[SOLVED] Windows Server 2016 hasn't updated in a year

Erario · May 14, 2024

I've checked now, unfortunately taking out the IIS Web Server makes me delete some other things that are used (RAS and others), so I can't do that.
If the problem cannot be solved in any other way I think I will install a second VM with Server 2019 or 2022 and start migrating.

Maxstar · May 15, 2024

Hi,

Are you able to clone this server to an testing environment, so we can safely remove IIS and other things to see if it will resolve the rollback?

Erario · May 15, 2024

Yes, when I install SSDs I can do it faster because now the VM, although it has two partitions (O.S. and DATA) is on a single 2 Tb virtual disk and restore operations are long with mechanical disks, over three hours.
I am looking for a way to separate partitions into two separate virtual disks but it is not a trivial operation.

Maxstar · May 15, 2024

Hi,

You can try Disk2vhd to create an image of the OS parition only to load in another Hyper-V environment?

Erario · May 15, 2024

Great tool, I didn't know it, thank you!
I would have to do a double pass but it's not dramatic, i.e. export to vhdx and then migrating to the format used by Proxmox.

Erario · May 15, 2024

I've already virtualized just the operating system, removed IIS and now I'm trying to install the May 2024 cumulative msu, without a network card in the VM because I want to avoid it creating problems with the other one running.

Maxstar · May 15, 2024

Great, let me know the result. Let's hope the update will install without a rollback this time...

Erario · May 15, 2024

Same problem, update failed, so it's not IIS.
Now a problem is extracting logs if you need them, which I don't have LAN enabled (at the moment).

Maxstar · May 15, 2024

Hmm, if the VM has a VHDX-file you can mount it on antoher system to extract the log files.

Erario · May 15, 2024

Here all the logs.

Maxstar · May 15, 2024

Rich (BB code):

2024-05-15 17:05:45, Error      [0x01803e] CSI    0000043c (F) Failed execution of queue item Installer: HTTP Installer ({86fee01a-954a-11df-bc0c-cea7dfd72085}) with HRESULT HRESULT_FROM_WIN32(ERROR_ALREADY_EXISTS).  Failure will be ignored: The failure was encountered during rollback; installer is reliable[gle=0x80004005]
2024-05-15 17:05:45, Info                  CBS    Added C:\Windows\Logs\CBS\CBS.log to WER report.

Still the same error! Please attempt to update again on this VM with Process Monitor running with boot logging.

Capture Process Monitor BootLog
1. Download and run Process Monitor. Leave this running while you perform the next steps.
2. Select the Options....Enable Boot Logging option. A Enable Boot Logging dialog will come up. Just click OK.
3. Create a folder on your desktop named BootLog.
4. Attempt to install the update just like you have in the past. Let the machine reboot and revert just like it has in the past.
5. After the machine has rebooted and come back up to the desktop, open Process Monitor again. A message box will come up telling you that a log of boot-time activity was created and ask if you wish to save it. Click Yes and save to the BootLog folder on your desktop.
6. This may take some time as it converts the boot-time data. Allow it to finish.
7. Zip up the entire BootLog folder on your desktop and upload to a file sharing service like: WeTransfer - Send Large Files & Share Photos Online - Up to 2GB Free
8. Attach also the CBS logs for the time stamps to set some filters.

Erario · May 15, 2024

Ok, i try but without removing IIS since I think that's not the problem.

Maxstar · May 15, 2024

No, it's something else what is causing this rollback, so let's hope we can find the root cause on this clone.

Erario · May 16, 2024

Here the link (CBS and BootLog).

https://www.swisstransfer.com/d/5d777245-fafb-451f-ac0e-ccbc90336829

Maxstar · May 16, 2024

Rich (BB code):

5/15/2024 9:01:50 PM	iissetup.exe	FileSystemControl	C:\Windows\System32\httpapi.dll	INVALID DEVICE REQUEST	Control: FSCTL_GET_EXTERNAL_BACKING

It still looks like an issue with IIS / HTTP service which is causing this issue. Let's take a look at the event logs as well.

Upload the Event Viewer logs.

Click the Start button and in the search box, type Command Prompt

When you see Command Prompt on the list, right-click on it and select Run as administrator.
Copy and paste the following commands one at a time into the command prompt and press enter after each.

Code:

wevtutil epl SYSTEM "%userprofile%\Desktop\System.evt"
wevtutil epl APPLICATION "%userprofile%\Desktop\Application.evt"
PowerShell Compress-Archive -Path "%userprofile%\Desktop\*.evt" -DestinationPath "%UserProfile%\Desktop\EventLogs.zip"

These commands will collect the System and Application logs and create EventsLogs.zip on your Desktop.
Attach this file in your next reply.

Erario · May 16, 2024

Your request.

Maxstar · May 16, 2024

Do you see the following Event-ID on the production server as well in the System Event log:

Rich (BB code):

The description for Event ID 9009 from source Microsoft-Windows-IIS-APPHOSTSVC cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event: 

C:\inetpub\history\CFGHISTORY_0000000011

The message resource is present but the message was not found in the message table

Erario · May 16, 2024

I try this?

EventTracker KB --Event Id: 9009 Source: Microsoft-Windows-IIS-APPHOSTSVC

Maxstar · May 16, 2024

I found that link as well, however it looks like the ApphostSvc is missing on this server. So please run the following commands first.

Code:

sc query apphostsvc
sc qc apphostsvc

Erario · May 16, 2024

Maxstar said:
I found that link as well, however it looks like the ApphostSvc is missing on this server. So please run the following commands first.

Code:

sc query apphostsvc sc qc apphostsvc

It is not missing because it starts regularly.
Running and autostart enabled.
I try again the update now?

[SOLVED] Windows Server 2016 hasn't updated in a year

Well-known member

Windows Update Moderator, Security Analyst

Well-known member

Windows Update Moderator, Security Analyst

Well-known member

Well-known member

Windows Update Moderator, Security Analyst

Well-known member

Windows Update Moderator, Security Analyst

Well-known member

Attachments

Windows Update Moderator, Security Analyst

Well-known member

Windows Update Moderator, Security Analyst

Well-known member

Windows Update Moderator, Security Analyst

Well-known member

Attachments

Windows Update Moderator, Security Analyst

Well-known member

Windows Update Moderator, Security Analyst

Well-known member