[SOLVED] Cannot install Windows Updates (0x80070002), Server Manager cannot get event data

[Maxstar]

1. Open a elevated command prompt and run the following command (to be sure that the COMPONENTS hive is loaded).

reg load HKLM\COMPONENTS C:\WINDOWS\SYSTEM32\CONFIG\COMPONENTS

2. Open FRST64.exe as administrator and perform a registry search for:

KB5039217

3. Attach SearchReg.txt in your next reply.

 

[trnx]

But the server doesnt start, so how could I run the FRST?

 

[Maxstar]

Are you able to perform a restart or get access to the CMD console.

 

[trnx]

Yes, I can access the CMD in WinPE mode.

 

[Maxstar]

Are you able to restore the system to the latest state?

Note: I am going offline for now, but I will be available again tomorrow to provide further help.

 

[trnx]

I didnt do a checkpoints.... I have only yesterdays backup (which should be enough, but you know..).
But thanks god DISM with /revertpendingactions helped and the server starts.

I attached CBS.

 

[Maxstar]

Hi,

Great, please run the steps in #post 41.

 

[trnx]

Done! CBS should be same, I didn't anything.

 

[Maxstar]

Step 1. Start the

Farbar Recovery Scan Tool again.

Warning: This script was written specifically for this system. Do not run this script on another system.

• Download the attachment fixlist.txt and save it to your desktop.
• Right-click on FRST64.exe and select "Run as administrator".
• Press the Fix button.
• If for some reason the tool needs a restart, please make sure you let the system restart normally.
• When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
• Post the logfile Fixlog.txt as attachment in your next reply.

Step 2. Afterwards attempt to update again. If it fails attach a new copy of the CBS logs.

 

[trnx]

Hi, thank you very much!
The update was successful, it seems its ok.

I still have error in Server Manager (Manageability): "Online - Cannot get event data"
I think it appeared when the issue with Windows Updates started, but I am not sure.

I really appreciate your time and your skills, its impressive!

 

[Maxstar]

Hi,

Glad to hear the update(s) installed successfully, the issue with Server Manager could be related to the EventLog service or Wecsvc, so please run the following command to check both services.

WMIC SERVICE GET caption, name, startmode, state > "%userprofile%\desktop\services.txt"

 

[trnx]

The EventLog service was running, the Wecsvc was not. I started it, but it didnt helped.
But then I noticed that Server Manager shows there is Hyper-V role installed which is ridiculous and nonsense because its a VM and there is no reason to have a Hyper-V. But the Hyper-V console wasnt there, so it must be some weird state.
Fortunately I was able to remove the role, rebooted and Server Manager is clear.

Thank you very very much again!

Are there any other steps needed?

 

[Maxstar]

Hmm, that's strange with the Hyper-V role, but glad to hear the issue with the Server Manager is fixed as well. Did you reboot the server first after starting the Wecsvc service, or just after removing the Hyper-V role? I Think the reboot did the trick in here after starting the Wecsvc service.

If there are no further issues, we can mark this topic as solved..

 

[trnx]

No, I have just started the Wecsvc service and tried refresh the Server Manager.
After restart, the service is not running again, but the startup option is Manual, so it should be ok.

I think its ok and without any issues. I hope the next CU in April will be ok.

Thank you very much again.

 

[Maxstar]

You're welcome. Glad I could help to resolve this issue, and when the upcoming LCU is causing issues on this server please attach the latest CBS logs.

For now I will mark this thread as solved..