Updates 'Installed' but Still Available to Download/Install | Windows Server 2012 R2

pcts

Contributor
Joined
Aug 6, 2015
Posts
31
Hi folks,

We are having an issue with a client server not installing Windows updates correctly that has stumped us. The server in question is a Windows Server 2012 R2 VM sitting on a HP hyper-v host.

We first noticed our RMM tool flagged that the server had quite a few updates to install, and when we looked at them we could see that most were very old (2015-2016). We had pushed out all these updates to be installed through our RMM tool and scanned a day later only to see that none of the updates had been successful.

We then started looking at installing the updates manually via Windows Update and using Microsoft Update Catalog. For example, we had downloaded a recent 2020-05 Cumulative update from the catalog that the server was showing as installed. When we tried to install the update, it came back with an error stating that it was already installed. However when checking for updates on the server, the same 2020-05 Cumulative update showed up as an option to download and install.

In a nutshell, the server is telling us that updates are installed while also telling us that the updates are not installed and need to be downloaded. We don't see any failure messages or error codes.

Most recently we installed all updates via Windows Update and rebooted the server. Here is what we see if we navigate to Windows update:

HPSERVER1.jpg

Then if we check for updates:

HPSERVER2.jpg
If we then look at which updates it is attempting to install, we can see 2020-06 Cumulative update KB4561666 is present under Important updates and the optional updates are mostly marked 'Update for Windows Server 2020 R2 KBxxxxxx' and all except 4 of them are from 2015 or 2016.

HPSERVER5.jpg

HPSERVER6.jpg

Previous times we have seen these updates all appear in Update History also, however they don't stay there permanently - possibly running 'check for updates' removes them.

However, if we do look at Update History, one update that stands out as being installed successfully is 2020-06 Cumulative update KB4561666, which is the important update that Windows Update tells us we need to install.

HPSERVER4.jpg

We saw the same behaviour with 2020-05 Cumulative update but it is no longer showing up as either installed or need-to-install since 2020-06 Cumulative was released.

We have run sfc & dism on the server which reported no errors. We did also once see a 'rolling back updates' error when we attempted to push out updates using our RMM tool, but our RMM is equally confused by the situation, usually showing the same update KBs as 'installed' and 'missing' simultaneously.


Like I said we are stumped on this without error codes to troubleshoot. Any help would be much appreciated in resolving this issue - we can provide more information as well if that helps.

Thanks in advance!
Shane
 
Hi, apologies for the delayed response here! We were doing some additional testing/troubleshooting just to rule some more things out before posting up our results here.

After making our initial post we came across a similar issue where a user had resolved by hiding the updates that wouldn't install and then checking for updates again,with the idea that it may have been missing pre-requisites.

We hid all the 2015-2016 optional updates and checked for updates again which resulted in 7 optional updates being available, which we installed.

1593515280093.png

After this we unhid all updates and checked for updates again. All the optional updates re-appeared again but there were some additional updates that we hadn't seen before, including one for Microsoft Silverlight.

As a test we checked if Silverlight was installed, which it wasn't and went ahead and instead the update. This installed Silverlight on the server. We rebooted then and checked back add/remove programs to see if Silverlight was still present, which it was, so it seems some updates are still able to install successfully on the server.

After this we checked for updates and there were then 4 important updates to install.

1593515791346.png

We installed these and rebooted server, where we then saw the rollback error:

1593515835334.png

We went back through the event viewer for the 30 minutes period between me logging onto the server to initiate the reboot until the process was completed and I logged off again, and couldn't find any errors or warnings related to Windows Update.

Let me know if you need clarification on any of the above steps or more information

Thanks,
Shane
 
Hi,

Just another quick update, I have done some more digging in the event viewer and found some Windows Update logs.

Looking back at yesterday, when we installed updates and rebooted the server, there are quite a few entries marked event 40 “an update was detected” and event 41 “an update was downloaded” but nothing saying that updates have been installed successfully or rolled back, etc.

1593524268258.png

Thanks,
Shane
 
Thanks. I see the issue. This fix will require a reboot. Do not attempt updates after it. Just post the log.


Step#1 - FRST Fix
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
1. Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the 64-bit Version so please ensure you download that one.
2. Download the attached fixlist.txt and save it to the Desktop.
Note. It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work (in this case...the desktop).
3. Run FRST64 by Right-Clicking on the file and choosing Run as administrator.
4. Press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
5. When finished FRST64 will generate a log on the Desktop (Fixlog.txt). Please post the contents of it in your reply.

Thanks!
 

Attachments

Hi!

SFCFix Script

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.


  1. Download SFCFix.exe (by niemiro) and save this to your Desktop.
  2. Download the file below, SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
  3. Save any open documents and close all open windows.
  4. On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
  5. Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
  6. SFCFix will now process the script.
  7. Upon completion, a file should be created on your Desktop: SFCFix.txt.
  8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please - put [CODE][/CODE] tags around the log to break up the text.
 

Attachments

Hi,

Thanks very much for the help and preparing this fix. I have run the tool now and copied in the contents of SFCFix.txt below

Code:
SFCFix version 3.0.2.1 by niemiro.
Start time: 2020-06-30 19:01:41.254
Microsoft Windows Server 2012 R2 Update 3 - amd64
Using .zip script file at C:\Users\pctsadmin\Desktop\SFCFix.zip [0]




PowerCopy::
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_volume.inf_31bf3856ad364e35_6.3.9600.17215_none_06c1ae9bcfd2737b\volsnap.sys
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_volume.inf_31bf3856ad364e35_6.3.9600.17215_none_06c1ae9bcfd2737b\volume.inf
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_usbhub3.inf_31bf3856ad364e35_6.3.9600.17396_none_e695f9f321033b1d\usbhub3.inf
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_usbhub3.inf_31bf3856ad364e35_6.3.9600.17396_none_e695f9f321033b1d\USBHUB3.SYS

Successfully copied file C:\Users\pctsadmin\AppData\Local\niemiro\Archive\winsxs\amd64_volume.inf_31bf3856ad364e35_6.3.9600.17215_none_06c1ae9bcfd2737b\volsnap.sys to C:\Windows\winsxs\amd64_volume.inf_31bf3856ad364e35_6.3.9600.17215_none_06c1ae9bcfd2737b\volsnap.sys.
Successfully copied file C:\Users\pctsadmin\AppData\Local\niemiro\Archive\winsxs\amd64_volume.inf_31bf3856ad364e35_6.3.9600.17215_none_06c1ae9bcfd2737b\volume.inf to C:\Windows\winsxs\amd64_volume.inf_31bf3856ad364e35_6.3.9600.17215_none_06c1ae9bcfd2737b\volume.inf.
Successfully copied file C:\Users\pctsadmin\AppData\Local\niemiro\Archive\winsxs\amd64_usbhub3.inf_31bf3856ad364e35_6.3.9600.17396_none_e695f9f321033b1d\usbhub3.inf to C:\Windows\winsxs\amd64_usbhub3.inf_31bf3856ad364e35_6.3.9600.17396_none_e695f9f321033b1d\usbhub3.inf.
Successfully copied file C:\Users\pctsadmin\AppData\Local\niemiro\Archive\winsxs\amd64_usbhub3.inf_31bf3856ad364e35_6.3.9600.17396_none_e695f9f321033b1d\USBHUB3.SYS to C:\Windows\winsxs\amd64_usbhub3.inf_31bf3856ad364e35_6.3.9600.17396_none_e695f9f321033b1d\USBHUB3.SYS.

Successfully restored ownership for C:\Windows\winsxs\amd64_volume.inf_31bf3856ad364e35_6.3.9600.17215_none_06c1ae9bcfd2737b\volsnap.sys
Successfully restored permissions on C:\Windows\winsxs\amd64_volume.inf_31bf3856ad364e35_6.3.9600.17215_none_06c1ae9bcfd2737b\volsnap.sys
Successfully restored ownership for C:\Windows\winsxs\amd64_volume.inf_31bf3856ad364e35_6.3.9600.17215_none_06c1ae9bcfd2737b\volume.inf
Successfully restored permissions on C:\Windows\winsxs\amd64_volume.inf_31bf3856ad364e35_6.3.9600.17215_none_06c1ae9bcfd2737b\volume.inf
Successfully restored ownership for C:\Windows\winsxs\amd64_usbhub3.inf_31bf3856ad364e35_6.3.9600.17396_none_e695f9f321033b1d\usbhub3.inf
Successfully restored permissions on C:\Windows\winsxs\amd64_usbhub3.inf_31bf3856ad364e35_6.3.9600.17396_none_e695f9f321033b1d\usbhub3.inf
Successfully restored ownership for C:\Windows\winsxs\amd64_usbhub3.inf_31bf3856ad364e35_6.3.9600.17396_none_e695f9f321033b1d\USBHUB3.SYS
Successfully restored permissions on C:\Windows\winsxs\amd64_usbhub3.inf_31bf3856ad364e35_6.3.9600.17396_none_e695f9f321033b1d\USBHUB3.SYS
PowerCopy:: directive completed successfully.




Successfully processed all directives.



Failed to generate a complete zip file. Upload aborted.


SFCFix version 3.0.2.1 by niemiro has completed.
Currently storing 4 datablocks.
Finish time: 2020-06-30 19:22:16.179
Script hash: fGIuwgonCoBwjlpCckv2WA6kT0vLjHp6BxDpanKvxCY=
----------------------EOF-----------------------

Thanks,
Shane
 
Hi!

Please disable Driver Digital Signature Enforcement in Startup Settings and then do the following:

Add Missing Packages
1. Click the Start button and type cmd.exe in the search box.
2. Right-click on the cmd that comes up and select Run as administrator.
3. Once you are at the command prompt, copy/paste the following lines and hit enter after each.
pnputil -a C:\WINDOWS\WinSxS\amd64_usbhub3.inf_31bf3856ad364e35_6.3.9600.17396_none_e695f9f321033b1d\usbhub3.inf

pnputil -a C:\WINDOWS\WinSxS\amd64_volume.inf_31bf3856ad364e35_6.3.9600.17215_none_06c1ae9bcfd2737b\volume.inf

Let me know if it says successfully installed.
 
Hi,

Thanks for sending over these steps - can you advise if these steps require a server reboot or if they can safely be completed during working hours?

Thanks,
Shane
 
Hi,

I followed the steps you outlined and attempted to install the drivers, however the top one you linked fail with error "the style of the INF is different than what was requested"

1593629368065.png

I've held off on attempting updates for the moment.

Thanks again,
Shane
 
Hi there,

Last night we attempted to install the latest 2020-06 Cumulative update KB4561666, but it reverted afterwards.

Here I have attached the setupapi.dev.log files: SetupAPI_DevLog_0807020.zip

The 2020-06 Cumulative updates appears again as available to download/install when we check for updates.

Let us know if you need any additional information.

Thanks again for all your help in this case,
Shane
 
Hi,

I do indeed, this folder is present on the HyperV host on which the troubled server resides. If this is not ideal, we have other client servers in different locations that should have the same folder.

Thanks,
Shane
 

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top