Server 2016 won't update

Gudzy · Feb 23, 2022

Hi,

I'm having problems with a couple of servers here, this one is the most problematic so will start with this one.

I use a WSUS server in the internal network, all other servers download and install updates correctly.

When trying to run updates from the server it just stalls at "Downloading updates 0%". Downloading the updates from the update catalog and running the files manually has been working but I've noticed that the last few cumulative updates haven't been showing as a pending update and if I try to manually run it anyway, it says it is not required and so doesn't install it.

I've run sfc /scannow, DISM /Online /Cleanup-Image /RestoreHealth and SFCFix not none of them have found anything.

The cbs log folder can be downloaded from google drive here: CBS.zip

My other problem server does the same where it stalls at downloading updates, but it still finds the cumulative updates as a requried update each month so at least I can update it manually. I will look to run all the sfc and dism scripts on that server ASAP.

Thanks
Gudzy

x BlueRobot · Feb 26, 2022

Could you please provide your WindowsUpdate.log file using the following Powershell cmdlet: Get-WindowsUpdateLog (WindowsUpdate)

More details here - Windows Update log files - Windows Deployment

Gudzy · Feb 26, 2022

Thanks for the reply.

I've tried running Get-WindowsUpdateLog but it doesn't seem to be working, should it work on Server 2016?

Error message from powershell is: Copy-Item : Cannot find path 'C:\Program Files\Windows Defender\SymSrv.dll' because it does not exist

x BlueRobot · Feb 28, 2022

Gudzy said:
I've tried running Get-WindowsUpdateLog but it doesn't seem to be working, should it work on Server 2016?

Yes, it should work on Windows Server 2016, however, it appears that SymSrv.dll is missing from your Windows Defender directory. This is used by the cmdlet to connect to the Microsoft Symbol Server to decode the logs into a readable format.

Let's replace the missing SymSrv.dll using SFCFix, the .dll is from my Windows Server 2016 machine.

SFCFix Script

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

Download SFCFix.exe (by niemiro) and save this to your Desktop.
Download the file below, SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
Save any open documents and close all open windows.
On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
SFCFix will now process the script.
Upon completion, a file should be created on your Desktop: SFCFix.txt.
Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please - put [CODE][/CODE] tags around the log to break up the text.

If it is successful, then please try the cmdlet from an elevated Powershell instance.

Gudzy · Feb 28, 2022

Thanks, that looks to have worked. I've attached the SFCfix.txt and the WindowsUpdate.log files

x BlueRobot · Mar 2, 2022

Rich (BB code):

2022/02/28 21:11:06.9806508 1384  3880  DownloadManager BITS job {862E971A-86E3-46C1-B6F7-3DCC5DD33CB1} hit a transient error, updateId = {CDF3E348-B93C-4E03-9889-0497DB3E31AC}.200 <NULL>, error = 0x800706D9
2022/02/28 21:11:06.9817353 1384  3880  DownloadManager Error 0x800706d9 occurred while downloading update; notifying dependent calls.

I'm seeing lots of these errors in your log which means the following:

EPT_S_NOT_REGISTERED winerror.h
# There are no more endpoints available from the endpoint
# mapper.

Are you running any third-party firewalls or proxies?

Gudzy · Mar 2, 2022

No proxies but have a Sophos XG firewall

x BlueRobot · Mar 2, 2022

Could you please disable it for now and then try Windows Update with the default Windows firewall enabled?

Gudzy · Mar 2, 2022

I've disabled all the firewall and then tried to check online for updates but it still didn't find anything unfortunately.

x BlueRobot · Mar 4, 2022

Could you please upload the latest Windows Update log? Did you enable the Windows Firewall too?

Gudzy · Mar 4, 2022

Please find the latest WindowsUpdate.log file attached.

I ran the attempt for updates with the Sophos firewall off at around 11pm on the 2nd March. I didn;t have the Windows firewall on though, that was disabled too. Do I need to run with it enabled?

x BlueRobot · Mar 7, 2022

Yes, please try it with Windows Firewall enabled.

What is the particular update you're trying to install?

Gudzy · Mar 8, 2022

I've attached the latest WindowsUpdate.log file, taken after enabling the Windows firewall and checking online for updates, it didn't appear to find any updates to apply.

I'm not specifically trying to install any update, just pressing the button to search for updates. It hasn't had the latest cumulative update install so there should be at least that one to install but it doesn't find any.

I believe it might be trying to download a language pack feature, a server which was setup at the same time and that won't update properly either shows "Microsoft-Windows-LanguageFeatures-OCR-en-gb-Package.cab" in the update history as failing to install and Basic typing shows as Download failed.

x BlueRobot · Mar 11, 2022

Gudzy said:
I'm not specifically trying to install any update, just pressing the button to search for updates. It hasn't had the latest cumulative update install so there should be at least that one to install but it doesn't find any.

What is the KB number which you think you should find? The cumulative updates do have prerequisites like a particular SSU (servicing stack update).

What does the Show more details link reveal?

x BlueRobot · Mar 11, 2022

Could you zip up and provide your latest CBS log again? Just looking through your Windows Update log, noticed a particular update which is apparently already downloaded:

Rich (BB code):

2022/03/08 20:52:01.3223497 1364  11732 DownloadManager   Download job completion. Progress for update {CDF3E348-B93C-4E03-9889-0497DB3E31AC} - total = 44241616, transferred = 44241616 bytes. Transfer time=110, connect time=31 (ms)
2022/03/08 20:52:01.6930575 1364  7500  DownloadManager All files for update {CDF3E348-B93C-4E03-9889-0497DB3E31AC}.200 were already downloaded and are valid.
2022/03/08 20:52:01.6944580 1364  7500  DownloadManager * END * Download Call Complete Call 1 for caller UpdateOrchestrator has completed; signaling completion.

Have you tried clearing your SoftwareDistribution folder? If you haven't, then please follow these instructions in order to do so.

Edit: It would be best to rename the folder rather than deleting it. The instructions can be found in the same link.

Gudzy · Mar 14, 2022

I've tried installing KB5010359 manually as that was last month's cumulative update that has installed on all other 2016 servers and has been approved on the WSUS server, but it says it is not required on this server.

I have previously cleared the SoftwareDistribution folder but I've just done it again now, I've followed the guide and this cbs log is from after clearing the SoftwareDistribution folder and then searching for updates. Whilst searching for updates it got stuck on "Downloading updates 0%"

x BlueRobot · Mar 15, 2022

Could you please open an elevated command prompt and then enter the following command:

Rich (BB code):

fsutil resource setautoreset true %systemdrive%\

FRST Registry Search
1. Click your Start button and type in cmd.
2.After you find the Command Prompt, right click on it and select Run as Administrator.
3. Copy and paste the following into the Command Prompt:
reg load HKLM\COMPONENTS C:\WINDOWS\SYSTEM32\CONFIG\COMPONENTS
4. Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the 64-bit Version so please ensure you download that one.
5. Run FRST64 by Right-Clicking on the file and choosing Run as administrator.
6. Copy and paste KB5010359 into the Search box and click the Search Registry button.
7. When the scan is complete a notepad window will open with the results. Please attach this to your next reply. It is saved on your desktop named SearchReg.txt.

Gudzy · Mar 15, 2022

I followed the instructions and I've attached the results of fhe registry search

x BlueRobot · Mar 16, 2022

Thank you, looks like the update isn't partially installed which can sometimes cause the problem you're experiencing. Does the update client still get stuck at 0%?

Addendum:

Let's ensure it definitely isn't installed using the following instructions:

Remove Update Manually

Click on the Start button and in the search box, type Command Prompt.
When you see Command Prompt on the list, right-click on it and select Run as administrator.
When command prompt opens, copy and paste the following command into it, then press enter.
wusa /uninstall /KB:5010359
Let me know if it says it was successful or if there are any errors.

Gudzy · Mar 28, 2022

Yes, the update client still gets stuck at 0%.

I've tried running the command to delete KB5010359 but it says that the update is not installed on this computer.

Server 2016 won't update

Active member

Administrator

Active member

Administrator

Attachments

Active member

Attachments

Administrator

Active member

Administrator

Active member

Administrator

Active member

Attachments

Administrator

Active member

Attachments

Administrator

Administrator

Active member

Attachments

Administrator

Active member

Attachments

Administrator

Active member