[SOLVED] Server 2016 Essentials Can't Add Server Roles. DISM errors. CBS Manifest Corruption: 69. CBS Catalog Missing

[unique]

I'm trying to add a Server Role to this server but it fails with error 0x800f0831.
I discovered the Server had been failing to install updates since August 2021 and CU updates even longer.
After resetting Windows Update, I was able to manually install KB5011495 - 2022-03 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5011495) but still can't add any Server Roles.
CBS logs when I run a Dism /Online /Cleanup-Image /RestoreHealth identify 69 missing packages for 2021-05 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5003197).
I've tried uninstalling KB5011495 (was planning to install KB5003197 if successful) but the Server doesn't boot after the restart and has had to be restored from backup.
I can't find any way to either add the missing packages or remove them from the catalog (I presume they have all been superseded).

I extracted windows10.0-kb5003197-x64_3c1c26ff7d68f8a8f3b28f8e9f6004bd155133b9.msu and all the cabs inside and was going to copy all the missing "cat" and "mum" files to C:\Windows\servicing\Packages but I only found 55 of the 69


Anyway, I've followed the steps on Windows Update Forum Posting Instructions but SFCFix had a few errors and seems to be stuck (been hours since the last write to CBS.log), so I'll upload what I have thus far.
Link to CBS logs - CBS.zip

sfc /scannow

Beginning system scan. This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection did not find any integrity violations.

Dism /Online /Cleanup-Image /RestoreHealth

Deployment Image Servicing and Management tool
Version: 10.0.14393.4169

Image Version: 10.0.14393.4169

[==========================100.0%==========================]
Error: 14

Not enough storage is available to complete this operation.

The DISM log file can be found at C:\Windows\Logs\DISM\dism.log



SFCFix by sysnative.com

Checking CheckSUR.log . . .
Checking CheckSUR.persist.log . . .

Attempting repair . . .
Stage 1
Stage 2
Stage 3

Due to the nature of your corruptions, scan times have been extended by
approximately 15-20 minutes. Please be patient and allow the operation to
complete.


Deployment Image Servicing and Management tool
Version: 10.0.14393.4169

Image Version: 10.0.14393.4169

[==========================100.0%==========================]
Error: 14

Not enough storage is available to complete this operation.

The DISM log file can be found at C:\Windows\Logs\DISM\dism.log

 

[unique]

I've had another go extracting the windows10.0-kb5003197-x64_3c1c26ff7d68f8a8f3b28f8e9f6004bd155133b9.msu and expanding all cab files. This time all the missing cat and mum files indicated in the CBS log are present, so I'm guessing I might have missed one of the cab files last time. Or it might have been because I used 7-zip the first time and expand this time.

Now that I have the files, I'm still not sure if copying them to C:\Windows\servicing\Packages is the correct way to repair this server. I'm apprehensive about using files from an older version than those currently installed.
SFCFix is still stuck where it was 18 hours ago.

 

[unique]

I copied the 138 files to C:\Windows\servicing\Packages
It appears that it has fixed the corruption, but I still can't add the Server Role (in Server Manager or via powershell)

DISM /Online /Cleanup-Image /RestoreHealth

Deployment Image Servicing and Management tool
Version: 10.0.14393.4169

Image Version: 10.0.14393.4169

[==========================100.0%==========================] The restore operation completed successfully.
The operation completed successfully.

Dism /Online /Cleanup-Image /ScanHealth

Deployment Image Servicing and Management tool
Version: 10.0.14393.4169

Image Version: 10.0.14393.4169

[==========================100.0%==========================] No component store corruption detected.
The operation completed successfully.

sfc /scannow

Beginning system scan. This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection did not find any integrity violations.

Install-WindowsFeature NPAS -IncludeManagementTools
Install-WindowsFeature : The request to add or remove features on the specified server failed.
Installation of one or more roles, role services, or features failed.
The referenced assembly could not be found. Error: 0x80073701
At line:1 char:1
+ Install-WindowsFeature NPAS -IncludeManagementTools
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidOperation: (@{Vhd=; Credent...Name=localhost}SObject) [Install-WindowsFeature],
Exception
+ FullyQualifiedErrorId : DISMAPI_Error__Failed_To_Enable_Updates,Microsoft.Windows.ServerManager.Commands.AddWind
owsFeatureCommand

Success Restart Needed Exit Code Feature Result
------- -------------- --------- --------------
False No Failed {}

DSIM log attached.
CBS Log - CBS (1).zip

 

[philc43]

Hello unique

Sorry for the long delay in answering. Are you still needing help with this?

Cheers,
Phil

 

[unique]

Yes. I'm still having problems with this server. (I retested everything since it had been so long.)
Windows Update now seem to install OK, DISM Scanhealth and SFC report no errors.
I can manually run dism.exe /online /Cleanup-Image /StartComponentCleanup and have it complete.
But with all that working, I still can't install Server Roles.

The request to add or remove features on the specified server failed.
Installation of one or more roles, role services, or features failed.
The referenced assembly could not be found. Error: 0x80073701
Network Policy and Access Services
Remote Server Administration Tools
Role Administration Tools
Network Policy and Access Services Tools

I've attached CBS and DISM logs from my last attempt to install the NPAS role.

 

[Maxstar]

Hi,

• Open the Start menu of Windows and type the command CMD
• When you see Command Prompt on the list, right-click on it and select Run as administrator.
• When command prompt opens, copy and paste the following command into it, then press enter.

wusa /uninstall /KB:5003197

• Let me know if it says it was successful or if there are any errors. Or take a screenshot of the command prompt window and paste it into your next reply.

 

[unique]

The result was ...

Windows Update Standalone Installer
The update KB5003197 is not installed on this
computer.

I'm not seeing KB5003197 on the list, but later updates are.

 

[Maxstar]

Download the

Farbar Recovery Scan Tool and save it to your Desktop:

Download the 64 bit version: - Farbar Recovery Scan Tool Link

• Open the startmenu and type the command cmd.
• After you find the Command Prompt, right click on it and select Run as Administrator.
• Copy and paste the following into the Command Prompt and press enter.

reg load HKLM\COMPONENTS C:\WINDOWS\SYSTEM32\CONFIG\COMPONENTS

Right-click on the file FRST64.exe and choose Run as administrator.

• Copy and paste the following (code) into the Search box and click the Search Registry button.

KB5003197

• When the scan is complete, a message will display that SearchReg.txt is saved in the same folder FRST was started from.
• Post the logfile SearchReg.txt as attachment in your next reply.

 

[unique]

Results attached

 

[Maxstar]

Start the

Farbar Recovery Scan Tool again.

Warning: This script was written specifically for this system. Do not run this script on another system.

• Download the attachment fixlist.txt and save it to your desktop.
• Right-click on FRST.exe and select "Run as administrator".
• Press the Fix button.
• If for some reason the tool needs a restart, please make sure you let the system restart normally.
• When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
• Post the logfile Fixlog.txt as attachment in your next reply.

 

[unique]

OK. That is done. It didn't require a reboot, but I gave it one anyway (just checking it still boots).
Log attached.

 

[Maxstar]

Click the Start button and in the search box, type Command Prompt
When you see Command Prompt on the list, right-click on it and select Run as administrator.
When command prompt opens, copy and paste the following command and press enter.

DISM /online /cleanup-image /RestoreHealth

Take a screenshot of the commandprompt window and paste it into your next reply.

 

[unique]

So far so good

 

[Maxstar]

Hi,

Please try to install a server role or feature and let me know the result.

Installation of one or more roles, role services, or features failed.
The referenced assembly could not be found. Error: 0x80073701

 

[unique]

I tried that a couple hours ago. I just got done restoring the server from backup.

The Server role now installs (just needed a reboot to complete) but after rebooting, Windows restarts before completely booting (not seeing any blue screen).
I disabled restart on blue screen, but that didn't stop it from rebooting either. None of the safe modes would work either, so a restore was the quickest option.

The server has been restored to the state just before installing the Server Role (I've been in the habit of making a backup before any change).

 

[Maxstar]

Can you please post the logfiles from the following directory if they exist.

%systemdrive%\$Windows.~BT\Sources\Rollback

 

[unique]

Sorry for the delay, I forgot to post the response.
I checked the server, but that folder doesn't exist.
We use a sector-based backup and when the server wouldn't boot I restored the backup I made before installing the NPS role. So the hard drive will be exactly as it was at the time of the backup.
Maybe the folder would exist after installing the role, but it seems like it will be a conflict with something already on the server. We have since made alternatives and can live without NPS.
You have fixed the Windows Updates problem, so I think we will take that win and cut our losses.
Thanks for the help.

 

[Maxstar]

Hi,

Your welcome. Glad we could fix the problem with Windows Update, the other issue is very odd.