Windows 10 Enterprise for Virtual Desktops, Version 22H2 (OS Build 19045.4291), Update fails to install KB5049981 & KB5050188 - 0x80070002 Error

Did it show the following hash or a different one?
Rich (BB code):
C:\Windows\system32>certutil -hashfile C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe SHA256
SHA256 hash of C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe:
b84bf8b3746e28bfc79f3b3a8e4726a36e12d2b89ee401bf6a540e2439b6170f
CertUtil: -hashfile command completed successfully.
 
Pleae run the following command in an elevated prompt and copy paste the result:
Code:
fsutil hardlink list C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe
 
Please see below

Code:
C:\Windows\system32>fsutil hardlink list C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe
\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.3758_none_277f36cf93590066\SecHealthUI.exe
\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe

C:\Windows\system32>
 
Run the following DISM command and post the result. If it fails attach a new copy of the CBS log.
Code:
DISM /online /cleanup-image /RestoreHealth
 
Start
6530fbb0f4101-56f31e53c97da-SFCFix.PNG
SFCFix again to perform a File Scan.
  • Download the attachment SFCFixScript.txt and save it to your desktop.
  • Drag the SFCFixScript.txt file over the SFCFix.exe executable and release it.
650ef5dbdfd06-62151e1bebac4-SFCFix-Txt-Eng.gif

  • SFCFix will launch, let it complete.
  • Once done, a file will appear on your desktop, called SFCFix.txt.
  • Post the logfile (SFCFix.txt) as attachment in your next reply.
 

Attachments

This is an interesting problem, so some qestions:

1. Which security software is installed, just Windows Defender or any third party security software?
2. Are there any restrictions / policies set to use Windows Defender on the client-side?
 
No problem.
1. Yes, just Windows Defender.
2. Theres a GPO that applies Defender policies on the machine
 
Are you able to login on that system with full system / admin privileges?
 
Ok. Try to run SFC again with that account and post the result, maybe it will will bypass some 'grumpy' GPO settings...
 
That's odd, let's check for any disk corruptions first.

  • Click the Start button and in the search box, type Command Prompt
  • When you see Command Prompt on the list, right-click on it and select Run as administrator.
  • When command prompt opens, copy and paste the following command into it, press enter afterwards.
    Code:
    chkdsk
  • Wait for this to complete.

Download
6198cd309385f-58a60a47ed1bd-ListChkdskResult.PNG
ListChkdskResult.exe and save it on your desktop.
  • Rightclick ListChkdskResult.exe and select Run as administrator.
  • Notepad will open the file ListChkdskResult.txt on completion. (This logfile ListChkdskResult.txt is also saved on your desktop.)
  • Post the logfile ListChkdskResult.txt as attachment in your next reply.
 
Rich (BB code):
2025-02-04 15:51:15, Error                 CSI    0000026b (F) STATUS_OBJECT_NAME_NOT_FOUND #31585825# from Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysSetInformationFile(flags = (AllowInvalidDeviceRequest|AllowNotSupported|AllowTypeMismatch|AllowNotSameDevice|AllowSharingViolation|AllowAccessDenied|0x00001c00), h = 7a8 ('\Device\HarddiskVolume4\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.3758_none_277f36cf93590066\SecHealthUI.exe'), iosb = @0x18064fc620, buff = @0x16f6b542300, bufflen = 194[gle=0xd0000034]
2025-02-04 15:51:15, Error                 CSI    , ic = 11, disp = Invalid)
[gle=0xd0000034]
2025-02-04 15:51:15, Error                 CSI    0000026c (F) STATUS_OBJECT_NAME_NOT_FOUND #31585820# from Windows::Rtl::SystemImplementation::CSystemIsolationLayer_IRtlSystemIsolationLayerTearoff::TransferFileEx(flags = (ReplaceIfExists|OpenForBackupIntent|SharingViolationIsOk|TransactionalConflictIsOk|CannotDeleteIsOk|DeletePendingIsOk|0x00008000), op = 'HardLinkWithCopyFallback', odir = NULL, oname = [l:134]'\SystemRoot\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.3758_none_277f36cf93590066\SecHealthUI.exe', ndir = N[gle=0xd0000034]
2025-02-04 15:51:15, Error                 CSI    ULL, nname = [l:85]'\??\C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe', disp = Unmapped disposition: 0)
[gle=0xd0000034]
2025-02-04 15:51:15, Info                  CSI    0000026d Error STATUS_OBJECT_NAME_NOT_FOUND while executing operation HardLinkFile on [l:221]'\SystemRoot\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.3758_none_277f36cf93590066\SecHealthUI.exe, \??\C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe'

2025-02-04 15:51:15, Error                 CSI    0000026e@2025/2/4:15:51:15.411 (F) onecore\base\wcp\componentstore\com\store_transaction.cpp(1497): Error STATUS_OBJECT_NAME_NOT_FOUND originated in function ApplyTransactionPOQsToSil expression: (null)
[gle=0x80004005]

This looks good, but after each run of SFC the CBS log will show the above error lines. So I would suggest to attempt to update again to see what happens since we have fixed a lot of other issues.
 

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top