[SOLVED] Windows Server 2012 R2 w/ ESU - 0x800F0922

Lottiebear · Jun 4, 2024

We've been stopped from running the updates on this server since ESU came out for it. Now we're able to run them and we're hitting the 0x800F09022 error.

They get to about 86% installed and fail saying they're unable to apply the updates and rolling them back.
Tried SFC & DISM commands with no luck, restarting update components and clearing temp folders everywhere and still nothing.

SFC finishes with errors found, not able to fix.

PeterJ · Jun 4, 2024

Hello and welcome,

Please enlarge the second screenshot from the file cbs.log. It's to small to read properly.
It looks like there is a hash error but the attached cbs.log does not include that.

Lottiebear · Jun 6, 2024

Hi Peter,
I ran the commands again as I couldn't find it to get the updated screenshot but it doesn't appear to be showing now.
I've attached the latest CBS log unless I'm missing it.

Lottiebear · Jun 6, 2024

Ah, it's from one of the windows updates attempting to run:

2024-06-06 13:30:36, Info CBS FinalCommitPackagesState: Started persisting state of packages
2024-06-06 13:30:36, Info CBS SQM: Reporting package change for package: Package_for_KB5036627~31bf3856ad364e35~amd64~~6.3.1.3160, current: Absent, pending: Default, start: Absent, applicable: Installed, target: Installed, limit: Installed, hotpatch status: DisabledBecauseNoHotpatchPackagesInitiated, status: 0x0, failure source: Execute, reboot required: False, client id: WindowsUpdateAgent, initiated offline: False, execution sequence: 1895, first merged sequence: 1895 reboot reason: REBOOT_NOT_REQUIRED RM App session: -1 RM App name: N/A FileName in use: N/A
2024-06-06 13:30:39, Info CBS SQM: Upload requested for report: PackageChangeBegin_Package_for_KB5036627~31bf3856ad364e35~amd64~~6.3.1.3160, session id: 142859, sample type: Standard
2024-06-06 13:30:39, Info CBS SQM: Ignoring upload request because the sample type is not enabled: Standard
2024-06-06 13:30:39, Info CBS SQM: Reporting package change completion for package: Package_for_KB5036627~31bf3856ad364e35~amd64~~6.3.1.3160, current: Staged, original: Absent, target: Installed, status: 0x800f0922, failure source: Execute, failure details: "(null)", client id: WindowsUpdateAgent, initiated offline: False, execution sequence: 1895, first merged sequence: 1895, pending decision: InteractiveInstallFailed, primitive execution context: Interactive
2024-06-06 13:30:39, Info CBS SQM: execute time performance datapoint is invalid. [HRESULT = 0x80070490 - ERROR_NOT_FOUND]
2024-06-06 13:30:39, Info CBS SQM: Failed to initialize Win SAT assessment. [HRESULT = 0x80040154 - Unknown Error]
2024-06-06 13:30:39, Info CBS SQM: average disk throughput datapoint is invalid [HRESULT = 0x80040154 - Unknown Error]
2024-06-06 13:30:39, Info CBS SQM: Upload requested for report: PackageChangeEnd_Package_for_KB5036627~31bf3856ad364e35~amd64~~6.3.1.3160, session id: 142862, sample type: Standard
2024-06-06 13:30:39, Info CBS SQM: Ignoring upload request because the sample type is not enabled: Standard
2024-06-06 13:30:39, Info CBS FinalCommitPackagesState: Completed persisting state of packages
2024-06-06 13:30:39, Info CBS Enabling LKG boot option
2024-06-06 13:30:43, Info CBS Exec: Processing complete. Session: 31111178_3341542843, Package: Package_for_KB5036627~31bf3856ad364e35~amd64~~6.3.1.3160 [HRESULT = 0x800f0922 - CBS_E_INSTALLERS_FAILED]

PeterJ · Jun 6, 2024

Please attach the file cbs.log which includes the above information.

Lottiebear · Jun 9, 2024

I've run it all again, the update that had the error, sfc, dism. Everything should be in here.

PeterJ · Jun 9, 2024

Please follow these instructions and report the result:

Download this intermediate CA published by Microsoft.

Install the downloaded certificate as Local Computer under Intermediate Certificate Authorities\Certificates. Use the following command to install the certificate correctly:

certutil -addstore CA 'Microsoft Azure TLS Issuing CA 01 - xsign.crt'

Install security updates. If it fails, reboot the machine and install security updates again.

Source: No Updates for 2012 R2 Servers activated with ESU activated through Azure Arc - Microsoft Q&A

Lottiebear · Jun 9, 2024

I applied the cert, gave it a reboot, the update failed after that, attempted to run sfc again however I'm now stuck here with even more errors.

I have attempted the reboot multiple times.

PeterJ · Jun 9, 2024

1. Click the start button and type cmd in the search box.
2. Right-click on cmd that comes up in the search results and select Run as administrator. Answer Yes to the UAC prompt if it appears.
3. Copy/Paste the following into the command-prompt window and hit enter.
reg query HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /s > "%USERPROFILE%\desktop\WU.txt"

4. Attach the file WU.txt which should be on your desktop now.

Lottiebear · Jun 10, 2024

Sorry went to bed last night.
Here it is.

PeterJ · Jun 12, 2024

Warning: This script was written specifically for this user, for use on that particular machine. Do not run this script on another machine.

Download the Farbar Recovery Scan Tool and save it to your Desktop:
64-bit: Downloading Farbar Recovery Scan Tool
Note: Your antivirus program may report FRST incorrectly as an infection. If so, disable the real-time protection when downloading and running FRST.
Download the attachment fixlist.txt and save it to your desktop.
Right-click on FRST64.exe and select "Run as administrator".
Press the Fix button.
The tool will now process fixlist.txt.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
Attach the logfile Fixlog.txt to your next reply.

Lottiebear · Jun 16, 2024

Sorry it took so long. What what is running on the server I can't reboot the server very often.

PeterJ · Jun 16, 2024

No problem. Just take your time.
Any improvement after this fix ?

Lottiebear · Jun 17, 2024

Small updates appear to be working now. Edge, Defender, Security Intelligence ones all appear to work. But anything main stream is still failing.
2024-06 Service Stack Update for Windows Server 2012 R2 (KB5039340) failed with error code: 80240054
Update for Windows (KB3068708) failed with error code: 80070BC9

sfc still appears to be stuck in thinking there is a system repair pending which requires a reboot - Nevermind on this bit. Fixed that by deleting the pending.xml file.

PeterJ · Jun 17, 2024

Restart the machine.
Try to install KB3068708 only and report the result.
If it fails attach a fresh copy of the file cbs.log to your next reply.

Lottiebear · Jun 17, 2024

That seemed to work!
KB3068708 successfully installed.
KB5037021 - Service Stack Update 2024-04 successfully installed.

Sadly I can't attempt a bigger one, the .NET Frameworks or Cumulative Updates.

But I like to think this means it'll work. Thank you so much.

PeterJ · Jun 17, 2024

Great.
If you need further assistance tell us which updates are failing and attach a fresh copy of the file cbs.log to your next reply.

Lottiebear · Jun 30, 2024

Hi Peter,

I finally have the last update for you.
It works fine. It's showing as fully updated and no errors are persisting.
Thank you so much for the help and the patience.

PeterJ · Jun 30, 2024

Great. I will mark this thread as solved.

Follow the instructions below to cleanup the tools and logfiles used in this thread.
Rename the file FRST64.exe to uninstall.exe and run it. This will remove all files and folders created by FRST and the tool itself.
Reboot the machine to complete.
You may remove all other tools and log files.

Take care.

[SOLVED] Windows Server 2012 R2 w/ ESU - 0x800F0922

Member

Attachments

Moderator, Windows Update Expert, Security Analyst

Member

Attachments

Member

Moderator, Windows Update Expert, Security Analyst

Member

Attachments

Moderator, Windows Update Expert, Security Analyst

Member

Attachments

Moderator, Windows Update Expert, Security Analyst

Member

Attachments

Moderator, Windows Update Expert, Security Analyst

Attachments

Member

Attachments

Moderator, Windows Update Expert, Security Analyst

Member

Moderator, Windows Update Expert, Security Analyst

Member

Moderator, Windows Update Expert, Security Analyst

Member

Moderator, Windows Update Expert, Security Analyst