[SOLVED] Windows 2016 DISM errors

[scooby2023]

Hello,

We have a Windows 2016 Domain controller that we were getting an installation error when trying to install Windows Defender through the Server Manager on the Features tab. I decided to do the DISM repair and we are getting invalid bounds error at around 96.7%. When we checked the log it says there is a missing update, but when we try to install it manually it says the update isn't applicable. This is update is from 2021. The update that it says it is missing has been superseded and is covered by the cumulative updates that come out monthly. I tried the sfcfix tool, but it said there is nothing wrong with the server and everything is fine.

I have created the request files and have attached them to this post. Thanks.

 

[scooby2023]

Note that we previously had Sophos endpoint on the server, and we removed it and want Defender on the machine so we can manage it with Microsoft Defender for Cloud.

 

[Maxstar]

Hi and welcome to Sysnative,

Follow these instructions to remove an update.

• Open the Start menu of Windows and type the command CMD
• When you see Command Prompt on the list, right-click on it and select Run as administrator.
• When command prompt opens, copy and paste the following command into it, then press enter.

wusa /uninstall /KB:5007192

• Let me know if it says it was successful or you get the message: The update KB5007192 is not installed on this computer.

 

[scooby2023]

Hi Maxstar,

Thanks for your quick reply. I just ran the command and got the error that it not installed on this computer.

 

[Maxstar]

Follow these instructions to perform a regsearch with FRST.

Download the

Farbar Recovery Scan Tool and save it to your Desktop:

Download the 64 bit version: - Farbar Recovery Scan Tool Link

• Open the startmenu and type the command cmd.
• After you find the Command Prompt, right click on it and select Run as Administrator.
• Copy and paste the following into the Command Prompt and press enter.

reg load HKLM\COMPONENTS C:\WINDOWS\SYSTEM32\CONFIG\COMPONENTS

Right-click on the file FRST64.exe and choose Run as administrator.

• Copy and paste the following (code) into the Search box and click the Search Registry button.

KB5007192

• When the scan is complete, a message will display that SearchReg.txt is saved in the same folder FRST was started from.
• Post the logfile SearchReg.txt as attachment in your next reply.

 

[scooby2023]

Here is the Searchreg.txt file

 

[Maxstar]

Step 1. Start the

Farbar Recovery Scan Tool again.

Warning: This script was written specifically for this system. Do not run this script on another system.

• Download the attachment fixlist.txt and save it to your desktop.
• Right-click on FRST.exe and select "Run as administrator".
• Press the Fix button.
• If for some reason the tool needs a restart, please make sure you let the system restart normally.
• When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
• Post the logfile Fixlog.txt as attachment in your next reply.

Step 2. Run the following DISM command and post the result. If it fails attach a new copy of the CBS log.

DISM /online /cleanup-image /RestoreHealth

 

[scooby2023]

Here is the attached fixlog.txt file. The DISM command ran successfully without any errors.

 

[Maxstar]

Please try to install the Windows Defender feature again and let me know the result. If it fails attach a new copy of the CBS logs.

 

[scooby2023]

I was able to successfully install Windows defender and run the scan. For some reason I get a security error if I try to launch it through the Windows update page, but I can launch the binary fine from command prompt. I'm not sure why this is.

 

[Maxstar]

Please reboot the server and try again and let me know if you get the same error!

 

[scooby2023]

I rebooted, but the same error. I saw that there was an update pending, but I can't install it.

 

[scooby2023]

I ran Dism /Online /Cleanup-Image /RestoreHealth and now the update error is gone. However this error still here.

 

[scooby2023]

Oddly I checked the other Windows 2016 DC and the error is the same. So I think since I can launch the application from the command line I'm fine for now. I will try to research to make sense of this issue and see if I can resolve it.

 

[scooby2023]

I was able to find the solution to this problem at this URL

We must set this policy to enable the server and reboot. After this, it works.
User Account Control: Admin Approval Mode for the Built-in Administrator account

Error while opening the Windows Defender in Windows Server 2016

Everything is now working. Thanks.

 

[Maxstar]

Hi,

You're welcome. Glad you managed to resolve the latest issue and thanks for sharing the solution. I'll mark this thread as solved then.