[SOLVED] Windows server 2016 cumulative updates install but rollback after reboot

Maxstar · Jun 25, 2024

Thanks for sending the files in a PM, I'll see a number of issues and this server has been upgraded from Server 2012 (R2) to 2016 some time ago?

For now this is the most important issue, and it's just an orphaned key.

Rich (BB code):

Task: {D9D7C3E7-F174-43B3-9685-DAEB13899501} - \Microsoft\Windows\PI\SecureBootEncodeUEFI -> No File <==== ATTENTION

Code:

reg delete "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\Taskcache\Tasks\{D9D7C3E7-F174-43B3-9685-DAEB13899501}" /f

Let me know if the key is successfully removed or not. If yes please attempt to update again and post the result including new CBS logs.

Lybra77 · Jun 25, 2024

reg delete "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\Taskcache\Tasks\{D9D7C3E7-F174-43B3-9685-DAEB13899501}" /f says acces denied ... is it safe to try changing security settings and try to delete?

Maxstar · Jun 25, 2024

Please use the attached Fixlist with FRST.

Start the

Farbar Recovery Scan Tool again.

Warning: This script was written specifically for this system. Do not run this script on another system.

Download the attachment fixlist.txt and save it to your desktop.
Right-click on FRST.exe and select "Run as administrator".
Press the Fix button.
If for some reason the tool needs a restart, please make sure you let the system restart normally.
When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
Post the logfile Fixlog.txt as attachment in your next reply.

Lybra77 · Jun 25, 2024

no luck after new attempt (rollback), see attached CBS, will send you the frst logs in PM

Maxstar · Jun 25, 2024

Please do the following again and attach the result in the next post.

Code:

reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\Taskcache" /s > "%userprofile%\desktop\tasklist.txt"
dir "%systemroot%\System32\Tasks\Microsoft\Windows\PI" /s >> "%userprofile%\desktop\tasklist.txt"

Lybra77 · Jun 25, 2024

here we go

Maxstar · Jun 25, 2024

Please run the following fix, and when the key is successfully removed attempt to update again.

Start the

Farbar Recovery Scan Tool again.

Warning: This script was written specifically for this system. Do not run this script on another system.

Download the attachment fixlist.txt and save it to your desktop.
Right-click on FRST.exe and select "Run as administrator".
Press the Fix button.
If for some reason the tool needs a restart, please make sure you let the system restart normally.
When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
Post the logfile Fixlog.txt as attachment in your next reply.

Lybra77 · Jun 25, 2024

done, tried to install an older update (end 2022) and it unexpectedly rebooted the vm due to lack of space

... after booting up,i had couple of giga left, winsxs growed to 27 giga.. doing dism component cleanup, will keep you posted

Maxstar · Jun 25, 2024

Which update were you trying to install, the current build is (1607 14393.5127) / May 2022.

Maxstar · Jun 25, 2024

Lybra77 said:
(...) and it unexpectedly rebooted the vm due to lack of space

I would also look at an option to extend the VHDx image to at least 150 GB.

Rich (BB code):

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:99.46 GB) (Free:13.01 GB) (Model: Virtual HD ATA Device) NTFS
Drive d: (DATA) (Fixed) (Total:95 GB) (Free:0.84 GB) (Model: Virtual HD ATA Device) NTFS

Lybra77 · Jun 25, 2024

Maxstar said:
Which update were you trying to install, the current build is (1607 14393.5127) / May 2022.

tried to install kb5021235 December 13, 2022

Lybra77 · Jun 25, 2024

Maxstar said:
I would also look at an option to extend the VHDx image to at least 150 GB.

Rich (BB code):

==================== Drives ================================ Drive c: (OS) (Fixed) (Total:99.46 GB) (Free:13.01 GB) (Model: Virtual HD ATA Device) NTFS Drive d: (DATA) (Fixed) (Total:95 GB) (Free:0.84 GB) (Model: Virtual HD ATA Device) NTFS

I would very happily do it IF ... if I could, I have some checkpoints at the moment ( for rollback in case something happens during this debug phase ) preventing me from expanding the disk, unfortunately

Maxstar · Jun 25, 2024

There are a few options:
1. Copy the VHDx file of the problem server to another location.
2. Load the VHDX file in a 'temp' environment and expand / extend the image to at least 150GB.
3. Try to update the testing-environment to see if it's completes or not.
4. When the update is installed successsfully without rollback or other issues, schedule a maintaince moment to expand the VHDX-image of the production server.

Lybra77 · Jun 25, 2024

that was the plan today BUT, as the machine has the checkpoints, I need to copy ol he chlldren avhdx files to the new location, make a merge of all of them and tgen maybe i'be alble to use it as startup disk ... meaning a lot of giga to copy to copy and work with... but yes, this is the way to have the "more space " test done

Maxstar · Jun 25, 2024

Please take your time and let me know the result....

Lybra77 · Jun 25, 2024

Maxstar said:
Please take your time and let me know the result....

do you think that 21 giga of free space I can try the kb5021235 update?

sounds pretty safe to me...

Maxstar · Jun 25, 2024

Hmmm, that's still a critical amount of free space on a 100 GB image, but you can try it to see what happens this time!

Lybra77 · Jun 28, 2024

ok, so...exported the machine in a lab, imported it

- deleted checkpoints
- expanded os disk to 150 giga
-expanded data disk to 120
- stpped word wide web publishng (and disabled)
- stopped and issabled all sql services

installed update and --> rollback

latest cbs logs attached

I am really out of options at the moment

L.

Maxstar · Jun 28, 2024

Hi,

Please run the following commands again on this clone and attach Tasklist.txt en Tasklist.hiv.

Code:

reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\Taskcache" /s > "%userprofile%\desktop\Tasklist.txt"
dir "%systemroot%\System32\Tasks\Microsoft\Windows\PI" /s >> "%userprofile%\desktop\Tasklist.txt"
reg save "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\Taskcache" "%userprofile%\Desktop\TaskList.hiv"

Lybra77 · Jun 28, 2024

attached the generated file

[SOLVED] Windows server 2016 cumulative updates install but rollback after reboot

Windows Update Moderator, Security Analyst

Active member

Windows Update Moderator, Security Analyst

Attachments

Active member

Attachments

Windows Update Moderator, Security Analyst

Active member

Attachments

Windows Update Moderator, Security Analyst

Attachments

Active member

Windows Update Moderator, Security Analyst

Windows Update Moderator, Security Analyst

Active member

Active member

Windows Update Moderator, Security Analyst

Active member

Windows Update Moderator, Security Analyst

Active member

Windows Update Moderator, Security Analyst

Active member

Attachments

Windows Update Moderator, Security Analyst

Active member

Attachments