Windows Server 2019 Failed Update - error 0X80070020

[don_quixote]

Hi There,

I'm having issue with updating one of our windows server that keeps giving me an error 0X80070020.

Mainly are for these KBs: (KB5036896), (KB5037765) and (KB5038283)

Steps taken:
- Downlaod the KB5036896 manually from microsoft catalogue and install it manually> no change

===================================================================================================================================
C:\WINDOWS\system32>sfc /scannow

Beginning system scan. This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection did not find any integrity violations.

C:\WINDOWS\system32>Dism /Online /Cleanup-Image /RestoreHealth

Deployment Image Servicing and Management tool
Version: 10.0.17763.3406

Image Version: 10.0.17763.3650

[==========================100.0%==========================] The restore operation completed successfully.
The operation completed successfully.

===================================================================================================================================

ComponentsScanner Version 1.5.1.0 by sysnative.com
Windows Version: Windows Server 2019 Standard x64 (10.0.17763.3650)
Start time: 2024-05-24T15:01:58
Hive scanned: %windir%\System32\config\COMPONENTS
Number of keys: 144157
Number of values: 466598

==== Critical Errors ====
None

==== Corrupt Key Names ====
None

==== Corrupt Value Names ====
None

==== Corrupt Value Data Type ====
None

==== Corrupt Value Data ====
None

==== Repair Log ====
No possible repairs

==== Warnings ====
None

Finish Time: 2024-05-24T15:09:24. Corruption scan time: 413.4328212s


Any advise will be so greatly appreciated.

 

[don_quixote]

CBS file attached.

 

[don_quixote]

Hi There,

I'm having issue with updating one of our windows server that keeps giving me an error 0X80070020.

Mainly are for these KBs: (KB5036896), (KB5037765) and (KB5038283)

Steps taken:
- Downlaod the KB5036896 manually from microsoft catalogue and install it manually> no change

===================================================================================================================================
C:\WINDOWS\system32>sfc /scannow

Beginning system scan. This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection did not find any integrity violations.

C:\WINDOWS\system32>Dism /Online /Cleanup-Image /RestoreHealth

Deployment Image Servicing and Management tool
Version: 10.0.17763.3406

Image Version: 10.0.17763.3650

[==========================100.0%==========================] The restore operation completed successfully.
The operation completed successfully.

===================================================================================================================================

ComponentsScanner Version 1.5.1.0 by sysnative.com
Windows Version: Windows Server 2019 Standard x64 (10.0.17763.3650)
Start time: 2024-05-24T15:01:58
Hive scanned: %windir%\System32\config\COMPONENTS
Number of keys: 144157
Number of values: 466598

==== Critical Errors ====
None

==== Corrupt Key Names ====
None

==== Corrupt Value Names ====
None

==== Corrupt Value Data Type ====
None

==== Corrupt Value Data ====
None

==== Repair Log ====
No possible repairs

==== Warnings ====
None

Finish Time: 2024-05-24T15:09:24. Corruption scan time: 413.4328212s


Any advise will be so greatly appreciated.

 

[don_quixote]

- closing this case as it's a duplicate.

 

[Maxstar]

Hi and welcome to Sysnative,

Provide the profile information of this server.

• Click the Start button and in the search box, type Command Prompt
• When you see Command Prompt on the list, right-click on it and select Run as administrator.
  Copy and paste the following commands one at a time into the command prompt and press enter after each.
  

  reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList" /s > "%userprofile%\desktop\ProfileList.txt"
  reg query "HKEY_USERS" >> "%userprofile%\desktop\ProfileList.txt"

• These commands will collect the System and Application logs and create ProfileList.txt on your Desktop.
• Attach this file in your next reply.

 

[don_quixote]

Hi Maxstar,

Thank you for the follow up. Please see attached for the log file.

 

[Maxstar]

Hi,

You have changed the usernames, so I cannot check the duplicate accounts. Could you please send me the ProfileList in a Private Message without changing the real usernames.

 

[Maxstar]

Hi,

Is the result you sent me in the private message from this server, this because it contains different SID data?

 

[don_quixote]

Hi Maxstar,

My apology as I indeed sent you the wrong result. I'll resend you again via private message.

 

[Maxstar]

Hi,

Is the toolkit "Newforma Project Center Server Errors" still installed on this server?

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1757505558-3676514810-1639332544-8011
    ProfileImagePath    REG_EXPAND_SZ    C:\Users\newforma

 

[don_quixote]

Hi Maxstar,

I can't seem to find the toolkit called "Newforma Project Center Server Errors". Although, I found that there's this app called "updatesenseclient_1210caea3bc805cb8817753c5f912950bb4985ff.exe" on the profile's desktop. I don't see it on any other servers where newforma is installed. There were a few times when I tried to install windows update on this server, it failed on the antivirus part too so wonder if this app could be the reason?
Or should I try remove this newforma profile altogether?

 

[Maxstar]

Hi,

Which security software is installed on this server, only Defender or also other (third party) security software?

 

[don_quixote]

Just Defender

 

[Maxstar]

Okay, please attempt to update again with Process Monitor running. This will show more info about the issue / profile which is causing the rollback.

Capture Process Monitor BootLog
1. Download and run Process Monitor. Leave this running while you perform the next steps.
2. Select the Options....Enable Boot Logging option. A Enable Boot Logging dialog will come up. Just click OK.
3. Create a folder on your desktop named BootLog.
4. Attempt to install the update just like you have in the past. Let the machine reboot and revert just like it has in the past.
5. After the machine has rebooted and come back up to the desktop, open Process Monitor again. A message box will come up telling you that a log of boot-time activity was created and ask if you wish to save it. Click Yes and save to the BootLog folder on your desktop.
6. This may take some time as it converts the boot-time data. Allow it to finish.
7. Zip up the entire BootLog folder on your desktop and upload to a file sharing service like: WeTransfer - Send Large Files & Share Photos Online - Up to 2GB Free
8. Attach also a new copy of the CBS logs for the time stamps.