your next reply.
 

Attachments

Can you disable this profile in Active Directory ?
 
I have removed the Quickbooks user and database manager. They are no longer using QB in multiuser mode.
 

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top