KB4534271 Fails after reboot (using either WU/MSU) - Windows Server 2016

[smithers]

I am having some difficulty installing this update. I've tried everything everything I can think of, but I'm up to getting into the CBS logs. I'm venturing into foreign territory and I need some help. Since it happens after reboot, I considered using Process Explorer to record it; once again foreign territory.

Despite WU or the MSU package, the update appears to install just fine and the performs a reboot. Upon reboot, it says that it's "Getting Windows Ready" and circles for a long while. After about 5-10m, it abruptly goes into a restart, and reboots back into the "Gettwing Windows Ready" blue screen. It circles for a bit then states that the update didn't complete successfully and then it starts to revert the update and reboots again. This has been troubling for us because the reboot cycle takes ~45m, before you can continue the next troubleshooting step.

Any assistance would be appreciated.

 

[Will]

Hi smithers,

Are you currently able to log into the system, or are you stuck in a restart loop?

 

[smithers]

I'm able to login after the update reverts. I ran a sfc /scannow and it reported integrity issues. I'm looking at thie CBS.log file now while I try to run it again in Diagnostic startup.


C:\Windows\system32>sfc /scannow

Beginning system scan. This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection found corrupt files but was unable to fix some
of them. Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For
example C:\Windows\Logs\CBS\CBS.log. Note that logging is currently not
supported in offline servicing scenarios.

 

[Will]

Hi smithers,

Are you able to export the contents of the CBS folder? Instructions on this are here:
Windows Update Forum Posting Instructions

 

[smithers]

Thanks for the help Will,

Attached is the CBS logs. I ran the following and included the output:

findstr /c:"[SR]" %windir%\Logs\CBS\CBS.log >"%userprofile%\Desktop\sfcdetails.txt"

Per: https://support.microsoft.com/en-us...er-tool-to-repair-missing-or-corrupted-system

It appears to mostly be related to Windows Defender.

-Smithers

 

[smithers]

Is it possible this will help? Repair Windows Defender by uninstalling/reinstalling: Impossible to reinstall Defender on Win 2016 - bug

"Disabled / Removed Windows-Defender using the same command:

Dism /online /Disable-Feature /FeatureName:Windows-Defender /Remove /NoRestart /quiet

Status: Windows-Defender | Disabled with Payload Removed

Tried everything [to reinstall Windows-Defender] and finally managed to using the following:

dism /online /enable-feature /featurename:Windows-Defender /all /source:\\Another2016Server\c$\
windows\winsxs /limitaccess

Hope that helps someone.

Mike"

-Smithers

 

[smithers]

Unless this is the case: https://support.microsoft.com/en-ie...-flags-windows-defender-ps-files-as-corrupted

I am running Windows Server 2016 1607 OS Build 14393.2724; so this could apply to some of that.

 

[smithers]

"This is a known issue in Windows 10, version 1607 and later versions, and Windows Defender version 4.18.1906.3 and later versions up to version 4.8.1908."

Yeah I'm running Windows Defender 4.18.2001.7. I'm going to run the recommended commands:

dism /online /cleanup-image /restorehealth
sfc /scannow

Crazy if this is causing the KB4534217 to fail.

-Smithers

 

[smithers]

Image Version: 10.0.14393.2457

[==========================100.0%==========================]
Error: 0x800f0906

The source files could not be downloaded.
Use the "source" option to specify the location of the files that are required to restore the feature. For more information on specifying a source location, see Configure a Windows Repair Source.

The DISM log file can be found at C:\Windows\Logs\DISM\dism.log

Troubleshooting this now.

-Mike S.

 

[Sysnative Windows Update]

Hi!

This is a known issue.

Please run this fix:

[SOLVED] - SFC issues on Windows Server 2016 (Physical Host)

 

[smithers]

Attached is the produced log. Only error I saw "Failed to generate a complete zip file. Upload aborted."

I'm rebooting as well.

 

[smithers]

Interestingly enough, Windows Update hasn't tried to push the update. I still have the MSU package but it isn't pending like it was before. Should I try and run Windows Update again?

 

[smithers]

Windows Update keeps presenting the same message "There were some problems installing updates, but we'll try again later. If you keep seeing this and want to search the web or contact support for information, this may help: (0x80244019)" I'm going to clear the software distribution folder and let it repopulate.

-Smithers

 

[smithers]

Windows Update still fails after recreating the SoftwareDistribution folder refresh. Same error. I'm running another sfc /scannow to see if the SFCFix did anything. I've also discovered that I can no longer run MMC.exe or services.msc after SFCFix. Is that odd?

 

[smithers]

Hi!

This is a known issue.

Please run this fix:

[SOLVED] - SFC issues on Windows Server 2016 (Physical Host)

I'm not certain this was a necessary step. It doesn't to appear have fixed anything, I'm worse off than I was before.

 

[smithers]

Hi smithers,

Are you able to export the contents of the CBS folder? Instructions on this are here:
Windows Update Forum Posting Instructions

Any recommendations Will?

 

[smithers]

I'm not certain this was a necessary step. It doesn't to appear have fixed anything, I'm worse off than I was before.

It did correct the SFC /scannow, but now I lost some basic controls of the system. Should I try and install the MSU? My only goal is to get this server back on track with updates. Thanks.

Beginning system scan. This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection did not find any integrity violations.

 

[Sysnative Windows Update]

Yes, please try updates and attach CBS.log if any fail.

 

[smithers]

Updates appear to be working this morning, including MMC and Services. *head scratch* It's currently attempting to install the latest Cumulative from February.

Security Intelligence Update for Windows Defender Antivirus - KB2267602
2020-02 Cumulative Update for Windows Server 2016 for x64 - KB4537764
2020-02 Security Update for Adobe Flash Player for ... - KB4537759

I'll let you know what happens and provide logs. Thanks.

-Smithers

 

[smithers]

Server is ready to be rebooted to apply updates. I won't be able to reboot until this evening. I'll let you guys know what transpires. Thanks for the help.

-Smithers