Unable to install KB3140245 and KB4516065 Windows Server 2008 R2 SP1

M

MattHelm21

Member
Joined
May 8, 2020
Posts
10
Hello! A new user here.

As a part of a plan to enable TLS 1.2 and disable the less secure TLS 1.1, and TLS 1.0 protocols, I followed the procedure to run all Windows updates and then add manually(for verification) KB3140245 and the recommended registry entry Microsoft provides. All updates detected and available from Windows Update installed successfully and now the message is "There are no updates available for your computer". I noticed though that the above KB's in the subject were not present and attempted downloading and installing them manually from Microsoft Update Catalog. Each of them reports "This update is not applicable to your computer" and closes. I've checked the "installed updates" both via the Windows Gui and by running systeminfo.exe and do not find them present.

After I have done the steps provided here, and the problem still could not be solved, I include the SFCFix log. My CBS.zip is too large so I'm providing a link below:

CBS.zip link
 

Attachments

Thank you for the prompt reply. I utilized both of the links and in each case, the update process reported it was already installed in the system.

Edit: After further examination, I was trying to find alternate methods to verify update installations and decided to search the registry. I found the key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\". Both of the KBs I opened the thread about are listed but with a status of 50. Microsoft lists the status 50 as superseded but all of my other systems show the updates in the normal way in the "installed updates" section of Windows Updates. I guess the question now is does this mean the updates are properly installed or not?
 
Last edited:
Hi,

The message was unchanged about the update not being "applicable to your computer". Attached is the log file as requested.
 

Attachments

Hi,

KB4536952 shows installed. I think this is the January 2020 Servicing Stack Update. I'm attaching a screenshot of a registry key and value. Would you consider this confirmation of the latest?
 

Attachments

  • svcstack.jpg
    svcstack.jpg
    82.5 KB · Views: 4
Thank you for the reply. I was able to download and install KB4550735 successfully as requested above. I then tried to apply KB3150245 again. It sat at searching for installed updates for about 15 minutes then reported the same message as before "this update is not applicable to your system".
 
The result was the same. "This update is not applicable to your computer". The popup was less than a minute after "searching for installed updates progress".
 
I feel the same but I'd like to know if there is any way to determine which update it could be. I have other fully patched Server 2008 R2 systems which show the updates as installed updates so I'm concerned the superseded state is invalid.
 
Regarding KB4516065, I'm satisfied with this result since the condition of its being hidden in "installed updates" on each of my server 2008 R2 systems is consistent. This is also true of the registry on those systems. However, regarding KB3140245, every other server 2008 R2 system in my network shows this update within "installed updates" and within the Components Based Servicing/packages on those systems it also shows installed with a CurrentState of 0x70. On the affected server, KB3140245 has no entry at all in Components Based Servicing/packages and it can only be found in Component Based Servicing/ApplicabilityEvaluationCache with a CurrentState of 0x50 and an installed statue of 0x0. What are the ramifications of removing the key in the applicabilityevaluationcache on this server for the KB3140245 update and attempting manual reinstall of the update? As this is a VM, I can take a snapshot beforehand in case the result is undesirable. I would require some assistance with permissions to perform the action if you think it is viable.

Thanks,
 
Hi!

I do not think it is necessary to adjust this. The applicability cache serves the purpose of determining whether an update is applicable to the machine. As the update in question has likely been superseded the message you are receiving is normal.

The ApplicabilityEvaluationCache key can be an issue in rare instances where an update actually is failing with an error code and not being deemed not applicable.

With that said, there is no harm in attempting what you just proposed, so by all means, do take a snapshot and test things out.

Take Ownership of a Registry Key And Assign Full Permissions
 
You must log in or register to reply here.

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top