Windows 11 Update Fails (Continually)

[Tomohawk_1954]

I have Windows 11 Pro on a PC and also on a laptop.
About a month ago, I was presented (on the PC) with update KB5052093. When installed, it requested a Restart and then rebooted several times and then failed with a message "Something didn't go as planned. No need to worry, undoing changes."
It seems that I was not the only user experiencing this issue.
I left for a week to see if a "fix" was available.
Update KB5052093 was no longer listed and a new update was available - KB5053598.
Unfortunately, this behaved in the same manner.
I have paused my updates on my PC for the moment, but have been checking my laptop once a week.
KB5053598 is still listed as an update, but continues to exhibit the behaviour mentioned above.
It's been a month now and I would appreciate any guidance on how to proceed.

Tommy

 

[Windows Update Bot]

Hi @Tomohawk_1954,

Welcome to Sysnative Forums!

If you haven't already, please review the posting instructions here, and attach the requested log files. Without log files, our helpers will not be able to assist, and this will slow down fixing your machine.

If logs have been already been provided, our team of volunteers will analyse the provided log files to build a fix for your system. Please be aware that this may take several days from your initial post, due to the high volume of threads that we receive.


- Sysnative Windows Update Team

 

[Tomohawk_1954]

Apologies - forgot to add files

 

[Tomohawk_1954]

 

[Tomohawk_1954]

UPDATE:
I decided to un-pause windows updates on my PC this time (not on my laptop)
A new update was available and it errored as before - KB5053656
Required files are attached.
Tommy

 

[Maxstar]

Hi and welcome to Sysnative,

Please run the following command in an elevated command prompt and copy paste the result in your next post.

netsh http show sslcert

 

[Tomohawk_1954]

 

[Maxstar]

Which (third party) security software is installed on this system?

 

[Tomohawk_1954]

I've been using Malwarebytes for quite a number of years now.

 

[Maxstar]

Okay, the premium version or an end-point version?

Please run also the following command in an elevated prompt and post the result.

sc start http

 

[Tomohawk_1954]

The Premium version

 

[Maxstar]

2025-03-29 15:43:03, Error                 CSI    00000f22@2025/3/29:15:43:03.565 (F) onecore\base\wcp\sil\ntsystem.cpp(6920): Error STATUS_ACCESS_DENIED originated in function Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysQueryValueKey expression: (null)
[gle=0x80004005]
2025-03-29 15:43:03, Error                 CSI    00000f23 (F) STATUS_ACCESS_DENIED #162436# from Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysQueryValueKey(flags = 1, key = 6d8 ('\REGISTRY\MACHINE\COMPONENTS\DerivedData\Components\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_10.0.26100.3624_none_2a4d2a710459a067'), vn = [l:5 ml:6]'S256H', kvic = 2, kvi = 2, disp = 0)[gle=0xd0000022]
2025-03-29 15:43:03, Error                 CSI    00000f24 (F) STATUS_ACCESS_DENIED #162435# from Windows::Rtl::SystemImplementation::CKey::QueryValue(flags = 1, kn = [l:154]'\Registry\Machine\COMPONENTS\DerivedData\Components\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_10.0.26100.3624_none_2a4d2a710459a067\', vn = [l:5 ml:6]'S256H', ic = KeyValuePartialInformation, info = {l:0 b:}, disp = 0)[gle=0xd0000022]
2025-03-29 15:43:03, Error                 CSI    00000f25 (F) STATUS_ACCESS_DENIED #162422# from Windows::COM::CQueueExecutor::ExecuteSingle(item = Installer: HTTP Installer ({86fee01a-954a-11df-bc0c-cea7dfd72085}))
[gle=0xd0000022]

Okay, please remove Malwarebytes reboot the system and attempt to update again. I've seen such access denied issues before with Malwarebytes and/or other third party security software.[/code]

 

[Tomohawk_1954]

Do I have to uninstall or can I just de-activate the protection?

 

[Maxstar]

Please remove it completely using the Support Tool: https://support.malwarebytes.com/hc...nstall-Desktop-Security-with-the-Support-Tool

 

[Tomohawk_1954]

Steps 8 & 9 are incorrect in this article. I am not prompted to Restart after the clean, but instead I am asked if I wish to re-install (Yes/No). I selected No, so no reboot (and expected "startup clean") happened. I checked in Control Panel and Malwarebytes is not listed. I restarted and then ran Windows Update.


Updates listed were:
Optional Update - KB5053656 - We couldn't install this update but you can try again (0x80070005)
Optional Update - KB5054979

I selected KB5054979 and installed, as I wanted to install KB5053656 in a standalone session.

Bluescreened during reboot (and then automatically ran Dell SupportAssist, which did not find any issues)

It's now loading "Choose An Option" Screen

If I turn off and on again, I just bluescreen again

I fear we may have stepped outside of Windows Update territory now.

 

[Maxstar]

Error 0x80070005 means an Access Denied issue, but it seems there are more issues. So could you please provide the following files using the Recovery Environment.

C:\Windows\Minidump\*.dmp
C:\Windows\Memory.dmp (if exists)

 

[Tomohawk_1954]

Hi Maxstar
I'm communicating to you on my desktop.
I've managed to get into command prompt on the laptop (where the issues are).
Will running DISM /Online /Cleanup-Image /RestoreHealth be of any use?

 

[Maxstar]

I've managed to get into command prompt.

Okay, please check via the command prompt if the dump files exist. Then you can copy them to a USB stick.

 

[Tomohawk_1954]

There are no dump files that I can see.
I'm not very experienced with command prompt so is there a way I can search windows directory (and all subs for *.dmp (with time created=today)

BTW, the drive is showing as X:\

 

[Maxstar]

1. Please type notepad.exe after X:\
2. Now click on File > Open.
3. Into the Explorer window navigate to the system drive (Should be D:) and check if the dump files exists.