[SOLVED] Windows Defender feature add fails on 2016 server

[Gerrie]

When I try enable Windows Defender on our old 2016 server, we get an error that the package does not exist and the following entries in cbs.log among others
2025-05-22 11:58:30, Info CBS Failed to pin deployment while resolving Update: Package_8811_for_KB4540670~31bf3856ad364e35~amd64~~10.0.1.4.4540670-17491_neutral from file: (null) [HRESULT = 0x80073701 - ERROR_SXS_ASSEMBLY_MISSING]
2025-05-22 11:58:30, Info CBS Failed to bulk stage deployment manifest and pin deployment for packageackage_718_for_KB5058383~31bf3856ad364e35~amd64~~10.0.1.21 [HRESULT = 0x80073701 - ERROR_SXS_ASSEMBLY_MISSING]
2
When I try uninstalling KB4540670 from CMD line I get the reply that "The update KB4540670 is not installed on this computer".
A search from Farbar Recovery tool shows that entries still exist for this KB in the registry.
However, creating the necessary fixlist file for Farbar to remove this KB appears to be complex and beyond my skills.
Is it possible to get assistance with this?

Your help is greatly appreciated.
Thanks in advance.

 

[Windows Update Bot]

Hi @Gerrie,

Welcome to Sysnative Forums!

If you haven't already, please review the posting instructions here, and attach the requested log files. Without log files, our helpers will not be able to assist, and this will slow down fixing your machine.

If logs have been already been provided, our team of volunteers will analyse the provided log files to build a fix for your system. Please be aware that this may take several days from your initial post, due to the high volume of threads that we receive.


- Sysnative Windows Update Team

 

[Gerrie]

I am gathering the various log files that are needed to be posted along with my above request and have an issue in which ComponentsScanner has been running for 16 hours already and is stuck at "Checking WinSXS catalogs against CanonicalData\Datalogs" for this time.
Should I stop the process and retry ComponentsScanner?

 

[Gerrie]

Herewith CBS and DISM logs whilst I attempt to get ComponentsScanner to complete.

 

[Gerrie]

Components scanner and Search reg log files

 

[Maxstar]

Hi and welcome to Sysnative,

Step 1. Start the

Farbar Recovery Scan Tool again.

Warning: This script was written specifically for this system. Do not run this script on another system.

• Download the attachment fixlist.txt and save it to your desktop.
• Right-click on FRST64.exe and select "Run as administrator".
• Press the Fix button.
• If for some reason the tool needs a restart, please make sure you let the system restart normally.
• When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
• Post the logfile Fixlog.txt as attachment in your next reply.

Step 2. Follow these instructions to remove an update.

• Open the Start menu of Windows and type the command CMD
• When you see Command Prompt on the list, right-click on it and select Run as administrator.
• When command prompt opens, copy and paste the following command into it, then press enter.

wusa /uninstall /KB:4550929

• Let me know if it says it was successful or you get the message: The update KB4550929 is not installed on this computer.

 

[Gerrie]

Thank you very much.
The fix removed KB4540670

Would you be so kind as to advise/assist with another old KB that appears to be a problem now?

I am not sure how to determine if more KB's will be a problem.



2025-05-23 14:28:40, Error CSI 00000009 (F) STATUS_SXS_ASSEMBLY_MISSING #46842# from CCSDirectTransaction::OperateEnding at index 0 of 1 operations, disposition 2[gle=0xd015000c]
2025-05-23 14:28:40, Error CSI 0000000a (F) HRESULT_FROM_WIN32(ERROR_SXS_ASSEMBLY_MISSING) #46690# from Windows::ServicingAPI::CCSITransaction::ICSITransaction_PinDeployment(Flags = 0, a = a3d874599429ecb6a05e964bc86e8ace, version 10.0.14393.2999, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35}, cb = (null), s = (null), rid = 'Package_7372_for_KB4550929~31bf3856ad364e35~amd64~~10.0.1.8.4550929-14563_neutral', rah = '2', manpath = (null), catpath = (null), ed = 0, disp = 0)[gle=0x80073701]
2025-05-23 14:28:40, Info CBS Failed to pin deployment while resolving Update: Package_7372_for_KB4550929~31bf3856ad364e35~amd64~~10.0.1.8.4550929-14563_neutral from file: (null) [HRESULT = 0x80073701 - ERROR_SXS_ASSEMBLY_MISSING]
2025-05-23 14:28:40, Info CBS Failed to bulk stage deployment manifest and pin deployment for packageackage_718_for_KB5058383~31bf3856ad364e35~amd64~~10.0.1.21 [HRESULT = 0x80073701 - ERROR_SXS_ASSEMBLY_MISSING]

wusa /unistall /kb:4550929 reports KB not installed.


Attached are the logs and searchreg.txt


Thanking you in advance.

 

[Maxstar]

I am not sure how to determine if more KB's will be a problem.

The remaining issue seems to be KB4550929, that's why I suggested to try to uninstall this update too in my previous post.

Here's the next fix.

Start the

Farbar Recovery Scan Tool again.

Warning: This script was written specifically for this system. Do not run this script on another system.

• Download the attachment fixlist.txt and save it to your desktop.
• Right-click on FRST64.exe and select "Run as administrator".
• Press the Fix button.
• If for some reason the tool needs a restart, please make sure you let the system restart normally.
• When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
• Post the logfile Fixlog.txt as attachment in your next reply.

Afterwards try to install the Defender feature. If it fails attach a new copy of the CBS logs.

 

[Gerrie]

Thank you very much for the assistance.
KB4550929 uninstalled and I was able to enable Defender again.

My apologies for missing your note to check KB4550929 as well.

It is very concerning that Windows behaves in this way by leaving remnants behind which cause problems.

 

[Maxstar]

Hi,

You're welcome. Glad to hear the issue has been resolved. But fortunately, such problems are quite easy to fix.