[SOLVED] Issue installing KB5034119 and KB5034767 on Windows 2016 Server

E

ebaquillo

Member
Joined
Jun 21, 2023
Posts
19
I'm having issues installing KB5034119/KB5034767 on Windows 2016 Server. When I tried to install the updates after the machine rebooted, it goes to 68% and after a while it uninstall the updates.

SFC command completed with no error:

c:\sfc /scannow
Beginning system scan. This process will take some time.
Beginning verification phase of system scan.
Verification 100% complete.
Windows Resource Protection did not find any integrity violations.
Click to expand...

But DISM returned error code:

c:\Dism /Online /Cleanup-Image /RestoreHealth

Deployment Image Servicing and Management tool
Version: 10.0.14393.4169

Image Version: 10.0.14393.4169

[==========================100.0%==========================]
Error: 1734

The array bounds are invalid.
Click to expand...

CBS and ComponentsScanner files are attached.

Any help will be greatly appreciated.
 

Attachments

Hi,

Follow these instructions to remove an update.
  • Open the Start menu of Windows and type the command CMD
  • When you see Command Prompt on the list, right-click on it and select Run as administrator.
  • When command prompt opens, copy and paste the following command into it, then press enter.
Code: 
wusa /uninstall /KB:5010359
  • Let me know if it says it was successful or you get the message: The update KB5010359 is not installed on this computer.
 
Hi Maxstar,

Received the message: "The update KB5010359 is not installed on this computer."

I appreciate it.
 
Hi,

Download the
577bf0efb8088-FRST.png
Farbar Recovery Scan Tool and save it to your Desktop:

Download the 64 bit version: - Farbar Recovery Scan Tool Link
  • Open the startmenu and type the command cmd.
  • After you find the Command Prompt, right click on it and select Run as Administrator.
  • Copy and paste the following into the Command Prompt and press enter.
Code: 
reg load HKLM\COMPONENTS C:\WINDOWS\SYSTEM32\CONFIG\COMPONENTS
Right-click on the file FRST64.exe and choose Run as administrator.
  • Copy and paste the following (code) into the Search box and click the Search Registry button.
Code: 
KB5010359
  • When the scan is complete, a message will display that SearchReg.txt is saved in the same folder FRST was started from.
  • Post the logfile SearchReg.txt as attachment in your next reply.
 
Start the
577bf0efb8088-FRST.png
Farbar Recovery Scan Tool again.

Warning: This script was written specifically for this system. Do not run this script on another system.
  • Download the attachment fixlist.txt and save it to your desktop.
  • Right-click on FRST.exe and select "Run as administrator".
  • Press the Fix button.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally.
  • When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
  • Post the logfile Fixlog.txt as attachment in your next reply.
 

Attachments

Great, please run the following DISM command and post the result. If it fails attach a new copy of the CBS log.
Code: 
DISM /online /cleanup-image /RestoreHealth
 
Dism finished without issue:

c:>Dism /Online /Cleanup-Image /RestoreHealth

Deployment Image Servicing and Management tool
Version: 10.0.14393.4169

Image Version: 10.0.14393.4169

[==========================100.0%==========================] The restore operation completed successfully.
The operation completed successfully.
Click to expand...
 
Please attempt to update again. If it fails attach a new copy of the CBS logs.
 
Will try to install the update sometime today and keep you posted. Thank you so much for your help.
 
Hi,

Provide the profile information of this server.
  • Click the Start button and in the search box, type Command Prompt
  • When you see Command Prompt on the list, right-click on it and select Run as administrator.
    Copy and paste the following commands one at a time into the command prompt and press enter after each.
    Code: 
    reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList" /s > "%userprofile%\desktop\ProfileList.txt"
reg query "HKEY_USERS" /s >> "%userprofile%\desktop\ProfileList.txt"
  • These commands will collect the System and Application logs and create ProfileList.txt on your Desktop.
  • Attach this file in your next reply.
 
Hi,

This looks good, so let's look at the following error.
Code: 
2024-02-21 20:34:22, Error      [0x01805b] CSI    00000286 (F) Failed execution of queue item Installer: Network Drivers ({a111f280-5923-47c0-9a68-d0bafb577901}) with HRESULT 800106d9 [Error,Facility=(0001),Code=1753 (0x06d9)].  Failure will not be ignored: A rollback will be initiated after all the operations in the installer queue are completed; installer is reliable[gle=0x80004005]

1. Which (third party) security software is installed?
2. Do you use a VPN on this server?
3. Is this server connected to an WSUS server?
 
Hi,

Sentinel 1 and TrendMicro are installed in the server. It doesn't have VPN and not connected to WSUS server.

I tried installing the update again with both Sentinel 1 and TrendMicro stopped/disabled but the same result. I attached the new CBS and ProfileList files for your review.

Thank you so much.
 

Attachments

Hi,

Thanks, are the following accounts still active when you attempt to update? It seems they are a part of IIS, do you recognize both SID's?

Rich (BB code): 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-82-271721585-897601226-2024613209-625570482-296978595
    ProfileImagePath    REG_EXPAND_SZ    C:\Users\.NET v4.5
    Flags    REG_DWORD    0x1
    State    REG_DWORD    0x204
    Sid    REG_BINARY    01060000000000055200000071243210CA4E80355925AD78B2724925A388B311
    ProfileAttemptedProfileDownloadTimeLow    REG_DWORD    0x0
    ProfileAttemptedProfileDownloadTimeHigh    REG_DWORD    0x0
    ProfileLoadTimeLow    REG_DWORD    0x0
    ProfileLoadTimeHigh    REG_DWORD    0x0
    RefCount    REG_DWORD    0x0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-82-3876422241-1344743610-1729199087-774402673-2621913236
    ProfileImagePath    REG_EXPAND_SZ    C:\Users\.NET v4.5 Classic
    Flags    REG_DWORD    0x1
    State    REG_DWORD    0x204
    Sid    REG_BINARY    01060000000000055200000061820DE7BA282750EF7B11677172282E9438479C
    ProfileAttemptedProfileDownloadTimeLow    REG_DWORD    0x0
    ProfileAttemptedProfileDownloadTimeHigh    REG_DWORD    0x0
    ProfileLoadTimeLow    REG_DWORD    0x0
    ProfileLoadTimeHigh    REG_DWORD    0x0
    RefCount    REG_DWORD    0x0
 
Yes, they are part of our Web Server setup. Couple of other Web Servers have those 2 accounts in them and have no issue installing updates.
 
Okay, I wanted to make sure these were not remnants of a server migration. However, the error below is the core issue.
Rich (BB code): 
# for hex 0x6d9 / decimal 1753
  EPT_S_NOT_REGISTERED                                           winerror.h
# There are no more endpoints available from the endpoint

This is quite a cryptic error message, but in almost all cases related to third party security software / firewall settings.

What I would suggest is to disable (or uninstall) the security software again and then run the following command first in an elevated prompt.
Code: 
netsh advfirewall reset
Afterwards, reboot the server and attempt to update again.
 
You must log in or register to reply here.

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top