[SOLVED] Windows Server 2022 updates keep rolling back

[pantera950]

Hello,

I really need some help as one server keeps rolling back updates when asking for restart
There is no issues with DISM restorehealth, componentcleanup , SFC but whenever server restarts it goes rolling back changes.

Windows Server 2022



CBS log attached
Error: 0x8007053C
Tried to Windows updates with and without WSUS

Thanks for any help

 

[Maxstar]

Hi and welcome to sysnative,

Please do the following to collect some more information.

Download the

Farbar Recovery Scan Tool and save it to your Desktop:

Download the 64 bit version: - Farbar Recovery Scan Tool Link

• Download the attachment fixlist.txt and save it to your desktop.
• Right-click on FRST.exe and select "Run as administrator".
• Press the Fix button.
• If for some reason the tool needs a restart, please make sure you let the system restart normally.
• When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
• Post the logfile Fixlog.txt as attachment in your next reply.

 

[pantera950]

Thank you for reply
Attaching log, just removed usernames from file

 

[Maxstar]

Hi,

Please run the following command in an elevated prompt and copy and paste the result in your next post.

icacls "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini" /T /Q /C /RESET

 

[pantera950]

Hello,

Hi,

Please run the following command in an elevated prompt and copy and paste the result in your next post.

icacls "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini" /T /Q /C /RESET

Success

 

[Maxstar]

Hi,

Great, please run the following command as well and post the result.

icacls "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini"

 

[pantera950]

Hi,

Great, please run the following command as well and post the result.

icacls "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini"

Adding

 

[Maxstar]

Mmm, it's still showing a number of the following SID's, do you recognize them?

S-1-5-21-1618963446-474516560-2532156568-1000:(I)(DE,DC)
S-1-5-21-1618963446-474516560-2532156568-1001:(I)(DE,DC)
etc......

 

[pantera950]

Mmm, it's still showing a number of the following SID's, do you recognize them?

S-1-5-21-1618963446-474516560-2532156568-1000:(I)(DE,DC)
S-1-5-21-1618963446-474516560-2532156568-1001:(I)(DE,DC)
etc......

Aha i see it now. There is lot's of "temp" users from before. I'll cleanup these first

 

[Maxstar]

Perfect let me know the result of icacls after the cleanup..

 

[pantera950]

Perfect let me know the result of icacls after the cleanup..

Profiles removed from registry and from users. But but icacls still show their SIDs even after doing reset and restart.

 

[pantera950]

I'll try remove this security permissions manually now

 

[Maxstar]

Please check also if these SID's are listed for other files, e.g. in this directory: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories

 

[pantera950]

Yes it is inherited from higher level , this time from "Start Menu"

 

[Maxstar]

Hmm, also for other locations or only the "Start Menu"?

 

[pantera950]

Only start menu, i deleted permissions now desktop.ini loks like this

Hmm, also for other locations or only the "Start Menu"?

 

[Maxstar]

This looks much better, so I would attempt to update again. Hopefully it will not fail on other files this time...

2023-11-29 15:31:18, Info                  CBS    Reporting poqexec status with status: 0xc000007d, failed file: desktop.ini, interfering process: , context: Shutdown, first merged sequence: 191
2023-11-29 15:31:18, Error                 CBS    Shtd: Failed while processing critical primitive operations queue. [HRESULT = 0x8007053c - ERROR_BAD_INHERITANCE_ACL]

 

[pantera950]

This looks much better, so I would attempt to update again. Hopefully it will not fail on other files this time...

2023-11-29 15:31:18, Info                  CBS    Reporting poqexec status with status: 0xc000007d, failed file: desktop.ini, interfering process: , context: Shutdown, first merged sequence: 191
2023-11-29 15:31:18, Error                 CBS    Shtd: Failed while processing critical primitive operations queue. [HRESULT = 0x8007053c - ERROR_BAD_INHERITANCE_ACL]

Thanks , i'll give it a try and let you know about progress

 

[Maxstar]

You're welcome. May I ask how you have removed all the "security permissions"?

 

[pantera950]

You're welcome. May I ask how you have removed all the "security permissions"?

So i tested update and guess it worked like a charm, Thank you once again.
I removed all security permissions with PS script. It gatherED all folder permissions then check for SIDs like S-1-5-21-1618963446 and if its true, it removed it. Of course did that with a snapshot.