[SOLVED] windows server 2016 cumulative update keep failing.

P

pang

Member
Joined
Mar 22, 2024
Posts
9
Dear Expert,
Hello, I have a Windows Server 2016 Datacenter and i'm having the Windows security cumulative Updates failing: kb5035855
Any help will be appreciated.



I've done the clean boot and disabled my antivirus.

executive command sfc /scanow and DISM /Online /Cleanup-Image /RestoreHealth aslo failed.


Attached, along with CBS.log and component file (not able to upload due to large file)

Thank you very much for taking the time to look at this for me!
 

Attachments

Last edited:
Please refer to the componentsscanner.txt
 

Attachments

  • componentsscanner.JPG
    componentsscanner.JPG
    62.8 KB · Views: 6
Hi and welcome to Sysnative,

Provide the profile information of this server.
  • Click the Start button and in the search box, type Command Prompt
  • When you see Command Prompt on the list, right-click on it and select Run as administrator.
    Copy and paste the following commands one at a time into the command prompt and press enter after each.
    Code: 
    reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList" /s > "%userprofile%\desktop\ProfileList.txt"
reg query "HKEY_USERS" >> "%userprofile%\desktop\ProfileList.txt"
  • These commands will collect the System and Application logs and create ProfileList.txt on your Desktop.
  • Attach this file in your next reply.
 
Rich (BB code): 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2195202206-3833273250-4054844442-1012
    ProfileImagePath    REG_EXPAND_SZ    C:\Users\SAPServiceSMJ
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2195202206-3833273250-4054844442-1017
    ProfileImagePath    REG_EXPAND_SZ    C:\Users\SAPServiceSMJ

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2195202206-3833273250-4054844442-1013
    ProfileImagePath    REG_EXPAND_SZ    C:\Users\smjadm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2195202206-3833273250-4054844442-1018
    ProfileImagePath    REG_EXPAND_SZ    C:\Users\smjadm

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2195202206-3833273250-4054844442-1014
    ProfileImagePath    REG_EXPAND_SZ    C:\Users\sybsmj
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2195202206-3833273250-4054844442-1019
    ProfileImagePath    REG_EXPAND_SZ    C:\Users\sybsmj

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2195202206-3833273250-4054844442-1022
    ProfileImagePath    REG_EXPAND_SZ    C:\Users\SAPServiceDAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2195202206-3833273250-4054844442-1029
    ProfileImagePath    REG_EXPAND_SZ    C:\Users\SAPServiceDAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2195202206-3833273250-4054844442-1033
    ProfileImagePath    REG_EXPAND_SZ    C:\Users\SAPServiceDAA

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2195202206-3833273250-4054844442-1023
    ProfileImagePath    REG_EXPAND_SZ    C:\Users\daaadm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2195202206-3833273250-4054844442-1030
    ProfileImagePath    REG_EXPAND_SZ    C:\Users\daaadm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2195202206-3833273250-4054844442-1034
    ProfileImagePath    REG_EXPAND_SZ    C:\Users\daaadm

Hi,

I see a number of duplicate accounts, so I would check all the SID's / profiles to see which profile entry's can be removed from the registry.
 
Dear Maxtar,
Please let me know if you need more information. Thanks.

regards,
pang
 
Hi,

Have you checked all the accounts allready to see which entry's can be removed from the registry?
 
Dear Maxstar,

Sorry, i not sure which one is the correct one. But the user ids are valid. can guide me how to check which one is valid one?


regards,
pang
 
Hi,

Please run the following command in an elevated prompt, attach SID.txt to your next post.
Code: 
wmic useraccount get name,sid > "%userprofile%\Desktop\SID.txt
 
Dear Maxstar,

Please refer the output as below.


Name SID
Administrator S-1-5-21-2195202206-3833273250-4054844442-500
CSEP_ALS_SVC S-1-5-21-2195202206-3833273250-4054844442-1035
daaadm S-1-5-21-2195202206-3833273250-4054844442-1034
DefaultAccount S-1-5-21-2195202206-3833273250-4054844442-503
eybasis S-1-5-21-2195202206-3833273250-4054844442-1000
Guest S-1-5-21-2195202206-3833273250-4054844442-501
innovadssup S-1-5-21-2195202206-3833273250-4054844442-1024
sapadm S-1-5-21-2195202206-3833273250-4054844442-1009
SAPServiceDAA S-1-5-21-2195202206-3833273250-4054844442-1033
SAPServiceSMJ S-1-5-21-2195202206-3833273250-4054844442-1017
SAPServiceSMP S-1-5-21-2195202206-3833273250-4054844442-1004
smjadm S-1-5-21-2195202206-3833273250-4054844442-1018
smpadm S-1-5-21-2195202206-3833273250-4054844442-1005
sybsmj S-1-5-21-2195202206-3833273250-4054844442-1019
sybsmp S-1-5-21-2195202206-3833273250-4054844442-1006

regards,
pang
 
Hi,

Please make a backup / snapshot of this server and then perform the following.

Download the
577bf0efb8088-FRST.png
Farbar Recovery Scan Tool and save it to your Desktop:

Download the 64 bit version: - Farbar Recovery Scan Tool Link

Warning: This script was written specifically for this system. Do not run this script on another system.

  • Download the attachment fixlist.txt and save it to your desktop.
  • Right-click on FRST.exe and select "Run as administrator".
  • Press the Fix button.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally.
  • When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
  • Post the logfile Fixlog.txt as attachment in your next reply.

Afterwards reboot the server and attempt to update. If it fails attach a new copy of the CBS logs.
 

Attachments

Dear Maxstar,

After i excecuted the steps given. The update was successful. Thank you for your great support.


regards,
pang
 
You must log in or register to reply here.

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top