[SOLVED] KB5044277 Server 2019 update failing with Error 0x8000ffff

[thadeus_d3]

KB5044277 is failing with 0x8000ffff on Server 2019. I've run dism commands and sfc /scannow. I've also tried installing using the standalone installer, but it continues to fail.

 

[thadeus_d3]

Is anyone able to assist? Please let me know if any additional logs are needed.

 

[x BlueRobot]

Apologies, I'll have a look at this now for you.

 

[x BlueRobot]

2024-10-14 11:36:29, Info                  CBS    Failed to enumerate store versions on component: amd64_microsoft-windows-msinfo32-exe.resources_31bf3856ad364e35_10.0.17763.4840_en-us_a415b6a3f3712c62 [HRESULT = 0x8000ffff - E_UNEXPECTED]
2024-10-14 11:36:29, Info                  CBS    Failed to enumerate related component versions on component: amd64_microsoft-windows-msinfo32-exe.resources_31bf3856ad364e35_10.0.17763.4840_en-us_a415b6a3f3712c62 [HRESULT = 0x8000ffff - E_UNEXPECTED]
2024-10-14 11:36:29, Info                  CBS    Failed to load current component state [HRESULT = 0x8000ffff - E_UNEXPECTED]
2024-10-14 11:36:29, Info                  CBS    Failed to find or add the component family [HRESULT = 0x8000ffff - E_UNEXPECTED]
2024-10-14 11:36:29, Info                  CBS    ComponentAnalyzerEvaluateSelfUpdate call failed. [HRESULT = 0x8000ffff - E_UNEXPECTED]

SFCFixScript.txt

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

1. Download SFCFix.exe (by niemiro) and save this to your Desktop.
2. Download the attached file, SFCFixScript.txt, and save this to your Desktop. Ensure that this file is named SFCFixScript.txt - do not rename it.
3. Save any open documents and close all open windows.
4. On your Desktop, you should see two files: SFCFix.exe and SFCFixScript.txt.
5. Drag the file SFCFixScript.txt onto the file SFCFix.exe and release it.
6. SFCFix will now process the script.
7. Upon completion, a log should be created on your Desktop: SFCFix.txt.
8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this into your next post for me to analyse please - put [CODE][/CODE] tags around the log to break up the text.

 

[thadeus_d3]

Thank you!

SFCFix version 3.0.2.1 by niemiro.
Start time: 2024-10-30 09:37:20.391
Microsoft Windows Server 10 Build 17763 - amd64
Using .txt script file at C:\Users\admin.davis\Desktop\SFCFixScript.txt [0]




RegistryScript::
Successfully took ownership and permissions for registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\amd64_microsoft-windows-msinfo32-exe.resources_31bf3856ad364e35_0.0.0.0_en-us_d6b34d0a220411a1.
Successfully took ownership and permissions for registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\amd64_microsoft-windows-msinfo32-exe.resources_31bf3856ad364e35_0.0.0.0_en-us_d6b34d0a220411a1.

WARNING: Failed to create backup for registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\amd64_microsoft-windows-msinfo32-exe.resources_31bf3856ad364e35_0.0.0.0_en-us_d6b34d0a220411a1.

Successfully imported registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\amd64_microsoft-windows-msinfo32-exe.resources_31bf3856ad364e35_0.0.0.0_en-us_d6b34d0a220411a1.
WARNING: Failed to create backup for registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\amd64_microsoft-windows-msinfo32-exe.resources_31bf3856ad364e35_0.0.0.0_en-us_d6b34d0a220411a1.

Successfully imported registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\amd64_microsoft-windows-msinfo32-exe.resources_31bf3856ad364e35_0.0.0.0_en-us_d6b34d0a220411a1.

Successfully restored ownership and permissions for registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\amd64_microsoft-windows-msinfo32-exe.resources_31bf3856ad364e35_0.0.0.0_en-us_d6b34d0a220411a1.
Successfully restored ownership and permissions for registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\amd64_microsoft-windows-msinfo32-exe.resources_31bf3856ad364e35_0.0.0.0_en-us_d6b34d0a220411a1.
RegistryScript:: directive completed successfully.




Successfully processed all directives.



Failed to generate a complete zip file. Upload aborted.


SFCFix version 3.0.2.1 by niemiro has completed.
Currently storing 1 datablocks.
Finish time: 2024-10-30 09:46:08.752
Script hash: fstX7uiA20Q22S8WvMzdOReA2qSWCJ/bfT71sExf/G4=
----------------------EOF-----------------------

 

[thadeus_d3]

I rebooted and tried updating again. KB5044277 failed with 0x800f0922

 

[x BlueRobot]

Thanks, could you please provide the latest CBS logs from %systemroot%\Logs\CBS again?

 

[thadeus_d3]

Attached - Thanks!

 

[x BlueRobot]

2024-10-30 10:48:26, Info                  CSI    00000797 Failed unloading hive file: \??\C:\Users\admin.davis\NTUSER.DAT, key: \Registry\User\S-1-5-21-735740536-3183303111-3703006315-1232, with flags: 0, NTSTATUS: -1073741535

2024-10-30 10:48:26, Error                 CSI    00000798@2024/10/30:14:48:26.220 (F) internal\onecorebase\inc\auto_hive.h(358): Error STATUS_CANNOT_DELETE originated in function Windows::Rtl::AutoHive::Unload expression: UnloadStatus
[gle=0x80004005]
2024-10-30 10:48:26, Info                  CBS    Could not get active session for current session file logging [HRESULT = 0x80004003 - E_POINTER]
2024-10-30 10:48:26, Info                  CBS    Could not get file name for current session file logging [HRESULT = 0x80004003 - E_POINTER]
2024-10-30 10:48:26, Info                  CSI    00000799 Failed unloading hive file: \??\C:\Users\admin.winter\NTUSER.DAT, key: \Registry\User\S-1-5-21-735740536-3183303111-3703006315-1229, with flags: 0, NTSTATUS: -1073741535

2024-10-30 10:48:26, Error                 CSI    0000079a@2024/10/30:14:48:26.235 (F) internal\onecorebase\inc\auto_hive.h(358): Error STATUS_CANNOT_DELETE originated in function Windows::Rtl::AutoHive::Unload expression: UnloadStatus
[gle=0x80004005]
2024-10-30 10:48:26, Info                  CBS    Could not get active session for current session file logging [HRESULT = 0x80004003 - E_POINTER]
2024-10-30 10:48:26, Info                  CBS    Could not get file name for current session file logging [HRESULT = 0x80004003 - E_POINTER]
2024-10-30 10:48:26, Info                  CSI    0000079b Failed unloading hive file: \??\C:\Users\admin.michelakis\NTUSER.DAT, key: \Registry\User\S-1-5-21-735740536-3183303111-3703006315-1104, with flags: 0, NTSTATUS: -1073741535

2024-10-30 10:48:26, Error                 CSI    0000079c@2024/10/30:14:48:26.235 (F) internal\onecorebase\inc\auto_hive.h(358): Error STATUS_CANNOT_DELETE originated in function Windows::Rtl::AutoHive::Unload expression: UnloadStatus
[gle=0x80004005]
2024-10-30 10:48:26, Info                  CBS    Could not get active session for current session file logging [HRESULT = 0x80004003 - E_POINTER]
2024-10-30 10:48:26, Info                  CBS    Could not get file name for current session file logging [HRESULT = 0x80004003 - E_POINTER]
2024-10-30 10:48:26, Info                  CSI    0000079d Failed unloading hive file: \??\C:\Users\admin.calyx\NTUSER.DAT, key: \Registry\User\S-1-5-21-735740536-3183303111-3703006315-1103, with flags: 0, NTSTATUS: -1073741535

2024-10-30 10:48:26, Error                 CSI    0000079e@2024/10/30:14:48:26.235 (F) internal\onecorebase\inc\auto_hive.h(358): Error STATUS_CANNOT_DELETE originated in function Windows::Rtl::AutoHive::Unload expression: UnloadStatus
[gle=0x80004005]
2024-10-30 10:48:26, Info                  CBS    Could not get active session for current session file logging [HRESULT = 0x80004003 - E_POINTER]
2024-10-30 10:48:26, Info                  CBS    Could not get file name for current session file logging [HRESULT = 0x80004003 - E_POINTER]
2024-10-30 10:48:26, Info                  CSI    0000079f Failed unloading hive file: \??\C:\Users\Administrator\NTUSER.DAT, key: \Registry\User\S-1-5-21-2005437514-1508369983-783341228-500, with flags: 0, NTSTATUS: -1073741535

2024-10-30 10:48:26, Error                 CSI    000007a0@2024/10/30:14:48:26.235 (F) internal\onecorebase\inc\auto_hive.h(358): Error STATUS_CANNOT_DELETE originated in function Windows::Rtl::AutoHive::Unload expression: UnloadStatus
[gle=0x80004005]
2024-10-30 10:48:26, Info                  CBS    Could not get active session for current session file logging [HRESULT = 0x80004003 - E_POINTER]
2024-10-30 10:48:26, Info                  CBS    Could not get file name for current session file logging [HRESULT = 0x80004003 - E_POINTER]

Thanks, could you please open command prompt and then enter the following:

reg query "HKEY_USERS\S-1-5-21-735740536-3183303111-3703006315-500" << %userprofile%\Desktop\users.txt
reg query "HKEY_USERS\S-1-5-21-735740536-3183303111-3703006315-1232" << %userprofile%\Desktop\users.txt
reg query "HKEY_USERS\S-1-5-21-735740536-3183303111-3703006315-1229" << %userprofile%\Desktop\users.txt
reg query "HKEY_USERS\S-1-5-21-735740536-3183303111-3703006315-1104" << %userprofile%\Desktop\users.txt
reg query "HKEY_USERS\S-1-5-21-735740536-3183303111-3703006315-1103" << %userprofile%\Desktop\users.txt
reg query "HKEY_USERS\S-1-5-21-2005437514-1508369983-783341228-500" << %userprofile%\Desktop\users.txt

 

[thadeus_d3]

Each command returned the following.

<< was unexpected at this time.

 

[x BlueRobot]

Sorry, it should have been ">>" but we can wrap it in a FRST fix script instead to save yourself some tedious typing, despite the name, the fix script just runs a series of registry queries and then saves those to a file named fixlog.txt.

FRST Fix
1. Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the 64-bit Version so please ensure you download that one.
2. Download the attached fixlist.txt and save it to the Desktop.
Note. It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work (in this case...the desktop).
3. Run FRST64 by Right-Clicking on the file and choosing Run as administrator.
4. Press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
5. When finished FRST64 will generate a log on the Desktop (Fixlog.txt). Please post the contents of it in your reply.

 

[thadeus_d3]

Thanks. Here are the results.

 

[thadeus_d3]

I was able to install win updates after rebooting. This can be closed. Thanks for your help.

 

[x BlueRobot]

Thanks for letting me know, glad your issue is resolved now.