Cumulative update keeps failing to install / rolling back - SPP Installer access denied

[Maxstar]

2022-10-14 22:09:14, Info                  CSI    000015de ==Error Summary Start==
2022-10-14 22:09:14, Error                 CSI    000015df (F) Installer: LodCtr Installer    Binary Name: PerfCounterInstaller.dll    ErrorCode: 80070005    Phase: 31    Mode: Delta    Component: NONE[gle=0x80004005]
2022-10-14 22:09:14, Info                  CSI    000015e0 ==Error Summary End==

Now we've got another error, please run the following commands in an elevated commandprompt and let me know the result.

lodctr /r
winmgmt.exe /resyncperf

 

[TripleM]

Definitely feels like progress here. First gives the following (double checked and this is in an elevated command prompt):

C:\Windows\system32>lodctr /r

Error: Unable to rebuild performance counter setting from system backup store, error code is 5

No output for the second.

 

[Maxstar]

Please try the command again, but with a capital /R - LODCTR /R Error Code 2

lodctr /R

 

[TripleM]

Tried both lowercase and uppercase, and also in the SysWOW64 directory - all the same error code 5. Hmm.

 

[Maxstar]

Hmm, could you please check if the following files exist?

C:\Windows\System32\PerfStringBackup.ini
C:\Windows\SysWOW64\PerfStringBackup.ini

if so, please try the following commands in an elevated command prompt.

lodctr /R:PerfStringBackup.ini
cd C:\Windows\SysWOW64
lodctr /R:PerfStringBackup.ini

 

[TripleM]

They're there, but same error code 5. It's like it's saying I don't have permission to perform these tasks, but I'm in an elevated command prompted and logged in as the only account which is an administrator..

 

[Maxstar]

This file may be corrupted or inaccessible: C:\Windows\system32\perfc009.dat

Please run the following command in an elevated command prompt.

icacls perfc009.dat

Edit:
Could you please attach the following file if present?

C:\$Windows.~BT\Sources\Panther\Setupact.log

 

[TripleM]

That permissions on that perfc009.dat file do sound like the problem, given the first error in the CBS.log from before was the ability to write to it.

icacls gives:

C:\Windows\System32>icacls perfc009.dat
perfc009.dat NT AUTHORITY\SYSTEM:(I)(F)
             BUILTIN\Administrators:(I)(F)
             BUILTIN\Users:(I)(RX)
             APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES:(I)(RX)
             APPLICATION PACKAGE AUTHORITY\ALL RESTRICTED APPLICATION PACKAGES:(I)(RX)

That second folder doesn't exist ( I found that thread too :) )

 

[TripleM]

As a small experiment, I created a restore point, and backed up the perfc009.dat and perfh009.dat files, before renaming them and using lodctr to restore from PerfStringBackup.ini.

This time it worked and the perfc009.dat and perfh009.dat files recreated themselves.

After that, installing the .NET component also worked.

I then rebooted to install updates. The .NET update installed successfully:

2022-10 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 11 for x64 (KB5018546)

but the Windows 11 cumulative update failed and rolled back again:

2022-10 Cumulative Update for Windows 11 for x64-based Systems (KB5018418)
Failed to install on 15/10/2022 - 0x800f0922

with the same error in the CBS log about SPP Installer getting access denied.

 

[TripleM]

I decided to bite the bullet and do an in-place upgrade via the Windows ISO. So I'm updated to the latest version that way; hopefully the next update that comes out will work properly.

 

[Maxstar]

Hi,

Glad to hear you were able to fix the .NET framework issue, I had a similar fix prepared to replace these files with the RTM files from the Windows 11 ISO. Hopefully the in-place upgrade has solved the rollback issue in relation to the monthly LCU's as well.