[SOLVED] Windows Updates rollingback after reboot when reaches 99% - Windows Server 2008 R2

B

brunobba

Member
Joined
Jan 14, 2019
Posts
12
Location
Brazil
Hi,
I have a virtual server with Microsoft Windows Server 2008 R2 installed.
Some updates are not getting installed. Some are installed but some aren´t . The ones that failed, fail after the reboot with the message: Failure Configuring Windows Updates - Reverting changes.
After a while it reboots automatically and server comes back normal on login screen.
I have done all the steps you provided here on other issues, Microsoft recommendations, ran Microsoft Fixit, the Windows Update reset script from Technet blog, tried installing them manually and using DISM command, checkdisk no bad blocks, checksur no errors found, SFC /SCANNOW no errors found, SFCFix no errors found etc.
I have the CBS logs of that time.
It is pointing to Microsoft-Windows-LSA.
Could you please help me on that?
 
Hello and welcome

Due to the precise nature of your corruption, you will receive help from a user named Bruce1270. He's one of our senior trainees here who's in his final phase of his studies and needs to gain some real world experience in specific areas of Windows Update. This means that he'll be assisting you, but that I will first need to double check and approve his fixes before he posts them to you. If anything this is a good thing for you because it means that you've got at least two of us watching over your thread, but it will unfortunately add a slight delay between each reply. I hope that you understand and can accept the need for us to train up new members in this way in order to carry on doing what we do here, however, if for any reason you object to this setup, I will happily take on your thread myself.

Thank you very much for your understanding. We'll be with you very shortly.
 
softwaremaniac said:
Hello and welcome

Due to the precise nature of your corruption, you will receive help from a user named Bruce1270. He's one of our senior trainees here who's in his final phase of his studies and needs to gain some real world experience in specific areas of Windows Update. This means that he'll be assisting you, but that I will first need to double check and approve his fixes before he posts them to you. If anything this is a good thing for you because it means that you've got at least two of us watching over your thread, but it will unfortunately add a slight delay between each reply. I hope that you understand and can accept the need for us to train up new members in this way in order to carry on doing what we do here, however, if for any reason you object to this setup, I will happily take on your thread myself.

Thank you very much for your understanding. We'll be with you very shortly.
Click to expand...


Hi softwaremaniac,

I completely understand and agree with that. Any help from you guys will be very appreciated. I hope I can learn with this case too. I have been working with MS 11 years now and this is the first time that all that I tried could´t solve the issue.

Thank you so much.
 
My name is Bruce1270 and I shall be assisting you.

I need a couple of logs to analyse. Please send me the following logs in your next post.

The CBS folder from C:\Windows\Logs\CBS
Setupapi.dev.log from c:\windows\inf

Please zip the files up and attach to next post.If the file is too big to upload to your next post please upload via a service such as SendSpace and just provide the link.
 
bruce1270 said:
My name is Bruce1270 and I shall be assisting you.

I need a couple of logs to analyse. Please send me the following logs in your next post.

The CBS folder from C:\Windows\Logs\CBS
Setupapi.dev.log from c:\windows\inf

Please zip the files up and attach to next post.If the file is too big to upload to your next post please upload via a service such as SendSpace and just provide the link.
Click to expand...

Follow the link bellow. There are 2 zip files inside that. 1 for CBS logs folder and 1 for Setupapi.dev.log.
Let me know in case you find something useful. Thank you sir.

https://www.sendspace.com/file/yj6ing
 
Please do the following

Step#1 - Export Publishers Key


  1. Click on the Start button type regedit
  2. When you see regedit on the list, right-click on it and select Run as administrator
  3. When regedit opens, using the left pane, navigate to the following registry key and select it by clicking on it once.

    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\WINEVT\Publishers
  4. Once selected, click File > Export....
  5. Change the Save as type: to Registry Hive Files (*.*)
  6. Name this file PUB (with no file extension) and save it to your Desktop.
  7. Please upload to sendspace and just provide the link here.
 
bruce1270 said:
Please do the following

Step#1 - Export Publishers Key


  1. Click on the Start button type regedit
  2. When you see regedit on the list, right-click on it and select Run as administrator
  3. When regedit opens, using the left pane, navigate to the following registry key and select it by clicking on it once.

    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\WINEVT\Publishers
  4. Once selected, click File > Export....
  5. Change the Save as type: to Registry Hive Files (*.*)
  6. Name this file PUB (with no file extension) and save it to your Desktop.
  7. Please upload to sendspace and just provide the link here.
Click to expand...

Hello sir,

Here it is:

Download PUB.zip from Sendspace.com - send big files the easy way
 
Hi There

Please do the following.

SFCFix Script

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

Download SFCFix.exe (by niemiro) and save this to your Desktop.


  1. Please download the file SFCFix.zip to your desktop. Ensure that this file is named SFCFix.zip - do not rename it.
  2. Save any open documents and close all open windows.
  3. On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
  4. Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
  5. SFCFix will now process the script.
  6. Upon completion, a file should be created on your Desktop: SFCFix.txt.
  7. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please - put tags around the log to break up the text.
 

Attachments

bruce1270 said:
Hi There

Please do the following.

SFCFix Script

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

Download SFCFix.exe (by niemiro) and save this to your Desktop.


  1. Please download the file SFCFix.zip to your desktop. Ensure that this file is named SFCFix.zip - do not rename it.
  2. Save any open documents and close all open windows.
  3. On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
  4. Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
  5. SFCFix will now process the script.
  6. Upon completion, a file should be created on your Desktop: SFCFix.txt.
  7. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please - put tags around the log to break up the text.
Click to expand...

Hi,

I ran the script as you mentioned.

Here is the result of the SFCFix.txt:


SFCFix version 3.0.1.0 by niemiro.
Start time: 2019-01-19 07:05:31.331
Microsoft Windows Server 2008 R2 Service Pack 1 - amd64
Using .zip script file at C:\Users\barruda\Desktop\SFCfix.zip [0]




RegistryScript::
Successfully took ownership and permissions for registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{199fe037-2b82-40a9-82ac-e1d46c792b99}.

Successfully deleted registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{199fe037-2b82-40a9-82ac-e1d46c792b99}.

Failed to open registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{199fe037-2b82-40a9-82ac-e1d46c792b99} with error code ERROR_FILE_NOT_FOUND.
RegistryScript:: directive failed to complete successfully.




Failed to process all directives successfully.
SFCFix version 3.0.1.0 by niemiro has completed.
Currently storing 1 datablocks.
Finish time: 2019-01-19 07:05:32.976
Script hash: NmuHR4UAZ3qf/XL9iliJgTH+NixToMn/mML+54uHm/o=
----------------------EOF-----------------------

 
Ok

Please try Windows Updates again and if it fails post the CBS log.
 
Ok

Please do the following

Step#1 - Export EventLog Key



  1. Click on the Start button type regedit
  2. When you see regedit on the list, right-click on it and select Run as administrator
  3. When regedit opens, using the left pane, navigate to the following registry key and select it by clicking on it once.

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog
  4. Once selected, click File > Export....
  5. Change the Save as type: to Registry Hive Files (*.*)
  6. Name this file EVT (with no file extension) and save it to your Desktop.
  7. Please upload to sendspace and just provide the link here.
 
Hi there

I need another registry key. Please do the following.

Step#1 - Export WINEVT Key



  1. Click on the Start button type regedit
  2. When you see regedit on the list, right-click on it and select Run as administrator
  3. When regedit opens, using the left pane, navigate to the following registry key and select it by clicking on it once.

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT
  4. Once selected, click File > Export....
  5. Change the Save as type: to Registry Hive Files (*.*)
  6. Name this file WINEVT (with no file extension) and save it to your Desktop.
  7. Please upload to sendspace and just provide the link here.
 
bruce1270 said:
Hi there

I need another registry key. Please do the following.

Step#1 - Export WINEVT Key



  1. Click on the Start button type regedit
  2. When you see regedit on the list, right-click on it and select Run as administrator
  3. When regedit opens, using the left pane, navigate to the following registry key and select it by clicking on it once.

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT

  4. Once selected, click File > Export....
  5. Change the Save as type: to Registry Hive Files (*.*)
  6. Name this file WINEVT (with no file extension) and save it to your Desktop.
  7. Please upload to sendspace and just provide the link here.
Click to expand...

Here it is:

View attachment WINEVT.zip
 
Hi

Please do the following

SFCFix Script

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

Download SFCFix.exe (by niemiro) and save this to your Desktop.


  1. Please download the file SFCFix.zip to your desktop. Ensure that this file is named SFCFix.zip - do not rename it.
  2. Save any open documents and close all open windows.
  3. On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
  4. Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
  5. SFCFix will now process the script.
  6. Upon completion, a file should be created on your Desktop: SFCFix.txt.
  7. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please - put tags around the log to break up the text.
 

Attachments

Hi There

Haven't heard from you for a while. Are you still needing asistance?

Thanks
 
bruce1270 said:
Hi There

Haven't heard from you for a while. Are you still needing asistance?

Thanks
Click to expand...

Hello sir,

I ran sfcfix and zip file as you asked but the problem persists.

Sorry not being so quickly to respond but I can reboot the server only on weekends.

I tried cleaning the WINEVT key entirely but same issue. I also tried importing the Eventlog key from another working server no success.

So hard to resolve.
 
Hi Brunobba

Thank you for the update. Until we are finished, I would however ask you only to carry out steps instructed by me and nothing else as this may make the fault finding process more difficult. Thank you for your co-operation.

Please attach the latest CBS.log to your next post.

Thanks
 
bruce1270 said:
Hi Brunobba

Thank you for the update. Until we are finished, I would however ask you only to carry out steps instructed by me and nothing else as this may make the fault finding process more difficult. Thank you for your co-operation.

Please attach the latest CBS.log to your next post.

Thanks
Click to expand...

Don't worry sir, I rolled back all the changes. I performed the change always one by one and rolling them back one by one too before the second and third attempt.
I had already tried to remove the keys related do LSA before your zip file.

Here is the CBS log folder compressed:
Download CBS.zip from Sendspace.com - send big files the easy way

Thank you!
 
You must log in or register to reply here.

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top