[SOLVED] Issues updating windows due to SppInstaller

[joren]

So I've ran into an issue of being unable to install the current update from 10/10/2023, but before that a few details:

- I have recently done a format of my disk, re-create partitions and did a clean install of Windows 11
- The reasoning for this is the inability to start any Office products, like word, powerpoint, excel, etc. Updating would also keep rolling back, sadly I do not have the logs for that anymore as the files are all gone.

Now the update it attemps is the following: `KB5031354` and the error it shows me is 0x800f0922. Pretty standard error, I googled a lot and attempted the following:
- DISC health scan/restore
- SFC scan
- Removing all update files and redownloading them, also did manual installation of update
- I followed the resetting windows update services steps, though it wouldnt let me do a portion of the `regsvr32.exe xxxx.dll` commands
- I disabled any AV and the firewall
- I enabled all the .NET features in windows, including its sub-folders.

None of that worked, same error, so I dove a bit deeper and went into the CBS log:

2023-10-13 02:28:01, Error      [0x01803c] CSI    00000dc9 (F) Failed execution of queue item Installer: SppInstaller ({1b265fd2-721c-4e59-ad55-9d102a5d1d7f}) with HRESULT HRESULT_FROM_WIN32(ERROR_INVALID_DATA).  Failure will not be ignored: A rollback will be initiated after all the operations in the installer queue are completed; installer is reliable[gle=0x80004005]

As far as im aware this would be connected to the sppinst.dll, which was confirmed:

2023-10-13 02:28:41, Error CSI 00000eac (F) Installer: SppInstaller Binary Name: sppinst.dll ErrorCode: 8007000d Phase: 31 Mode: Delta Component: NONE[gle=0x80004005]

This is when I attempted resetting windows update services, without succes, sadly. Then I ran the Farbar Recovery Scan and looked for sppinst.dll. The results are as follows:

================== Search Files: "sppinst.dll" =============

C:\Windows\WinSxS\x86_microsoft-windows-s..llers-onecore-extra_31bf3856ad364e35_10.0.22621.2423_none_a7a3a2198670cb62\sppinst.dll
[2023-10-12 23:57][2023-09-19 11:21] 000032128 _____ (Microsoft Corporation) 6DF11F2B8DBD60E200B51B0ACF4BF4E7 [File is digitally signed]

C:\Windows\WinSxS\x86_microsoft-windows-s..llers-onecore-extra_31bf3856ad364e35_10.0.22621.1_none_2951f35dfe99a9c6\sppinst.dll
[2022-05-07 07:19][2022-05-07 07:19] 000032112 _____ (Microsoft Corporation) 1A77F4965539E87E0779E934605D6EC3 [File is digitally signed]

C:\Windows\WinSxS\amd64_microsoft-windows-s..llers-onecore-extra_31bf3856ad364e35_10.0.22621.2423_none_03c23d9d3ece3c98\sppinst.dll
[2023-10-12 23:57][2023-09-19 14:05] 000054640 _____ (Microsoft Corporation) 40FCCC2DB56C7A7255707D74E5D36C5C [File is digitally signed]

C:\Windows\WinSxS\amd64_microsoft-windows-s..llers-onecore-extra_31bf3856ad364e35_10.0.22621.1_none_85708ee1b6f71afc\sppinst.dll
[2022-05-07 07:19][2022-05-07 07:19] 000054624 _____ (Microsoft Corporation) F43B924EEA4F0CDB4AE61D6F40C65C32 [File is digitally signed]

I also have the results of sc query sppsvc & sc qc sppsvc

SERVICE_NAME: sppsvc
        TYPE               : 10  WIN32_OWN_PROCESS
        STATE              : 1  STOPPED
        WIN32_EXIT_CODE    : 0  (0x0)
        SERVICE_EXIT_CODE  : 0  (0x0)
        CHECKPOINT         : 0x0
        WAIT_HINT          : 0x0

C:\Windows\System32>sc qc sppsvc
[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: sppsvc
        TYPE               : 10  WIN32_OWN_PROCESS
        START_TYPE         : 2   AUTO_START  (DELAYED)
        ERROR_CONTROL      : 1   NORMAL
        BINARY_PATH_NAME   : C:\Windows\system32\sppsvc.exe
        LOAD_ORDER_GROUP   :
        TAG                : 0
        DISPLAY_NAME       : Software Protection
        DEPENDENCIES       : RpcSs
        SERVICE_START_NAME : NT AUTHORITY\NetworkService

C:\Windows\System32>

I honestly do not know whats wrong, if anyone would be able to help me please let me know...

 

[joren]

Small update: I updated my bios to the newest version, that didnt work. As for my PC specs check the attached file, I used Speccy to generate it.
I also attached the new CBS log zip (with everything in it), after I attempted to install windows again (i just downloaded the patch from the website and used the manual installer).

Update in question: kb5031354

 

[joren]

I performed a recent SFC scannow /f, the results are taken from the CBS file and copied into the attached file. It doesnt find anything at all from what I've seen, nothing seems corrupt.

C:\Windows\System32>sfc /scannow

Beginning system scan.  This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection did not find any integrity violations.

 

[joren]

I also think this windows update issue is causing my Office products not to work properly, they instantly close upon opening (max 5sec and its gone), gives me the following error:

Faulting application name: WINWORD.EXE, version: 16.0.16731.20316, time stamp: 0x651f70b9
Faulting module name: mso20win32client.dll, version: 0.0.0.0, time stamp: 0x651e5830
Exception code: 0x01483052
Fault offset: 0x000000000026ff2d
Faulting process id: 0x0x1974
Faulting application start time: 0x0x1D9FD88D4E87209
Faulting application path: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE
Faulting module path: C:\Program Files\Common Files\Microsoft Shared\Office16\mso20win32client.dll
Report Id: 8737d3fb-95fa-4073-a512-b79f3f6951b8
Faulting package full name:
Faulting package-relative application ID:

Mind you that this is a fresh install, and I've just installed Office again. Repair tool doesnt do a thing. I recall this problem occurring around the same time my windows update problem occurred.

This is what I get in the event viewer too, as "Information"

Fault bucket 1478773576390107734, type 5
Event Name: OFFICE_MODULE_VERSION_MISMATCH
Response: Not available
Cab Id: 0

 

[joren]

As for my components file, in case needed

 

[joren]

Okay, I solved the issue. The issue was rooted in the fact that my windows key was invalidated, according to microsoft due to hardware changes. Now I didnt actually change any of my hardware since I applied this OEM Win key, so I suppose I somehow triggered a HWID change. Weird thing is that until today I didnt get the "Activate windows in settings", it didnt complain about it - it never did. Today I got that message and was confused as I have a legitimate copy of windows. I retried using my old key, that is about a year old, and it just wouldnt let me. I suppose its connected to the old HWID of my PC, and wouldnt let me apply it on any other machine (though its not, but w/e).

Office seems to be unable to verify users when your windows activation fails, it fixed itself once I did a clean install + new windows key that I bought. I assume Office, since its Microsoft too, just utilizes the windows activator to identify each PC and ensure you dont go over the limit with the maximum devices allowed per your Office subscription.

So a food of thought: Office immediately closing could be related to your windows verification, granted it fails to or is simply unable to verify your key.