[SOLVED] windows server 2016 cumulative update keep failing.

pang · Mar 22, 2024

Dear Expert,
Hello, I have a Windows Server 2016 Datacenter and i'm having the Windows security cumulative Updates failing: kb5035855
Any help will be appreciated.

I've done the clean boot and disabled my antivirus.

executive command sfc /scanow and DISM /Online /Cleanup-Image /RestoreHealth aslo failed.

Attached, along with CBS.log and component file (not able to upload due to large file)

Thank you very much for taking the time to look at this for me!

pang · Mar 24, 2024

I attached the compoenent file here

pang · Mar 24, 2024

Need to remove additional ext added (zip). Thanks.

pang · Mar 24, 2024

Please refer to the componentsscanner.txt

Maxstar · Mar 25, 2024

Hi and welcome to Sysnative,

Provide the profile information of this server.

Click the Start button and in the search box, type Command Prompt

When you see Command Prompt on the list, right-click on it and select Run as administrator.
Copy and paste the following commands one at a time into the command prompt and press enter after each.

Code:

reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList" /s > "%userprofile%\desktop\ProfileList.txt"
reg query "HKEY_USERS" >> "%userprofile%\desktop\ProfileList.txt"

These commands will collect the System and Application logs and create ProfileList.txt on your Desktop.
Attach this file in your next reply.

pang · Mar 28, 2024

Dear Maxstar,

Please refer to attached. thanks.

regards,
pang

Maxstar · Mar 29, 2024

Rich (BB code):

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2195202206-3833273250-4054844442-1012
    ProfileImagePath    REG_EXPAND_SZ    C:\Users\SAPServiceSMJ
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2195202206-3833273250-4054844442-1017
    ProfileImagePath    REG_EXPAND_SZ    C:\Users\SAPServiceSMJ

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2195202206-3833273250-4054844442-1013
    ProfileImagePath    REG_EXPAND_SZ    C:\Users\smjadm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2195202206-3833273250-4054844442-1018
    ProfileImagePath    REG_EXPAND_SZ    C:\Users\smjadm

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2195202206-3833273250-4054844442-1014
    ProfileImagePath    REG_EXPAND_SZ    C:\Users\sybsmj
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2195202206-3833273250-4054844442-1019
    ProfileImagePath    REG_EXPAND_SZ    C:\Users\sybsmj

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2195202206-3833273250-4054844442-1022
    ProfileImagePath    REG_EXPAND_SZ    C:\Users\SAPServiceDAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2195202206-3833273250-4054844442-1029
    ProfileImagePath    REG_EXPAND_SZ    C:\Users\SAPServiceDAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2195202206-3833273250-4054844442-1033
    ProfileImagePath    REG_EXPAND_SZ    C:\Users\SAPServiceDAA

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2195202206-3833273250-4054844442-1023
    ProfileImagePath    REG_EXPAND_SZ    C:\Users\daaadm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2195202206-3833273250-4054844442-1030
    ProfileImagePath    REG_EXPAND_SZ    C:\Users\daaadm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2195202206-3833273250-4054844442-1034
    ProfileImagePath    REG_EXPAND_SZ    C:\Users\daaadm

Hi,

I see a number of duplicate accounts, so I would check all the SID's / profiles to see which profile entry's can be removed from the registry.

pang · Apr 14, 2024

Dear Maxtar,
Please let me know if you need more information. Thanks.

regards,
pang

Maxstar · Apr 15, 2024

Hi,

Have you checked all the accounts allready to see which entry's can be removed from the registry?

pang · Apr 15, 2024

Dear Maxstar,

Sorry, i not sure which one is the correct one. But the user ids are valid. can guide me how to check which one is valid one?

regards,
pang

Maxstar · Apr 16, 2024

Hi,

Please run the following command in an elevated prompt, attach SID.txt to your next post.

Code:

wmic useraccount get name,sid > "%userprofile%\Desktop\SID.txt

pang · Apr 16, 2024

Dear Maxstar,

Please refer the output as below.

Name SID
Administrator S-1-5-21-2195202206-3833273250-4054844442-500
CSEP_ALS_SVC S-1-5-21-2195202206-3833273250-4054844442-1035
daaadm S-1-5-21-2195202206-3833273250-4054844442-1034
DefaultAccount S-1-5-21-2195202206-3833273250-4054844442-503
eybasis S-1-5-21-2195202206-3833273250-4054844442-1000
Guest S-1-5-21-2195202206-3833273250-4054844442-501
innovadssup S-1-5-21-2195202206-3833273250-4054844442-1024
sapadm S-1-5-21-2195202206-3833273250-4054844442-1009
SAPServiceDAA S-1-5-21-2195202206-3833273250-4054844442-1033
SAPServiceSMJ S-1-5-21-2195202206-3833273250-4054844442-1017
SAPServiceSMP S-1-5-21-2195202206-3833273250-4054844442-1004
smjadm S-1-5-21-2195202206-3833273250-4054844442-1018
smpadm S-1-5-21-2195202206-3833273250-4054844442-1005
sybsmj S-1-5-21-2195202206-3833273250-4054844442-1019
sybsmp S-1-5-21-2195202206-3833273250-4054844442-1006

regards,
pang

Maxstar · Apr 17, 2024

Hi,

Please make a backup / snapshot of this server and then perform the following.

Download the

Farbar Recovery Scan Tool and save it to your Desktop:

Download the 64 bit version: - Farbar Recovery Scan Tool Link

Warning: This script was written specifically for this system. Do not run this script on another system.

Download the attachment fixlist.txt and save it to your desktop.
Right-click on FRST.exe and select "Run as administrator".
Press the Fix button.
If for some reason the tool needs a restart, please make sure you let the system restart normally.
When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
Post the logfile Fixlog.txt as attachment in your next reply.

Afterwards reboot the server and attempt to update. If it fails attach a new copy of the CBS logs.

pang · Apr 17, 2024

Dear Maxstar,

After i excecuted the steps given. The update was successful. Thank you for your great support.

regards,
pang

Maxstar · Apr 18, 2024

Hi,

You're welcome. Glad to hear this server is up-to-date now...

Search

Search

[SOLVED] windows server 2016 cumulative update keep failing.

pang

Member

Attachments

pang

Member

pang

Member

pang

Member

Attachments

Maxstar

Windows Update Moderator, Security Analyst

pang

Member

Attachments

Maxstar

Windows Update Moderator, Security Analyst

pang

Member

Maxstar

Windows Update Moderator, Security Analyst

pang

Member

Maxstar

Windows Update Moderator, Security Analyst

pang

Member

Maxstar

Windows Update Moderator, Security Analyst

Attachments

pang

Member

Maxstar

Windows Update Moderator, Security Analyst