Windows 10 Enterprise for Virtual Desktops, Version 22H2 (OS Build 19045.4291), Update fails to install KB5049981 & KB5050188 - 0x80070002 Error

[BMC25]

Ran successfully without the "[/ode]" at the end

 

[Maxstar]

Did it show the following hash or a different one?

C:\Windows\system32>certutil -hashfile C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe SHA256
SHA256 hash of C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe:
b84bf8b3746e28bfc79f3b3a8e4726a36e12d2b89ee401bf6a540e2439b6170f
CertUtil: -hashfile command completed successfully.

 

[BMC25]

different...

 

[Maxstar]

Pleae run the following command in an elevated prompt and copy paste the result:

fsutil hardlink list C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe

 

[BMC25]

Please see below

C:\Windows\system32>fsutil hardlink list C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe
\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.3758_none_277f36cf93590066\SecHealthUI.exe
\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe

C:\Windows\system32>

 

[Maxstar]

Run the following DISM command and post the result. If it fails attach a new copy of the CBS log.

DISM /online /cleanup-image /RestoreHealth

 

[BMC25]

Completed successfully.

 

[Maxstar]

Please run the System File Checker again and post the result.

 

[BMC25]

Done...

 

[Maxstar]

Start

SFCFix again to perform a File Scan.

• Download the attachment SFCFixScript.txt and save it to your desktop.
• Drag the SFCFixScript.txt file over the SFCFix.exe executable and release it.

• SFCFix will launch, let it complete.
• Once done, a file will appear on your desktop, called SFCFix.txt.
• Post the logfile (SFCFix.txt) as attachment in your next reply.

 

[BMC25]

Really appreciate your time btw. Attached.

 

[Maxstar]

This is an interesting problem, so some qestions:

1. Which security software is installed, just Windows Defender or any third party security software?
2. Are there any restrictions / policies set to use Windows Defender on the client-side?

 

[BMC25]

No problem.
1. Yes, just Windows Defender.
2. Theres a GPO that applies Defender policies on the machine

 

[Maxstar]

Are you able to login on that system with full system / admin privileges?

 

[BMC25]

Yep, can do.

 

[Maxstar]

Ok. Try to run SFC again with that account and post the result, maybe it will will bypass some 'grumpy' GPO settings...

 

[BMC25]

Same result unfortunately.

 

[Maxstar]

That's odd, let's check for any disk corruptions first.

• Click the Start button and in the search box, type Command Prompt
• When you see Command Prompt on the list, right-click on it and select Run as administrator.
• When command prompt opens, copy and paste the following command into it, press enter afterwards.
  

  chkdsk

• Wait for this to complete.

Download

ListChkdskResult.exe and save it on your desktop.

• Rightclick ListChkdskResult.exe and select Run as administrator.
• Notepad will open the file ListChkdskResult.txt on completion. (This logfile ListChkdskResult.txt is also saved on your desktop.)
• Post the logfile ListChkdskResult.txt as attachment in your next reply.

 

[BMC25]

Results below.

 

[Maxstar]

2025-02-04 15:51:15, Error                 CSI    0000026b (F) STATUS_OBJECT_NAME_NOT_FOUND #31585825# from Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysSetInformationFile(flags = (AllowInvalidDeviceRequest|AllowNotSupported|AllowTypeMismatch|AllowNotSameDevice|AllowSharingViolation|AllowAccessDenied|0x00001c00), h = 7a8 ('\Device\HarddiskVolume4\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.3758_none_277f36cf93590066\SecHealthUI.exe'), iosb = @0x18064fc620, buff = @0x16f6b542300, bufflen = 194[gle=0xd0000034]
2025-02-04 15:51:15, Error                 CSI    , ic = 11, disp = Invalid)
[gle=0xd0000034]
2025-02-04 15:51:15, Error                 CSI    0000026c (F) STATUS_OBJECT_NAME_NOT_FOUND #31585820# from Windows::Rtl::SystemImplementation::CSystemIsolationLayer_IRtlSystemIsolationLayerTearoff::TransferFileEx(flags = (ReplaceIfExists|OpenForBackupIntent|SharingViolationIsOk|TransactionalConflictIsOk|CannotDeleteIsOk|DeletePendingIsOk|0x00008000), op = 'HardLinkWithCopyFallback', odir = NULL, oname = [l:134]'\SystemRoot\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.3758_none_277f36cf93590066\SecHealthUI.exe', ndir = N[gle=0xd0000034]
2025-02-04 15:51:15, Error                 CSI    ULL, nname = [l:85]'\??\C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe', disp = Unmapped disposition: 0)
[gle=0xd0000034]
2025-02-04 15:51:15, Info                  CSI    0000026d Error STATUS_OBJECT_NAME_NOT_FOUND while executing operation HardLinkFile on [l:221]'\SystemRoot\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.3758_none_277f36cf93590066\SecHealthUI.exe, \??\C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe'

2025-02-04 15:51:15, Error                 CSI    0000026e@2025/2/4:15:51:15.411 (F) onecore\base\wcp\componentstore\com\store_transaction.cpp(1497): Error STATUS_OBJECT_NAME_NOT_FOUND originated in function ApplyTransactionPOQsToSil expression: (null)
[gle=0x80004005]

This looks good, but after each run of SFC the CBS log will show the above error lines. So I would suggest to attempt to update again to see what happens since we have fixed a lot of other issues.