Windows update issue and DISM errors

rclarke · Jan 24, 2023

Hi,
I left the server attempting to install the update again yesterday evening. Unfortunately it has failed again.
Attached is the entire CBS folder.

Maxstar · Jan 24, 2023

Hi,

Upload your COMPONENTS hive.

Navigate to C:\Windows\System32\Config and locate the COMPONENTS file.
Please copy this file to your desktop.
Note: If you receive an error that this file is in-use, simply reboot your computer and try again.
Right-click on this file on your desktop and select Send To > Compressed (zipped) folder. This will create a file named COMPONENTS.ZIP on your desktop.
If the file is too large to upload here, upload the file to www.wetransfer.com and post the link in your next reply.

rclarke · Jan 24, 2023

Hi,
Here is the components file attched.

I look forward to the next step

Maxstar · Jan 24, 2023

Hi,

Please run the following DISM command and post the result. If it fails attach a new copy of the CBS log.

Code:

DISM /online /cleanup-image /RestoreHealth

rclarke · Jan 24, 2023

I have run the DISM command which completed successfully.

Should I try the updates again?

Maxstar · Jan 24, 2023

Yes, please attempt to update again and post result (including the error message if it fails). As well as a new copy of the CBS log(s).

rclarke · Jan 24, 2023

Hi,
I attempted the update again and the server seemed to stop responding for quite a while. Once I was able to RDP to it it just says that updates are available.
But have failed to install twice today.

I have zipped the CBS log folder and re-uploaded.

Maxstar · Jan 25, 2023

rclarke said:
I have had the C: drive space increased, so that is no longer a factor.

Hi,

How many free space is available? This beacuse there is still an issue with the system drive and error STATUS_TOO_LATE (The System volume is shutdown). This must also be the reason why the server was not responding?

rclarke · Jan 25, 2023

Hi,
This is the current free space

Maxstar · Jan 25, 2023

This is enough, let's check something else.

Upload your DRIVERS Hive

Navigate to C:\Windows\System32\config and locate the DRIVERS file.
Please copy this file to your desktop.
Note: If you receive an error that this file is in-use, simply reboot your computer and try again.
Right-click on this file on your desktop and select Send To > Compressed (zipped) folder. This will create a file named DRIVERS.ZIP on your desktop.
If the file is too large to upload here, upload the file to www.wetransfer.com and post the link in your next reply.

rclarke · Jan 25, 2023

Hi, here is the file you requested.

Thanks for your patience!

Maxstar · Jan 25, 2023

Open an elevated command prompt and run the following commands and copy and paste the result in your next post.

Code:

reg load HKLM\COMPONENTS C:\WINDOWS\SYSTEM32\CONFIG\COMPONENTS
reg query HKLM\COMPONENTS

rclarke · Jan 25, 2023

Here you go, hope this helps.

Maxstar · Jan 25, 2023

Thanks, please run the ComponentsScanner as well.

Download

ComponentsScanner and save it to your desktop.

Right-click ComponentsScanner.exe and select "Run as administrator", click Yes on the UAC (User Account Control) prompt which appears.
Follow the on-screen instructions.
Once complete, a report will be saved to your desktop called ComponentsScanner.txt.
Post the logfile ComponentsScanner.txt as attachment into your next reply.

rclarke · Jan 25, 2023

Hi, Here is the requested file.
I look forward to the next suggestion.
Thanks

Maxstar · Jan 25, 2023

There are a lot of warnings, and they may related to the (STATUS_TOO_LATE) error. It seems the system is attempting to perform a write operation to the Components hive but the volume was dismounted? It could also be an caching issue, how many RAM is attached to this server?

rclarke · Jan 25, 2023

Hi,
Here is the server spec & current load, just a moment ago.

Maxstar · Jan 25, 2023

Let's take a look at the event logs.

Click the Start button and in the search box, type Command Prompt

When you see Command Prompt on the list, right-click on it and select Run as administrator.
Copy and paste the following commands one at a time into the command prompt and press enter after each.

Code:

wevtutil epl SYSTEM "%userprofile%\Desktop\System.evt"
wevtutil epl APPLICATION "%userprofile%\Desktop\Application.evt"
PowerShell Compress-Archive -Path "%userprofile%\Desktop\*.evt" -DestinationPath "%UserProfile%\Desktop\EventLogs.zip"

These commands will collect the System and Application logs and create EventsLogs.zip on your Desktop.
Attach this file in your next reply.

rclarke · Jan 25, 2023

Hi, I have collected and attached the relevant logs for your review.
Thanks

Maxstar · Jan 25, 2023

Hi,

The System Event log shows some errors before Windows Update Agent is failing. Could you please run the following command in an elevated prompt and post the result.

Code:

reg query HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63B10C5-BB46-4990-A94F-E40B9D520160} /s

You will see a result like this or not?!

Code:

C:\Users\Administrator>reg query HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63B10C5-BB46-4990-A94F-E40B9D520160} /s

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63B10C5-BB46-4990-A94F-E40B9D520160}
    (Default)    REG_SZ    RuntimeBroker
    AppID    REG_SZ    {9CA88EE3-ACB7-47c8-AFC4-AB702511C276}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63B10C5-BB46-4990-A94F-E40B9D520160}\LocalServer32
    (Default)    REG_SZ    C:\Windows\System32\RuntimeBroker.exe

Windows update issue and DISM errors

Well-known member

Attachments

Windows Update Moderator, Security Analyst

Well-known member

Attachments

Windows Update Moderator, Security Analyst

Well-known member

Windows Update Moderator, Security Analyst

Well-known member

Attachments

Windows Update Moderator, Security Analyst

Well-known member

Windows Update Moderator, Security Analyst

Well-known member

Attachments

Windows Update Moderator, Security Analyst

Well-known member

Windows Update Moderator, Security Analyst

Well-known member

Attachments

Windows Update Moderator, Security Analyst

Well-known member

Windows Update Moderator, Security Analyst

Well-known member

Attachments

Windows Update Moderator, Security Analyst