Yes, I should - let me give you a brief timeline on this issue and what backups I have:
5/1/2025 - Server initially powered on, basic configuration tasks were performed, April cumulative windows updates were installed - installed without error
5/2/2025 1am - first windows server backup was run
5/2/2025 - 5/9/2025 - server in various stages of being built out, windows server backup each morning at 1am. No attempts to install any updates, and no issues building out server to that point.
5/10/2025 - 5/25/2025 - server was powered off intentionally
5/26/2025 - about 1:18 PM server was powered back on. windows server backup kicked off automatically at that same time (backup is dated at 1:22pm), the windows update KB5058385 was downloading and installing at about this same time. That install failed (I wonder if this is where the problem began, but not sure) and I made this forum post that evening.
5/27/2025 - today - windows server backups each morning at 1am. Nothing else has been done to the server during this time other than the steps we have been taking in this thread to attempt to resolve this issue.
Also, as I was looking thru the event log to get these dates correct, I noticed this entry which I had not found before, not sure if it sheds any light:
Code:
Log Name: System
Source: Microsoft-Windows-Kernel-General
Date: 5/26/2025 1:19:38 PM
Event ID: 15
Task Category: (10)
Level: Information
Keywords:
User: SYSTEM
Computer: MSM6
Description:
Hive \??\C:\Windows\System32\config\COMPONENTS was reorganized with a starting size of 148942848 bytes and an ending size of 144678912 bytes.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-General" Guid="{a68ca8b7-004f-d7b6-a698-07e2de0f1f5d}" />
<EventID>15</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>10</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2025-05-26T18:19:38.9229110Z" />
<EventRecordID>6145</EventRecordID>
<Correlation />
<Execution ProcessID="6696" ThreadID="6724" />
<Channel>System</Channel>
<Computer>MSM6</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="HiveNameLength">41</Data>
<Data Name="HiveName">\??\C:\Windows\System32\config\COMPONENTS</Data>
<Data Name="OriginalSize">148942848</Data>
<Data Name="NewSize">144678912</Data>
</EventData>
</Event>
Let me know what you think...