The update is not applicable to your computer on Win server 2012 r2 while installing Sep 22 rollup patch

P

Pratham

Member
Joined
Sep 23, 2019
Posts
9
Hello,



We are trying to install Sep 2022 Monthly rollup (KB5017367) on Win Server 2012 r2.

But it throws a message – the update is not applicable to your computer



When I look at CBS it shows error during applicability checks –



2022-09-20 08:46:10, Error CSI 00000003 (F) STATUS_OBJECT_NAME_NOT_FOUND #4257924# from Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysCreateKey(key = {provider=NULL, handle=0, name= ("null")}, da = (KEY_ALL_ACCESS|KEY_WOW64_64KEY), oa = @0xc6be47bd68->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[248]"\Registry\Machine\COMPONENTS\DerivedData\VersionedIndex\6.3.9600.20475 (winblue_ltsb_escrow.220622-1747)\ComponentFamilies\wow64_microsoft-windows-scripting-vbscript_31bf3856ad364e35_none_28292fcb37617b1a\v!C:\Windows\system32\FlashPlayerCPLApp.cpl"; a:(OBJ_CASE_INSENSITIVE)}, ti = 0, class = [6]"(null)", co = (REG_OPTION_BACKUP_RESTORE), disp = Unmapped disposition: 0)

[gle=0xd0000034]

2022-09-20 08:46:10, Error CSI 00000004@2022/9/20:07:46:10.583 (F) base\wcp\sil\merged\ntu\ntsystem.cpp(3619): Error STATUS_OBJECT_NAME_NOT_FOUND originated in function Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysCreateKey expression: (null)

[gle=0x80004005]





When I look into the following registry –

COMPONENTS\DerivedData\VersionedIndex\6.3.9600.20475 (winblue_ltsb_escrow.220622-1747)\ComponentFamilies\wow64_microsoft-windows-scripting-vbscript_31bf3856ad364e35_none_28292fcb37617b1a



I see - SomeUnparsedVersionsExist



====

[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\VersionedIndex\6.3.9600.20475 (winblue_ltsb_escrow.220622-1747)\ComponentFamilies\amd64_c1e2e19fdcf435c09986e146d0ded575_31bf3856ad364e35_none_04e7bcedaf5371a3]

"SomeUnparsedVersionsExist"=hex:00



[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\VersionedIndex\6.3.9600.20475 (winblue_ltsb_escrow.220622-1747)\ComponentFamilies\amd64_c1e2e19fdcf435c09986e146d0ded575_31bf3856ad364e35_none_04e7bcedaf5371a3\v!6.3.9600.19478]

====



Now this value “SomeUnparsedVersionsExist” is present for most of the components under this regkey- ComponentFamilies



I tried to import regkey - COMPONENTS\DerivedData\VersionedIndex\6.3.9600.20475 (winblue_ltsb_escrow.220622-1747)\ComponentFamilies\

From a healthy server where I do not see the value SomeUnparsedVersionsExist, the moment I import it the value SomeUnparsedVersionsExist comes back on



Looks like it is deriving it from some other place.



Could you please guide me here.



I am attaching CBS log for reference.


Thank you!!
 

Attachments

Retrieve Components Hive
1. Navigate to C:\Windows\System32\Config and locate the COMPONENTS file.
2. Please copy this file to your desktop.
Note: If you receive an error that this file is in-use, simply reboot your computer and try again.
3. Right-click on this file on your desktop and select Send To...Compressed (zipped) folder. This will create a file named COMPONENTS.ZIP on your desktop.
4. The file will likely be too large to upload here so please upload to a file sharing service. Examples of services to upload to are Dropbox or OneDrive or WeTransfer and then just provide the link in your reply.
 
Capture Process Monitor Trace
1. Download and run Process Monitor. Leave this running while you perform the next steps.
2. Try updating the system just like you have in the past.
3. Stop Process Monitor as soon as it fails. You can simply do this by clicking the square icon on the toolbar as shown below.
j8MhY5V.png

4. Select the File menu...Save... and save the file to your desktop. This is likely the default location. The name (unless changed) will be LogFile.PML. This is fine.
5. Zip up and provide the link to the LogFile.PML file as well as your CBS.log Examples of services to upload to are Dropbox or OneDrive or WeTransfer.
 
This is very odd, for some reason it is looking for that broken subkey v!C:\Windows\system32\FlashPlayerCPLApp.cpl and then attempts to create it because it doesn't exist. However, that subkey shouldn't exist anyway. I wonder why it is trying to add it?

I suspect that it is probably related to a broken flash player security update and therefore I would recommend that you remove Flash Player using their official removal tool.
 
Thanks for your response and sorry for the delay in responding.
I ran the uninstaller and followed every step mentioned in the link but it fails again with same error

Rich (BB code): 
2022-10-12 14:08:30, Error                 CSI    0000001b (F) STATUS_OBJECT_NAME_NOT_FOUND #27605469# from Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysCreateKey(key = {provider=NULL, handle=0, name= ("null")}, da = (KEY_ALL_ACCESS|KEY_WOW64_64KEY), oa = @0x78d803b928->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[248]"\Registry\Machine\COMPONENTS\DerivedData\VersionedIndex\6.3.9600.20475 (winblue_ltsb_escrow.220622-1747)\ComponentFamilies\wow64_microsoft-windows-scripting-vbscript_31bf3856ad364e35_none_28292fcb37617b1a\v!C:\Windows\system32\FlashPlayerCPLApp.cpl"; a:(OBJ_CASE_INSENSITIVE)}, ti = 0, class = [6]"(null)", co = (REG_OPTION_BACKUP_RESTORE), disp = Unmapped disposition: 0)
[gle=0xd0000034]
2022-10-12 14:08:30, Error                 CSI    0000001c@2022/10/12:13:08:30.947 (F) base\wcp\sil\merged\ntu\ntsystem.cpp(3619): Error STATUS_OBJECT_NAME_NOT_FOUND originated in function Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysCreateKey expression: (null)
[gle=0x80004005]
 
Last edited by a moderator:
Please download to your Desktop and then install Sysmon using the following command:

Rich (BB code): 
sysmon -accepteula -i %userprofile%\Desktop\config.xml

Afterwards, please attempt to update again and then export the following event log:

Rich (BB code): 
Applications and Services Logs/Microsoft/Windows/Sysmon/Operational
 

Attachments

Here is the output -

=====================
D:\Sysmon>sysmon -accepteula -i %userprofile%\Desktop\config.xml



System Monitor v14.1 - System activity monitor
By Mark Russinovich and Thomas Garnier
Copyright (C) 2014-2022 Microsoft Corporation
Using libxml2. libxml2 is Copyright (C) 1998-2012 Daniel Veillard. All
served.
Sysinternals - www.sysinternals.com



Loading configuration file with schema version 4.83
Configuration file validated.
wevtutil.exe returned failure
Event manifest installation failed with last error:
Cannot create a file when that file already exists.

=====================


The update fails with same message.

Sysmon in "Applications and Services Logs/Microsoft/Windows/Sysmon/Operational" Doesn't exist.
 
Did you install Sysmon beforehand and then try and install it again using the configuration file?

Please uninstall Sysmon using the following command, you may need to reboot the system afterwards.

Rich (BB code): 
sysmon -u

Once complete, then please install Sysmon again using the same command as before:

Rich (BB code): 
sysmon -accepteula -i %userprofile%\Desktop\config.xml
 
You must log in or register to reply here.

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top