[SOLVED] Windows Server 2016 hasn't updated in a year

[Erario]

I think I've done a little bit of everything I've found here in other posts but any kind of update, automatic or manual doesn't complete, classic percentage up to 100% and then the previous state is restored.
ScanHealth and sfc do not return any errors, yesterday I tried RestoreHealth, it gets to 100% and still fails.
No antivirus or third-party firewall installed.
The CBS.log I attach continues several failed attempts, also the latest cumulative update.
Windows Image version: 10.0.14393.4169.

 

[Maxstar]

Hi and welcome to Sysnative,

Could you please post the previous (CbsPersist) logs as well.

Upload a copy of the CBS folder

• Open Windows Explorer and browse to the C:\Windows\Logs folder.
• Right-click on the CBS folder and choose Send to > Compressed (zipped) folder.
• Now the message will appear, "Windows cannot create the Compressed (zipped) Folder here. Do you want it to be placed on the desktop instead?"
• Click on the Yes button here.

• Attach the file CBS.zip to your next reply. If the file is too large to attach, upload the CBS.zip file to www.wetransfer.com and post the link in your next reply.

 

[Erario]

Thanks, sorry for the uncompressed upload, here is the compressed CBS folder with the last failed cumulative update attempt (KB5036899).

 

[Maxstar]

2024-05-05 13:10:13, Info                  CSI    0000072b Failed unloading hive file: \??\C:\Users\Default\NTUSER.DAT, key: \Registry\USER\Template, with flags: 1, NTSTATUS: 0
2024-05-05 13:10:13, Info                  CSI    0000072c Failed unloading hive file: \??\C:\Users\MSSQL$MICROSOFT##WID\NTUSER.DAT, key: \Registry\User\S-1-5-80-1184457765-4068085190-3456807688-2200952327-3769537534, with flags: 0, NTSTATUS: 0
2024-05-05 13:10:13, Info                  CSI    0000072d Failed unloading hive file: \??\C:\Users\Administrator\NTUSER.DAT, key: \Registry\User\S-1-5-21-1800331694-2450782659-373348997-500, with flags: 0, NTSTATUS: 0
2024-05-05 13:10:13, Error                 CBS    Startup: Failed to process advanced operation queue, startupPhase: 0.  A rollback transaction will be created. [HRESULT = 0x800f0922 - CBS_E_INSTALLERS_FAILED]

Provide the profile information of this server.

• Click the Start button and in the search box, type Command Prompt
• When you see Command Prompt on the list, right-click on it and select Run as administrator.
  Copy and paste the following commands one at a time into the command prompt and press enter after each.
  

  reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList" /s > "%userprofile%\desktop\ProfileList.txt"
  reg query "HKEY_USERS" >> "%userprofile%\desktop\ProfileList.txt"
  wmic useraccount get name,sid >> "%userprofile%\desktop\ProfileList.txt"

• These commands will collect the System and Application logs and create ProfileList.txt on your Desktop.
• Attach this file in your next reply.

 

[Erario]

• These commands will collect the System and Application logs and create ProfileList.txt on your Desktop.
• Attach this file in your next reply.

Sorry for the delay, I hadn't stopped the Windows Update service and started with another attempt, also failed.
Here is the report you asked for.

 

[Maxstar]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-80-1184457765-4068085190-3456807688-2200952327-3769537534
    ProfileImagePath    REG_EXPAND_SZ    C:\Users\MSSQL$MICROSOFT##WID

Is this server still running SQL versions? If so are you able to disable all the SQL services and then attempt to update again?

 

[Erario]

Possible that an unsolicited Restore Health is performed after a rollback for failed update?
Sorry for the delay, it has completed it now strangely with no errors.
There is no SQL Server installed now, so no service to be able to disable, perhaps it had been used previously then deinstalled.
Thank you so much for your help, I can't get out of this tunnel.

 

[Erario]

But in fact NTUSER.DAT in the SQL profile still tries to be processed by something, it changes the date and time.
How can I delete such a user profile, if you think that may be what is causing problem?

 

[Maxstar]

Is this server upgraded from 2012, and was the Windows Internal Database feature installed?

 

[Erario]

I've only taken over this server a few months so I can't tell you if it's from a 2012, this is the list of things installed, very few and no trace of SQL.

 

[Maxstar]

I've only taken over this server a few months so I can't tell you if it's from a 2012, this is the list of things installed, very few and no trace of SQL.

The Windows Internal Database feature is not a third party program listed in the control panel. This feature is installed using the Server Manger. To see if it's installed we can run the following command in an elevated prompt.

DISM /online /Get-Features /Format:table > "%USERPROFILE%\desktop\Features.txt"

If installed it will show the following:

----------------------------------------------------------- | --------
Feature Name                                                | State   
----------------------------------------------------------- | --------
Windows-Internal-Database                                   | Enabled

 

[Erario]

Here is the list of updates, I don't see any trace of coming from 2012, and as you can see some did.

 

[Erario]

The Windows Internal Database feature is not a third party program listed in the control panel. This feature is installed using the Server Manger. To see if it's installed we can run the following command in an elevated prompt.

DISM /online /Get-Features /Format:table > "%USERPROFILE%\desktop\Features.txt"

If installed it will show the following:

----------------------------------------------------------- | --------
Feature Name                                                | State  
----------------------------------------------------------- | --------
Windows-Internal-Database                                   | Enabled

Not installed.

 

[Erario]

Not elevated prompt, sorry, here the correct file.

Windows-Internal-Database | Disattivata

So disabled.
I don't see any software that can use SQL Server.
Inside that profile only NTUSER.DAT is updated to an hour ago, all other files or folders carry the year 2018.

 

[Maxstar]

Please make a backup / snapshot of this server and then run the following command in an elevated prompt and post the result.

reg delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-80-1184457765-4068085190-3456807688-2200952327-3769537534" /f

 

[Erario]

Please make a backup / snapshot of this server and then run the following command in an elevated prompt and post the result.

reg delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-80-1184457765-4068085190-3456807688-2200952327-3769537534" /f

Operation completed without error.
It's a VM in Proxmox, well backed up so I can do what I want with it, in an hour I restore it.

 

[Maxstar]

Great, please reboot the server and attempt to update. If it fails attach a new copy of the CBS logs.

 

[Erario]

Great, please reboot the server and attempt to update. If it fails attach a new copy of the CBS logs.

Do I take possession of the profile folder and delete it before making another attempt or is irrilevant?

 

[Maxstar]

That should not be necessary since the registry key is removed.

 

[Erario]

I tried to install the latest the cumulative update in msu format that I had already downloaded and the error is this: [0x800f0805].
I have now deleted the software distrubution, restart the service and am trying the automatic update.