The update is not applicable to your computer on Win server 2012 r2 while installing Sep 22 rollup patch

Pratham · Sep 27, 2022

Hello,

We are trying to install Sep 2022 Monthly rollup (KB5017367) on Win Server 2012 r2.

But it throws a message – the update is not applicable to your computer

When I look at CBS it shows error during applicability checks –

2022-09-20 08:46:10, Error CSI 00000003 (F) STATUS_OBJECT_NAME_NOT_FOUND #4257924# from Windows::Rtl::SystemImplementation:

irectRegistryProvider::SysCreateKey(key = {provider=NULL, handle=0, name= ("null")}, da = (KEY_ALL_ACCESS|KEY_WOW64_64KEY), oa = @0xc6be47bd68->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[248]"\Registry\Machine\COMPONENTS\DerivedData\VersionedIndex\6.3.9600.20475 (winblue_ltsb_escrow.220622-1747)\ComponentFamilies\wow64_microsoft-windows-scripting-vbscript_31bf3856ad364e35_none_28292fcb37617b1a\v!C:\Windows\system32\FlashPlayerCPLApp.cpl"; a

OBJ_CASE_INSENSITIVE)}, ti = 0, class = [6]"(null)", co = (REG_OPTION_BACKUP_RESTORE), disp = Unmapped disposition: 0)

[gle=0xd0000034]

2022-09-20 08:46:10, Error CSI 00000004@2022/9/20:07:46:10.583 (F) base\wcp\sil\merged\ntu\ntsystem.cpp(3619): Error STATUS_OBJECT_NAME_NOT_FOUND originated in function Windows::Rtl::SystemImplementation:

irectRegistryProvider::SysCreateKey expression: (null)

[gle=0x80004005]

When I look into the following registry –

COMPONENTS\DerivedData\VersionedIndex\6.3.9600.20475 (winblue_ltsb_escrow.220622-1747)\ComponentFamilies\wow64_microsoft-windows-scripting-vbscript_31bf3856ad364e35_none_28292fcb37617b1a

I see - SomeUnparsedVersionsExist

====

[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\VersionedIndex\6.3.9600.20475 (winblue_ltsb_escrow.220622-1747)\ComponentFamilies\amd64_c1e2e19fdcf435c09986e146d0ded575_31bf3856ad364e35_none_04e7bcedaf5371a3]

"SomeUnparsedVersionsExist"=hex:00

[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\VersionedIndex\6.3.9600.20475 (winblue_ltsb_escrow.220622-1747)\ComponentFamilies\amd64_c1e2e19fdcf435c09986e146d0ded575_31bf3856ad364e35_none_04e7bcedaf5371a3\v!6.3.9600.19478]

====

Now this value “SomeUnparsedVersionsExist” is present for most of the components under this regkey- ComponentFamilies

I tried to import regkey - COMPONENTS\DerivedData\VersionedIndex\6.3.9600.20475 (winblue_ltsb_escrow.220622-1747)\ComponentFamilies\

From a healthy server where I do not see the value SomeUnparsedVersionsExist, the moment I import it the value SomeUnparsedVersionsExist comes back on

Looks like it is deriving it from some other place.

Could you please guide me here.

I am attaching CBS log for reference.

Thank you!!

x BlueRobot · Oct 1, 2022

Retrieve Components Hive
1. Navigate to C:\Windows\System32\Config and locate the COMPONENTS file.
2. Please copy this file to your desktop.
Note: If you receive an error that this file is in-use, simply reboot your computer and try again.
3. Right-click on this file on your desktop and select Send To...Compressed (zipped) folder. This will create a file named COMPONENTS.ZIP on your desktop.
4. The file will likely be too large to upload here so please upload to a file sharing service. Examples of services to upload to are Dropbox or OneDrive or WeTransfer and then just provide the link in your reply.

Pratham · Oct 3, 2022

Thanks for your response,
Zipped file seemed small, hence attaching it here -

x BlueRobot · Oct 3, 2022

Capture Process Monitor Trace
1. Download and run Process Monitor. Leave this running while you perform the next steps.
2. Try updating the system just like you have in the past.
3. Stop Process Monitor as soon as it fails. You can simply do this by clicking the square icon on the toolbar as shown below.

4. Select the File menu...Save... and save the file to your desktop. This is likely the default location. The name (unless changed) will be LogFile.PML. This is fine.
5. Zip up and provide the link to the LogFile.PML file as well as your CBS.log Examples of services to upload to are Dropbox or OneDrive or WeTransfer.

Pratham · Oct 4, 2022

Thanks,
uploaded the files here -
Sysnative

x BlueRobot · Oct 5, 2022

This is very odd, for some reason it is looking for that broken subkey v!C:\Windows\system32\FlashPlayerCPLApp.cpl and then attempts to create it because it doesn't exist. However, that subkey shouldn't exist anyway. I wonder why it is trying to add it?

I suspect that it is probably related to a broken flash player security update and therefore I would recommend that you remove Flash Player using their official removal tool.

Pratham · Oct 12, 2022

Thanks for your response and sorry for the delay in responding.
I ran the uninstaller and followed every step mentioned in the link but it fails again with same error

Rich (BB code):

2022-10-12 14:08:30, Error                 CSI    0000001b (F) STATUS_OBJECT_NAME_NOT_FOUND #27605469# from Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysCreateKey(key = {provider=NULL, handle=0, name= ("null")}, da = (KEY_ALL_ACCESS|KEY_WOW64_64KEY), oa = @0x78d803b928->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[248]"\Registry\Machine\COMPONENTS\DerivedData\VersionedIndex\6.3.9600.20475 (winblue_ltsb_escrow.220622-1747)\ComponentFamilies\wow64_microsoft-windows-scripting-vbscript_31bf3856ad364e35_none_28292fcb37617b1a\v!C:\Windows\system32\FlashPlayerCPLApp.cpl"; a:(OBJ_CASE_INSENSITIVE)}, ti = 0, class = [6]"(null)", co = (REG_OPTION_BACKUP_RESTORE), disp = Unmapped disposition: 0)
[gle=0xd0000034]
2022-10-12 14:08:30, Error                 CSI    0000001c@2022/10/12:13:08:30.947 (F) base\wcp\sil\merged\ntu\ntsystem.cpp(3619): Error STATUS_OBJECT_NAME_NOT_FOUND originated in function Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysCreateKey expression: (null)
[gle=0x80004005]

x BlueRobot · Oct 17, 2022

Please download to your Desktop and then install Sysmon using the following command:

Rich (BB code):

sysmon -accepteula -i %userprofile%\Desktop\config.xml

Afterwards, please attempt to update again and then export the following event log:

Rich (BB code):

Applications and Services Logs/Microsoft/Windows/Sysmon/Operational

Pratham · Oct 20, 2022

Here is the output -

=====================
D:\Sysmon>sysmon -accepteula -i %userprofile%\Desktop\config.xml

System Monitor v14.1 - System activity monitor
By Mark Russinovich and Thomas Garnier
Copyright (C) 2014-2022 Microsoft Corporation
Using libxml2. libxml2 is Copyright (C) 1998-2012 Daniel Veillard. All
served.
Sysinternals - www.sysinternals.com

Loading configuration file with schema version 4.83
Configuration file validated.
wevtutil.exe returned failure
Event manifest installation failed with last error:
Cannot create a file when that file already exists.

=====================

The update fails with same message.

Sysmon in "Applications and Services Logs/Microsoft/Windows/Sysmon/Operational" Doesn't exist.

x BlueRobot · Oct 20, 2022

Did you install Sysmon beforehand and then try and install it again using the configuration file?

Please uninstall Sysmon using the following command, you may need to reboot the system afterwards.

Rich (BB code):

sysmon -u

Once complete, then please install Sysmon again using the same command as before:

Rich (BB code):

sysmon -accepteula -i %userprofile%\Desktop\config.xml

Search

Search

The update is not applicable to your computer on Win server 2012 r2 while installing Sep 22 rollup patch

Pratham

Member

Attachments

x BlueRobot

Administrator

Pratham

Member

Attachments

x BlueRobot

Administrator

Pratham

Member

x BlueRobot

Administrator

Pratham

Member

x BlueRobot

Administrator

Attachments

Pratham

Member

x BlueRobot

Administrator