[SOLVED] I can't install March and April security updates but everything else is OK

[kinyip]

Hello,

My Windows Update problem is with my Lab.'s laptop running Windows 7 (64 bit). At the end of March, I started to notice that the laptop kept on installing a few security/rollup updates of Windows Updates (namely KB4088875, KB4088878 and KB4088881). ( There was a blue-screen failure at the end of Friday evening when I pressed the hibernation button to take the laptop to go home. But it booted up OK after I switched it on again at home. ) More recently, it's failed the April security updates (namely KB4093118, KB4093108).

I went to look at the error code in "Review your update history". The first one failed with error code "80070005". The end one had error code "800F0826".

I can also update other Windows Updates but just not the above ones, even the "Cumulative security update for Internet Explorer: April 10, 2018" in April, ie. KB4092946. The laptop seems OK otherwise.

The symptom has been that: it installed OK in current session and when I went to restart it, it seemed to go as far as 13% and then shut down and after the restart, it'd go only up to 13% again before declaring "Failure ..." and reverting back to the previous state (shutting down and restarting).

I've tried virtually everything mentioned in https://support.microsoft.com/en-us/help/10164, including "Windows Update Troubleshooter", renaming c:\Windows\SoftwareDistribution /catroot2 folder. I didn't try installing "Servicing Stack Update" (KB3177467) as my system has got this update already since 2016.

"sfc /scannow" gave no error. SFCFIX also gave no error:
----------------------------------------------------------------------------------------

SFCFix version 3.0.0.0 by niemiro.
Start time: 2018-04-15 10:09:48.463
Microsoft Windows 7 Service Pack 1 - amd64
Not using a script file.


AutoAnalysis::
SUMMARY: No corruptions were detected.
AutoAnalysis:: directive completed successfully.


Successfully processed all directives.

Failed to generate a complete zip file. Upload aborted.

SFCFix version 3.0.0.0 by niemiro has completed.
Currently storing 0 datablocks.
Finish time: 2018-04-15 11:07:23.062
----------------------EOF-----------------------

I put the CBS.zip (which has the CBS.log) temporarily at : https://www.c-ad.bnl.gov/kinyip/download/CBS.zip . ( I'll delete this when this file is no longer useful. )

I've asked a young computer/IT guy to look at it but he couldn't solve the problem after one day. Today, for an experiment, I tried to install the optional KB4075211
(February 22, 2018—KB4075211 (Preview of Monthly Rollup) and it worked, too. So, the laptop doesn't really fail every "Monthly Rollup" but just Mar./Apr. (so far).


I searched for 13% in CBS.log and saw :
============
2018-04-16 14:32:44, Info CBS Progress: UI message updated. Operation type: Update. Stage: 1 out of 1. Percent progress: 13.
2018-04-16 14:32:44, Info CBS DriverUpdateInstallUpdates failed [HRESULT = 0x80070005 - E_ACCESSDENIED]
2018-04-16 14:32:44, Error CBS Doqe: Failed installing driver updates [HRESULT = 0x80070005 - E_ACCESSDENIED]
2018-04-16 14:32:44, Info CBS Perf: Doqe: Install ended.
2018-04-16 14:32:44, Info CBS Failed installing driver updates [HRESULT = 0x80070005 - E_ACCESSDENIED]
2018-04-16 14:32:44, Error CBS Shtd: Failed while processing non-critical driver operations queue. [HRESULT = 0x80070005 - E_ACCESSDENIED]
=====================================================================================================

Somebody here :
https://social.technet.microsoft.com...w7itproinstall

said that he solved the problem : " .... I had to take ownership and reset permissions on about 100 different reg subkeys of HKLM\System\CurrentControlSet\Enum\Root .... "

I almost wanted to do the other day. But the above message was ~2011 and so I hesitated a bit. I've got another Windows 7 machine in 32-bit and I checked the permissions for
HKLM\System\CurrentControlSet\Enum\Root. Both Windows 7 machines got the same permission. But the 32-bit Windows can install the recent Mar./Apr. security updates.

Any advice/instruction ?? I'll really appreciate !

Kin


PS: I usually use it in WIFI so that it is in the Lab.'s network. When I connect it with Ethernet cable, the lab.'s windows update policy would be triggered and it'd try to push the updates that the Lab. wants. So, I automatically got updates typically when I connect the laptop with the Lab.'s network. But of course, I've been starting the Windows Update myself (in Wifi of the Lab. or at home) ever since I noticed the problem.

 

[kinyip]

A couple clarifications/corrections :

> I can also update other Windows Updates but just not the above ones, even the "Cumulative security update for Internet Explorer: April 10, 2018" in April, ie. KB4092946.

I meant: " I can update other Windows Updates, even the "Cumulative security update for Internet Explorer: April 10, 2018" in April, ie. KB4092946 (!!!), but just not the above-mentioned ones.


> There was a blue-screen failure at the end of Friday evening

This was Mar. 30, 2018.

 

[kinyip]

Hi,

I probably found the culprit. In “Device Manager”, on the the 3^rd item “Computer”, one’d see “ACPI x64 based PC” and if you click on properties, you’d see that the “driver” seems wrong as the “provider” is unknown. And usually when you do “update driver”, it should say that you’ve already got the updated driver (like in
another Windows machine of mine). But for this in my laptop, it doesn’t and when it tried to install the fix but failed with “The data is invalid”. I've uploaded the ACPI x64-based PC.JPG for you to see.

I thought about checking the above because in the c:\windows\CBS.log (where the update error messages are), around the 13 percent, I saw :
==============================================================================
Progress: UI message updated. Operation type: Update. Stage: 1 out of 1. Percent progress: 11.
2018-04-16 14:32:33, Info CBS INSTALL index: 1, phase: 2, result 0, inf: acpi.inf
2018-04-16 14:32:34, Info CBS Progress: UI message updated. Operation type: Update. Stage: 1 out of 1. Percent progress: 12.
INSTALL index: 0, phase: 3, result 5, inf: machine.inf
2018-04-16 14:32:44, Info CBS Progress: UI message updated. Operation type: Update. Stage: 1 out of 1. Percent progress: 13.
2018-04-16 14:32:44, Info CBS DriverUpdateInstallUpdates failed [HRESULT = 0x80070005 - E_ACCESSDENIED]
2018-04-16 14:32:44, Error CBS Doqe: Failed installing driver updates [HRESULT = 0x80070005 - E_ACCESSDENIED]
2018-04-16 14:32:44, Info CBS Perf: Doqe: Install ended.
2018-04-16 14:32:44, Info CBS Failed installing driver updates [HRESULT = 0x80070005 - E_ACCESSDENIED]
=================================================================================================================

acpi.inf, machine.inf etc. are all the driver files. Which prompted me to check the "Device Manager".
Is there a way to fix "ACPI x64-based PC" without doing "Repair Install" ? I've already tried to "Update" (using online or my local machine) and both gave the picture that you've seen.

Kin

 

[kinyip]

Hi,

With the above problem, I've convinced myself to do a "Repair Install" or "in-place upgrade install" so that I hoped to lose too much. It took several hours to finish it. So then, at least "ACPI x64-based PC" now seems normal with "Microsoft" as the provider etc.

But then, even though other software (Microsoft Office etc.) were still there and good to use, I realized that I needed >100 or almost 200 updates to do. Which was like another day --- I separated the hundreds in a few batches

So, finally, I got to the "2018-04 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (Kb4093118)" and it worked without problem, finally !

But then, I found that all the .Net Framework 4.x didn't seem to show up as installed program in "Program and Features" and I couldn't install Internet Explorer 11 (even the Windows Updates failed). .Net 4.x stuff are important because quite a few software/drivers depend on it and they either didn't start or might have problem etc.

I tried to install them 4.0, 4.5, 4.7 but they all failed. That Microsoft's "NetFxRepairTool.exe" again has been useless. But I've finally seen the sentence hidden in the middle of the logfile (which the installer showed you !):
======================================================
MSI (s) (F0:04) [20:17:47:679]: Product: Microsoft .NET Framework 4.7 -- A later version of Microsoft .NET Framework 4.7 is already installed.
======================================================

So, somehow, in the "Repair Install", the .NET stuff was not completely gone and the new installer saw a mark of it (in Registry ?!). A few lines above the above-mentioned lines, in the same log, I saw :

MSI (s) (F0:04) [20:17:47:644]: PROPERTY CHANGE: Adding NEWERVERSIONDETECTED property. Its value is '{E0C7523C-686B-3EE6-8FB1-CB4339E30EDD}'.

I then searched for "E0C7523C-686B-3EE6-8FB1-CB4339E30EDD" in the registry, I found it only in

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\C3257C0EB6866EE3F81BBC34933EE0DD\InstallProperties]

There, one key is LocalPackage which points to "C:\Windows\Installer\17e360.msi".

By luck, I went to execute it. And voila ! I saw "Microsoft .NET Framework 4.7.1" show up in "Programs and Features" !!! To be safe, I clicked it to do a "repair". Then, things just worked !

For the Internet Explorer 11, I almost didn't want to bother with it. But it's like a challenge. I googled and learnt that the log file is in c:\Windows\IE11|main.log. I saw the error message:
========================================
02:56.874: INFO: Process 'C:\Windows\SysNative\dism.exe /online /add-package /packagepath:C:\Windows\TEMP\IE17B66.tmp\IE11-neutral.Downloaded.cab /quiet /norestart' exited with exit code 0x800F081E (-2146498530)
02:57.124: ERROR: Neutral package installation failed (exit code = 0x800f081e (2148468766)).
==================================================================


It's not much hint but I used it to google. But I came across : windows 7 - Error installing IE11 - prerequisite update KB2834140 - Super User in which the last message by Mike (answered Aug 9 '16 at 13:46) told me to install this particular Windows Update: "Platform Update for Windows 7 SP1 and Server 2008 R2 SP1 (2670838)". In fact, it's one of the very few "optional" ones that I haven't updated from Microsoft Update site (not our Lab.'s WSUS).

After installing that 2670838, finally "Internet Explorer 11" could be installed ! It's not much to everybody else but after almost 10 failures, this is a joy !

So now, I'm a happy person.

Kin