Windows Server 2016 Cumulative Updates fail to install.

[JoJo_16]

Hello,

I saw some Threads about the Windows Server 2016 Cumulative Update issues and I am running into the same issues on some of my Servers.

The attached files are all from my first Server.

Installing Windows Cumulative Update (KB5041773)
Installation went fine until the reboot. After rebooting windows is rolling back the updates.

We could't complete the updates. Undoing changes. Don't turn off your computer.

Failed with error 0x87D00324(-2016410844)

I have tried deleting the SoftwaredDistribution/Downloads folder, resetting the Windows Update service, downloading from the catalog and installing and none have resolved the issue.

sfc /scannow - no issues found

Dism /Online /Cleanup-Image /RestoreHealth - completed successfully

ComponentsScanner - no corruption found.

Many thanks in advance.

 

[Maxstar]

2024-09-03 12:08:23, Error                 CBS    Startup: Failed to process advanced operation queue, startupPhase: 0.  A rollback transaction will be created. [HRESULT = 0x800f0922 - CBS_E_INSTALLERS_FAILED]

Hi and welcome to Sysnative,

Provide the profile information of this server.

• Click the Start button and in the search box, type Command Prompt
• When you see Command Prompt on the list, right-click on it and select Run as administrator.
  Copy and paste the following commands one at a time into the command prompt and press enter after each.
  

  reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList" /s > "%userprofile%\desktop\ProfileList.txt"
  reg query "HKEY_USERS" >> "%userprofile%\desktop\ProfileList.txt"

• These commands will collect the System and Application logs and create ProfileList.txt on your Desktop.
• Attach this file in your next reply.

 

[JoJo_16]

Thank you. Here is the output.

 

[Maxstar]

2024-09-03 12:08:22, Info                  CSI    00000834 Failed unloading hive file: \??\C:\Users\MSSQL$MICROSOFT##WID\NTUSER.DAT, key: \Registry\User\S-1-5-80-1184457765-4068085190-3456807688-2200952327-3769537534, with flags: 0, NTSTATUS: 0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-80-1184457765-4068085190-3456807688-2200952327-3769537534
    ProfileImagePath    REG_EXPAND_SZ    C:\Users\MSSQL$MICROSOFT##WID

Is this an SQL server? If so I would suggest to stop all the SQL services and attempt to update again.

 

[JoJo_16]

It is a secondary SUP for ConfigMgr so it has WSUS w/WID installed. The service is set to manual and was not running. I uninstalled WSUS and WID then tried the updates again after the restart but it still failed the same way - 'undoing changes'.

Here are the CBS logs.

 

[Maxstar]

Hi,

Please run the following commands in an elevated prompt and attach Tasklist.txt to your next post.

reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\Taskcache" /s > "%userprofile%\desktop\Tasklist.txt"
dir "%systemroot%\System32\Tasks\Microsoft\Windows\PI" /s >> "%userprofile%\desktop\Tasklist.txt"

 

[JoJo_16]

Here is the output.

 

[Maxstar]

Hi,

Please run the following commands in an elevated prompt and post the result:

reg delete "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\Taskcache\Tasks\{4DA7E35C-B63E-45F8-8340-8CE5DCA6E7D3}" /f
reg delete "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\PI\SecureBootEncodeUEFI" /f

 

[JoJo_16]

Access denied for both commands.

 

[Maxstar]

Download the

Farbar Recovery Scan Tool and save it to your Desktop:

Download the 64 bit version: - Farbar Recovery Scan Tool Link

• Note: Your antivirus program may report FRST incorrectly as an infection. If so, disable the real-time protection when downloading and running FRST.
• Right-click to run the tool as administrator. When the tool opens click Yes to disclaimer.
• Note: Ensure that the Addition.txt check box is checked at the bottom of the form within the Optional Scan area.
• Press the Scan button.
• Please wait for the tool to finish. It will produce two logfiles called FRST.txt and Addition.txt in the same directory the tool is run from (which should be the desktop)
• Post the logfiles FRST.txt and Addition.txt as attachment in your next reply.

 

[JoJo_16]

No "fixlist.txt" file.

 

[Maxstar]

When you perform a scan you will see an FRST.txt and Addition.txt file on your desktop, please provide those files.