[SOLVED] Install Windows Defender on Server 2016

[Stig Nielsen]

I have been reading a previous thread regarding problems installing Defender, and @x BlueRobot has a solution.
I do not have the privilege to add to that thread, that's why I start a new

I have tried to follow the procedure and reading the CBS log to find the problem - i guess this is my problem
-I have attached the CBS log

CBS Failed to pin deployment while resolving Update: Package_5622_for_KB4034658~31bf3856ad364e35~amd64~~10.0.1.10.4034658-11487_neutral from file: (null) [HRESULT = 0x80073701 - ERROR_SXS_ASSEMBLY_MISSING]
CBS Failed to bulk stage deployment manifest and pin deployment for packageackage_623_for_KB5014702~31bf3856ad364e35~amd64~~10.0.1.73 [HRESULT = 0x80073701 - ERROR_SXS_ASSEMBLY_MISSING]

I have attached the SearchReg.txt on KB4034658 and hope you can reply with a fix

 

[Maxstar]

Hi and welcome to Sysnative,

• Open the Start menu of Windows and type the command CMD
• When you see Command Prompt on the list, right-click on it and select Run as administrator.
• When command prompt opens, copy and paste the following command into it, then press enter.

wusa /uninstall /KB:4034658

• Let me know if it says it was successful or if there are any errors. Or take a screenshot of the command prompt window and paste it into your next reply.

 

[Stig Nielsen]

I have tried uninstalling the KB - response it's not installed

 

[Maxstar]

Please perform a new REG search with FRST and the COMPONENTS hive loaded.

1. Start the

Command Prompt as administrator.

• Open the startmenu and type the command cmd.
• After you find the Command Prompt, right click on it and select Run as Administrator.
• Copy and paste the following into the Command Prompt and press enter.

reg load HKLM\COMPONENTS C:\WINDOWS\SYSTEM32\CONFIG\COMPONENTS

2.Right-click on the file

FRST.exe and choose Run as administrator.

• Copy and paste the following (code) into the Search box and click the Search Registry button.

KB4034658

• When the scan is complete, a message will display that SearchReg.txt is saved in the same folder FRST was started from.
• Post the logfile SearchReg.txt as attachment in your next reply.

 

[Stig Nielsen]

Done

 

[Maxstar]

Start the

Farbar Recovery Scan Tool again.

Warning: This script was written specifically for this system. Do not run this script on another system.

• Download the attachment fixlist.txt and save it to your desktop.
• Right-click on FRST.exe and select "Run as administrator".
• Press the Fix button.
• If for some reason the tool needs a restart, please make sure you let the system restart normally.
• When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
• Post the logfile Fixlog.txt as attachment in your next reply.

 

[Stig Nielsen]

Completed

 

[Maxstar]

Please try to update Windows, if it fails attach a new copy of the CBS log.

 

[Stig Nielsen]

I succeeded installing Windows Defender on the server - great, thanks !

The fix deletes a lot of registry values, right? - does this have any impact on the server stability ?

I need to perform this fix on a number of servers, is it possible to call FRST.EXE and specify FIX from the command-line?
-this would make my day a lot easier.

 

[Maxstar]

You're welcome. Glad to hear that Windows Defender is installed without any issues.

The removed keys and values were related to KB4034658, so this will have no further impact on the server stability.

Yes you can start FRST from the command line, but for each server you will need to create a specific fixlist. It is not recommended to use this one on other systems.

 

[Stig Nielsen]

How do I start FRST from the command line and perform Fix, without having to press the button in the GUI ?

All servers are virtual and created from the same template, the one with this KB problem
-I see the same error on all servers and think they are equal on this point

 

[Maxstar]

That's not possible, you always need to press the fix button. Can you please run the following steps on another server, than we can compare the logfiles. Please post the CBS log as well, to verify there are no other issues.

Step 1. Follow these instructions to remove an update.

• Open the Start menu of Windows and type the command CMD
• When you see Command Prompt on the list, right-click on it and select Run as administrator.
• When command prompt opens, copy and paste the following command into it, then press enter.

wusa /uninstall /KB:4034658

• Let me know if it says it was successful or if there are any errors.
• When you get the message: The update KB4034658 is not installed on this computer, then perform step 2.

Step 2. Start the

Command Prompt as administrator.

• Open the startmenu and type the command cmd.
• After you find the Command Prompt, right click on it and select Run as Administrator.
• Copy and paste the following into the Command Prompt and press enter.

reg load HKLM\COMPONENTS C:\WINDOWS\SYSTEM32\CONFIG\COMPONENTS

2.Right-click on the file

FRST.exe and choose Run as administrator.

• Copy and paste the following (code) into the Search box and click the Search Registry button.

KB4034658

• When the scan is complete, a message will display that SearchReg.txt is saved in the same folder FRST was started from.
• Post the logfile SearchReg.txt as attachment in your next reply.

 

[Stig Nielsen]

Here is a SearchReg from another server with the same problem

 

[Maxstar]

The results of the REG search are identical with the other server, so you can safefely use the attached fixlist on this server as well. If all the servers give the same result, then you can use it on each server. But if you notice any difference, please post the result so I can provide a new fix for that server.

Start the

Farbar Recovery Scan Tool again.

Warning: This script was written specifically for this system. Do not run this script on another system.

• Download the attachment fixlist.txt and save it to your desktop.
• Right-click on FRST.exe and select "Run as administrator".
• Press the Fix button.
• If for some reason the tool needs a restart, please make sure you let the system restart normally.
• When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
• Post the logfile Fixlog.txt as attachment in your next reply.

 

[Stig Nielsen]

Thanks for your help, it has been very valuable.

 

[Maxstar]

You're welcome, keep me posted if - all - the problems are solved...

 

[Stig Nielsen]

Hi again, I have another with a different KB problem

Failed to pin deployment while resolving Update: Package_7372_for_KB4550929~31bf3856ad364e35~amd64~~10.0.1.8.4550929-14563_neutral from file: (null) [HRESULT = 0x80073701 - ERROR_SXS_ASSEMBLY_MISSING]

KB4550929 - I have attached the SearchReg file - can you compile a fix-file I can use ?
Thanks

 

[Maxstar]

Hi,

1. Please run this command wusa /uninstall /KB:4550929 in an elevated command prompt, if it says: this update is not installed on this computer, then perform step 2.

2. Start the

Farbar Recovery Scan Tool again.

Warning: This script was written specifically for this system. Do not run this script on another system.

• Download the attachment fixlist.txt and save it to your desktop.
• Right-click on FRST.exe and select "Run as administrator".
• Press the Fix button.
• If for some reason the tool needs a restart, please make sure you let the system restart normally.
• When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
• Post the logfile Fixlog.txt as attachment in your next reply.

 

[Stig Nielsen]

Once again, thanks it worked

And the last one has yet another failing KB
-could you compile a fix for that too ?

 

[Maxstar]

Great, here is the next fix.

1. Please run this command wusa /uninstall /KB:4534307 in an elevated command prompt, if it says: this update is not installed on this computer, then perform step 2.

2. Start the

Farbar Recovery Scan Tool again.

Warning: This script was written specifically for this system. Do not run this script on another system.

• Download the attachment fixlist.txt and save it to your desktop.
• Right-click on FRST.exe and select "Run as administrator".
• Press the Fix button.
• If for some reason the tool needs a restart, please make sure you let the system restart normally.
• When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
• Post the logfile Fixlog.txt as attachment in your next reply.