2008 R2 updates failing with error 80070057

RedAtRed · Aug 11, 2018

Windows Updates are failing with error 80070057.

SFC /scannow found no issues.

I have renamed SoftwareDistribution and catroot2 with no change.

I ran SURT and sfcfix. Logs are attached.View attachment SFCFix.txt

Link to download for cbs.zip: CBS.zip - Google Drive

Sysnative Windows Update · Aug 11, 2018

Hello and welcome! Please start with the following so I can gather more info:

Step#1 - Capture Process Monitor Trace
1. Download and run Process Monitor. Leave this running while you perform the next steps.
2. Try installing the update just like you have in the past.
3. Stop Process Monitor as soon as it fails. You can simply do this by clicking the magnifying glass on the toolbar as shown below.

11908d1430506241-windows-updates-fail-repeatedly-stop-jpg

4. Select the File menu...Save... and save the file to your desktop. This is likely the default location. The name (unless changed) will be LogFile.PML. This is fine.
5. Zip up and attach the LogFile.PML file as well as your CBS.log

RedAtRed · Aug 11, 2018

Unfortunately, the updates only fail on restart. Around 99% they fail and then revert and reboot.

Sysnative Windows Update · Aug 11, 2018

That was helpful!

1. Click your start button and type cmd in the search box.
2. Right-click on cmd that comes up in the search results and select Run as administrator. Answer Yes to the UAC prompt if it appears.
3. Copy/Paste the following into the command-prompt window and hit enter.
reg query HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Application\Microsoft-Windows-EventCollector /s >1.txt && notepad 1.txt

4. Notepad will open showing some info. Can you copy and paste this into your next reply?

RedAtRed · Aug 11, 2018

Results:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Application\Microsoft-Windows-EventCollector
ProviderGuid REG_SZ {b977cf02-76f6-df84-cc1a-6a4b232322b6}
EventMessageFile REG_EXPAND_SZ %SystemRoot%\system32\wecsvc.dll

Sysnative Windows Update · Aug 11, 2018

Looks good. Let's dig deeper.

Step#1 - Export Publishers Key

Click on the Start button type regedit
When you see regedit on the list, right-click on it and select Run as administrator
When regedit opens, using the left pane, navigate to the following registry key and select it by clicking on it once.

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\WINEVT\Publishers
Once selected, click File > Export....
Change the Save as type: to Registry Hive Files (*.*)
Name this file PUB (with no file extension) and save it to your Desktop.

Once done please upload this file via a file sharing service of your choice.

RedAtRed · Aug 11, 2018

Registry Export: WinEvTPublishers.reg - Google Drive

Sysnative Windows Update · Aug 11, 2018

I need the hive format export, and not the reg format.

RedAtRed · Aug 11, 2018

Sorry about that - Here you Go: WinEvtPublishers-Hive - Google Drive

Sysnative Windows Update · Aug 11, 2018

Your Server will automatically reboot after this process!

Step#1 - FRST Fix
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
1. Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the 32-bit Version so please ensure you download that one.
2. Download attached file and save it to the Desktop.
Note. It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work (in this case...the desktop).
3. Run FRST by Right-Clicking on the file and choosing Run as administrator.
4. Press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
5. When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post the contents of it in your reply.
6. After the reboot, try updates and if any fail, attach CBS.log.

RedAtRed · Aug 11, 2018

I actually needed the 64 bit version of frst and these are the results:
Fix result of Farbar Recovery Scan Tool (x64) Version: 02.08.2018
Ran by administrator (11-08-2018 19:47:45) Run:1
Running from C:\Users\administrator\Desktop
Loaded Profiles: administrator (Available Profiles: <removed by user>)
Boot Mode: Normal
==============================================

fixlist content:
*****************
DeleteValue:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network|Config
Reboot:

*****************

"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network\\Config" => removed successfully

The system needed a reboot.

==== End of Fixlog 19:47:45 ====

After reboot, I tried to install one windows update and it required reboot and failed/reverted/rebooted while configuring updates.
The CBS.log is here: CBS.log.zip - Google Drive

Sysnative Windows Update · Aug 12, 2018

Step#1 - Export EventLog Key

Click on the Start button type regedit
When you see regedit on the list, right-click on it and select Run as administrator
When regedit opens, using the left pane, navigate to the following registry key and select it by clicking on it once.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog
Once selected, click File > Export....
Change the Save as type: to Registry Hive Files (*.*)
Name this file EVTLOG (with no file extension) and save it to your Desktop.

Once done please upload this file via a file sharing service of your choice.

RedAtRed · Aug 12, 2018

As requested: EVTLOG - Google Drive

Sysnative Windows Update · Aug 13, 2018

It appears that your link requires login.

RedAtRed · Aug 13, 2018

softwaremaniac said:
It appears that your link requires login.

I've activated the link again.

Sysnative Windows Update · Aug 14, 2018

I'm still researching the issue. Please give me a bit more time.

Sysnative Windows Update · Aug 27, 2018

Hello, sorry for the delay! My workload has finally decreased a bit. Do you still require assistance with this issue?

Search

Search

2008 R2 updates failing with error 80070057

RedAtRed

Member

Sysnative Windows Update

Inactive

RedAtRed

Member

Sysnative Windows Update

Inactive

RedAtRed

Member

Sysnative Windows Update

Inactive

RedAtRed

Member

Sysnative Windows Update

Inactive

RedAtRed

Member

Sysnative Windows Update

Inactive

Attachments

RedAtRed

Member

Sysnative Windows Update

Inactive

RedAtRed

Member

Sysnative Windows Update

Inactive

RedAtRed

Member

Sysnative Windows Update

Inactive

Sysnative Windows Update

Inactive