Windows server 2012R2 is not able to install new updates

ayoussef · Jun 9, 2021

hello
i have windows servers 2012R2 that failed to install any windows updates since many months
i have tried to install the windows updates manually from the microsoft update catalogue and still same error : ( WindowsUpdate_8000FFFF )
Tried :
SFC /scannow which detects some corruptions that couldnt be repaired
tried :
PS C:\Windows\system32> DISM /Online /Cleanup-Image /RestoreHealth /source:WIM:E:\sources\install.wim:1 /LimitAccess

Deployment Image Servicing and Management tool
Version: 6.3.9600.19408

Image Version: 6.3.9600.19397

[==========================100.0%==========================]
The restore operation completed successfully. The component store corruption was repaired.
The operation completed successfully.
PS C:\Windows\system32>

which ended with no luck as well to fix the issue

SleepyDude · Jun 29, 2021

Hi,

Please run SFC /scannow again and when it finish collect the C:\Windows\Logs\CBS.log, please compress the log.

If zip file is too large to upload to the forum please share the file using a service like Dropbox, Google Drive, etc. or upload to Swiss Transfer and just provide the link for the file here.

ayoussef · Jun 29, 2021

Here you go the CBS log
CBS (3).zip

PS C:\Windows\system32> sfc /scannow

Beginning system scan. This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection found corrupt files but was unable to fix some
of them. Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For
example C:\Windows\Logs\CBS\CBS.log. Note that logging is currently not
supported in offline servicing scenarios.
PS C:\Windows\system32>

SleepyDude · Jun 29, 2021

DISM scan

Please open up a Command Prompt Window as a Administrator.
Inside the command prompt window type or Copy & Paste the following command:
Dism /Online /Cleanup-Image /RestoreHealth

Note: This may take some time to finish. Let me know if the process reaches 100% or not and any error reported
Locate the log c:\Windows\logs\cbs\CBS.log copy the file to the Desktop, Zip it and attach to your post.

Note: If the file is too big to attach please upload it to a service like Dropbox, OneDrive, Google Drive, or upload to Swiss Transfer and just provide the link for the file here

ayoussef · Jun 29, 2021

here you go with the cbs logs and the DISM log

SleepyDude · Jun 29, 2021

Farbar Recovery Scan Fix
!!! WARNING !!! The following fix is only relevant for this system and no other, running the script on another computer will not work and may cause problems...

Download FRST or FRST x64 and save it to the Desktop.
(Please pick the version that matches your operating system's bit type. If you don't know which version matches your system, try FRST if it say that is not compatible with your OS you have to use FRST64
Highlight the contents of the box below, right click on it and select Copy

Start::
reg: reg load HKLM\COMPONENTS %systemroot%\System32\config\COMPONENTS
reg: reg delete HKLM\COMPONENTS /v PendingXmlIdentifier /f
reg: reg delete HKLM\COMPONENTS /v ExecutionState /f
reg: reg delete HKLM\COMPONENTS /v PoqexecFailure /f
reg: reg delete HKLM\COMPONENTS /v NextQueueEntryIndex /f
reg: reg delete HKLM\COMPONENTS /v AdvancedInstallersNeedResolving /f
reg: reg unload HKLM\COMPONENTS
Reboot:
End::

Click to expand...
Execute FRST/FRST64 right click on the icon

and choose Run as Administrator. Make sure all other windows are closed.
Press the Fix button just once and Wait. After the fix the system needs to restart if the tool does not request it please Restart the computer.
The tool will make a log (Fixlog.txt) on the same location as FRST/FRST64 please post it in your next reply.

ayoussef · Jun 29, 2021

here it is the log

SleepyDude · Jun 29, 2021

Thanks.

Try to install one of the updates, if it fails collect the CBS.log.

ayoussef · Jun 29, 2021

hello ,
Still failing
attached the CBS logs

SleepyDude · Jun 29, 2021

Download Windows Repair (All-in-One) Portable

extract the tweaking.com_windows_repair_aio.zip to c:\Windows\TEMP the zip will extract to a folder called Tweaking.com - Windows Repair
execute the file Repair_Windows.exe from the Tweaking.com - Windows Repair folder, accept the Security warning and the EULA
click the button Jump To Repairs
accept the tool prompt and let the System Restart in Safe Mode to execute the next steps
In Safe Mode execute again the file Repair_Windows.exe from the Tweaking.com - Windows Repair folder
click the Open Repairs button to access the following screen:
click the box All Repairs to uncheck all the box's
check only the following box's:
- 16 - Repair Windows Updates
check the box Restart/Shutdown System When Repairs Complete: > Restart System
click the Start Repairs button

ayoussef · Jun 29, 2021

hello , i have tried the solution and updates still failing
attached the logs of the solution execution and the new cbs logs

SleepyDude · Jun 30, 2021

Hi,

What is the Antivirus installed on the machine? name and version please.

Edit: Can you try to install the update kb4577071 manually in Safe Mode
http://download.windowsupdate.com/d..._df414a69e87626a18e3070b8b5c9bb2b00070678.msu

ayoussef · Jun 30, 2021

i had sophos installed on the system, and during investigation i have removed it
trying now to install in safe mode and will keep you updated

ayoussef · Jun 30, 2021

tried and still failing

ayoussef · Jun 30, 2021

new cbs logs attached

SleepyDude · Jun 30, 2021

Yep same problem.

Can you attach this file c:\Windows\System32\catroot2\dberr.txt

ayoussef · Jun 30, 2021

here you go

SleepyDude · Jun 30, 2021

Is the OS installed on a real machine or VM?

If its a real machine any hardware changes done before this problem started?

ayoussef · Jun 30, 2021

it is a virtual machine

SleepyDude · Jun 30, 2021

Ok, please run the Teaking.com Windows Repair tool again from post #10 but this time with the following options:

02 - Reset File Permissions
03 - Reset Service Permissions
25 - Restore Important Windows Services
26 - Set Windows Services To Default Startup

Edit: The same problem with the updates happens in more than one VM?

Windows server 2012R2 is not able to install new updates

Member

Windows Update Moderator, Security Analyst

Member

Windows Update Moderator, Security Analyst

Member

Attachments

Windows Update Moderator, Security Analyst

Member

Attachments

Windows Update Moderator, Security Analyst

Member

Attachments

Windows Update Moderator, Security Analyst

Member

Attachments

Windows Update Moderator, Security Analyst

Member

Member

Member

Attachments

Windows Update Moderator, Security Analyst

Member

Attachments

Windows Update Moderator, Security Analyst

Member

Windows Update Moderator, Security Analyst