[SOLVED] Server 2019 WindowsUpdate fails with 0x800703f1 on two servers [Server 1]

Knoskoloz · Sep 12, 2024

Good day,
I already appreciate the great help the forum provides.
Currently I'm troubleshooting WindowsUpdates on two Windows 2019 servers.
I hope it is ok to post two machines in one thread? If not please let me know.

The problem is Windows Updates fail with the error code 0x800703f1

SFC /scannow completes on both machines with no errors.

On Server1 I get an error while running "Dism /Online /Cleanup-Image /RestoreHealth"

Version: 10.0.17763.1697

Abbildversion: 10.0.17763.2803

[===========================97.4%======================== ]
Fehler: 0x800f0954

DISM-Fehler: Es wurde kein Vorgang ausgeführt.
Weitere Informationen finden Sie in der Protokolldatei.

Die DISM-Protokolldatei befindet sich unter "C:\Windows\Logs\DISM\dism.log".

On Server2 "Dism /Online /Cleanup-Image /RestoreHealth" completes without errors.
The WindowsUpdates still fail with 0x800703f1.

Many thanks in advance

Maxstar · Sep 13, 2024

Hi and welcome to Sysnative,

1. I've copied the files for server 2 to a new thread: Server 2019 WindowsUpdate fails with 0x800703f1 on two servers [Server 2]
2. Both servers are pretty outdated, so here's the first fix for Server 1.

Step 1. Download

SFCFix and save it to your desktop.

Warning: This fix was written specifically for this system. Do not run this fix on another system.

Save any work you have open, and close all programs.
Download the attachment SFCFix.zip and save it to your desktop.
Drag the SFCFix.zip file over the SFCFix.exe executable and release it.

SFCFix will launch, let it complete.
Once done, a file will appear on your desktop, called SFCFix.txt.
Post the logfile (SFCFix.txt) as attachment in your next reply.

Step 2. Run the following DISM command and post the result. If it fails attach a new copy of the CBS log.

Code:

DISM /online /cleanup-image /RestoreHealth

Knoskoloz · Sep 14, 2024

Hello,
many thanks for the response.
Dism completes without errors.
C:\Windows\system32>DISM /online /cleanup-image /RestoreHealth

Tool zur Imageverwaltung für die Bereitstellung
Version: 10.0.17763.1697

Abbildversion: 10.0.17763.2803

[==========================100.0%==========================] Der Wiederherstellungsvorgang wurde erfolgreich abgeschlossen.
Der Vorgang wurde erfolgreich beendet.

I attached the SFCFix.txt

Hope you have a nice weekend.

Maxstar · Sep 15, 2024

Hi,

Please attempt to update again and if it fails attach the latest CBS logs.

Have a nice weekend too!

Knoskoloz · Sep 15, 2024

Hello,

sadly it still fails.
I attached the CBS log.
Again many thanks in advance.

Maxstar · Sep 15, 2024

Hi,

Upload the SCHEMA.DAT file

Navigate to C:\Windows\System32\SMI\Store\Machine and copy the SCHEMA.DAT file to your desktop.
Right-click on this file on your desktop and select Send To > Compressed (zipped) folder. This will create a file named SCHEMA.ZIP on your desktop.
Attach this ZIP-file to your next reply.

Knoskoloz · Sep 15, 2024

Hello,

I attached the Schema.dat file

Thanks again

Maxstar · Sep 15, 2024

Hi,

Replace the SCHEMA.DAT file
Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

Download the attached Schema.zip file and save it to your desktop, right-click on it and select Extract all.
Navigate to C:\Windows\System32\SMI\Store\Machine and rename the SCHEMA.DAT file to SCHEMA.old
Copy the SCHEMA.DAT file on your desktop into the above directory.

Afterwards reboot the server and attempt to update again. if it fails attach a new copy of the CBS logs.

Knoskoloz · Sep 15, 2024

Hello,
theres some kind of progress.
Now I get error 0xd0000022 while updating.
I attached the cbs log.
Thanks again

Maxstar · Sep 15, 2024

Rich (BB code):

2024-09-15 13:21:17, Error                 CSI    000000cd@2024/9/15:11:21:17.413 (F) onecore\base\wcp\componentstore\com\store.cpp(5260): Error NTSTATUS_FROM_WIN32(1009) originated in function Windows::COM::CComponentStore::MountSMISchemaHive expression: MountSMISchemaHive
[gle=0x80004005]

Please upload a new copy of the SCHEMA.dat file.

Upload the SCHEMA.DAT file

Navigate to C:\Windows\System32\SMI\Store\Machine and copy the SCHEMA.DAT file to your desktop.
Right-click on this file on your desktop and select Send To > Compressed (zipped) folder. This will create a file named SCHEMA.ZIP on your desktop.
Attach this ZIP-file to your next reply.

Knoskoloz · Sep 15, 2024

Hi,
I attached the Schema file.
Thanks again

Maxstar · Sep 15, 2024

Rich (BB code):

2024-09-15 14:12:22, Info                  CBS      Key Handle for: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing, has Access: 0x20019
2024-09-15 14:12:22, Info                  CBS      Key Security: O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:PAI(A;;KA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;CIIO;GA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;KR;;;SY)(A;CIIO;GR;;;SY)(A;;KR;;;BA)(A;CIIO;GR;;;BA)(A;;KR;;;BU)(A;CIIO;GR;;;BU)(A;;KR;;;AC)(A;CIIO;GR;;;AC)(A;;KR;;;S-1-15-3-1024-1065365936-1281604716-3511738428-1654721687-432734479-3232135806-4053264122-3456934681)(A;CIIO;GR;;;S-1-15-3-1024-1065365936-1281604716-3511738428-1654721687-432734479-3232135806-4053264122-3456934681)
2024-09-15 14:12:22, Info                  CBS    Failed to delete registry value: FODRetryID [HRESULT = 0x80070005 - E_ACCESSDENIED]
2024-09-15 14:12:22, Info                  CBS    Failed to delete store object value named: FODRetryID [HRESULT = 0x80070005 - E_ACCESSDENIED]

Export CBS (Component Based Servicing) hive

Click on the Start button and type regedit
When you see regedit on the list, right-click on it and select Run as administrator.
When regedit opens, using the left pane, navigate to the following registry key and select it by clicking on it once.
Code:
```
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing
```
Once selected, click File > Export....
Change the Save as type: to Registry Hive Files (*.*).
Name this file ComponentBasedServicing (with no file extension) and save it to your Desktop.
Right-click on the saved file and choose Send > Compressed (zipped) Folder.
Attach the .ZIP file to your next post.
If the file is too large to upload here, upload the file to www.wetransfer.com and post the link in your next reply.

Knoskoloz · Sep 15, 2024

Thanks for all the hard work.
I attached the file.

Maxstar · Sep 15, 2024

You're welcome. But please provide the reg export as HIVE file instead of *.reg!

Knoskoloz · Sep 15, 2024

Oh sorry fat fingers,
now the correct file.

Maxstar · Sep 15, 2024

Please do the following:

Download

SFCFix and save it to your desktop.

Warning: This fix was written specifically for this system. Do not run this fix on another system.

Save any work you have open, and close all programs.
Download the attachment SFCFixScript.txt and save it to your desktop.
Drag the SFCFixScript.txt file over the SFCFix.exe executable and release it.

SFCFix will launch, let it complete.
Once done, a file will appear on your desktop, called SFCFix.txt.
Post the logfile (SFCFix.txt) as attachment in your next reply.

Knoskoloz · Sep 15, 2024

I attached the file.
Windows Upade still shows 0xd0000022
Thanks again

Maxstar · Sep 15, 2024

1. Which security software is installed on this server?
2. Open an elevated prompt and run the following command and copy paste the result

Code:

reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing"

Knoskoloz · Sep 15, 2024

I really appreciate your hard work if this happens to be a lost cause please tell me. I'll bite the bullet and reinstall migrate.

1. Currently only Windows Defender

2.
C:\Windows\system32>reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing
ProcessorArchitecture REG_DWORD 0x9
EnableLog REG_DWORD 0x1
BuildBranch REG_SZ BuildBranchMacro
FeatureCategory REG_SZ e104dd76-2895-41c4-9eb5-c483a61e9427
RepairCategory REG_SZ 631f8288-2457-41f4-bb81-63df924ba94c
NextExecutionSequence REG_DWORD 0x5d
LastMappingPackageCache REG_DWORD 0x0
LastModified_UTC REG_SZ 2024/09/15/12:10:21
EnableDpxLog REG_DWORD 0x1
ExecuteState REG_DWORD 0xffffffff
LCUReoffer REG_DWORD 0x0
LastResetBase_UTC REG_SZ 2019/09/07/00:32:23
HangDetect REG_DWORD 0x0
LastProgress REG_BINARY FFFFFFFFFB7F000000000000000000000100000000000000
RollbackFailed REG_DWORD 0x0
CanceledCurrentFailedTransaction REG_DWORD 0x0
SessionIdHigh REG_DWORD 0x1db0776
SessionIdLow REG_DWORD 0x6c0f3ba3
DoqTime REG_DWORD 0x0
DoqCount REG_DWORD 0x1
PoqTime REG_DWORD 0x6
PoqCount REG_DWORD 0x1
RptTime REG_DWORD 0x0
RptCount REG_DWORD 0x1
CountryCode REG_SZ DE
Corrupt REG_DWORD 0x0
AutoRepairNeeded REG_DWORD 0x1
LastCorruptionDetected REG_QWORD 0x1db04f5723a7afa
LastAutoRepairAttempted REG_DWORD 0x3fc9

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ApplicabilityEvaluationCache
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\CapabilityIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\DriverOperations
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Features on Demand
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Interface
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Notifications
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\SessionsPending
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\UpdateDetect
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Version

Maxstar · Sep 15, 2024

1. For know I don't think a reinstall is necessary.
2. Was there other security software rather than Windows Defender before?
3. Please provide also the latest CBS logs.

[SOLVED] Server 2019 WindowsUpdate fails with 0x800703f1 on two servers [Server 1]

Active member

Attachments

Windows Update Moderator, Security Analyst

Attachments

Active member

Attachments

Windows Update Moderator, Security Analyst

Active member

Attachments

Windows Update Moderator, Security Analyst

Active member

Attachments

Windows Update Moderator, Security Analyst

Attachments

Active member

Attachments

Windows Update Moderator, Security Analyst

Active member

Attachments

Windows Update Moderator, Security Analyst

Active member

Attachments

Windows Update Moderator, Security Analyst

Active member

Attachments

Windows Update Moderator, Security Analyst

Attachments

Active member

Attachments

Windows Update Moderator, Security Analyst

Active member

Windows Update Moderator, Security Analyst