[SOLVED] RDS Windows Server 2022 / CU Updates will not install / Error 0x8007007e

[Tyzzara]

I am an administrator for multiple sites / servers.

Currently I have two RDS Windows Server 2022 deployments. I am unable to get either to run CU updates. (two different clients / sites). Both servers are VM deployments running under HYPER-V management. Bare metal hosts are the same running Windows Server 2022.

Both systems return the same error 0x8007007e.

As per instructions prior to posting I have done the following today:

- Step #1 - Run SFC Scan​

- Step #2 - Run SURT/DISM​

- Step #3 - Run ComponentsScanner​

- Step #4 - Export CBS Folder​

Here is a link for attached files:

https://wetransfer.com/downloads/5559613078ad54659c5c412fc6a90bf320240720185103/b65082156c697cd766945da1bb40f60520240720185103/5494bd





I am stuck at a brick wall here.

Please advise as able.

 

[Maxstar]

Hi and welcome to Sysnative,

Which security software is installed on this server, Malwarebytes?

 

[Tyzzara]

Yes. Nebula Agent.

 

[Maxstar]

2024-07-20 11:53:45, Info                  CSI    000006e8   0: RM locking process: [l:15 ml:16]'MBEndpointAgent', app type: 3, app name: 'Malwarebytes Endpoint Agent', svc name: 'MBEndpointAgent', restartable: true
2024-07-20 11:53:45, Error                 CSI    000006e9@2024/7/20:17:53:45.359 (F) onecore\base\wcp\telemetry\default\wcptracelogging.cpp(56): Error STATUS_ACCESS_DENIED originated in function OpenProcessSafe expression: NtOpenProcess( &Handle, (0x0400), &ObjAttributes, &ClientId)
[gle=0x80004005]

Are you able to disable Malwarebytes and their services temporarily?

https://support.threatdown.com/hc/e...eal-Time-Protection-to-avoid-server-conflicts
https://support.threatdown.com/hc/en-us/articles/4413799100435-Uninstall-endpoints-in-Nebula

 

[Tyzzara]

I had previously tried this. However, I will do so again this evening and report back here. I will remove the agent completely if necessary and give it a shot.

 

[Maxstar]

Great, let me know the result.

 

[Tyzzara]

Great, let me know the result.

I had to remove the client. Exclusions alone would not do it.

This worked. Thank you so much for your assistance.

Note: It only happens on Server 2022 RDS machines and none of the other servers. I have no idea why.

Thanks again!

 

[Maxstar]

Hi,

You're welcome. Thanks for letting us know removing the client was the solution in this case, so I will mark this thread as solved...

 

[Maxstar]

P.s.

I've started a thread at Malwarebytes Forums for more information about this issue: Windows Server 2022 Update Issue Error STATUS_ACCESS_DENIED?
If the issue still persists with the next cumulative update I would suggest to contact Malwarebytes support using the following link: https://support.threatdown.com/hc/en-us/p/nebula_support

 

[Tyzzara]

Any updates on this specific issue?

 

[Maxstar]

Hi,

No I haven't heard anything yet, so if you're still having issues I would contact Malwarebytes Business Support / Chat...