[SOLVED] Server 2016 Cumulative Updates Rolling Back

Hi,

Please post a new copy of the CBS log.
  • Click the Start button and in the search box, type CMD
  • When you see Command Prompt on the list, right-click on it and select Run as administrator.
  • Copy and paste the following command into it, then press enter.
    Code: 
    copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"
  • This command will create cbs.txt on your Desktop. Zip this file and attach the zipped cbs.txt to your next post.

  • Right-click on the Start button and click Windows PowerShell (Admin).
  • Copy and paste the following command into it, press enter afterwards
  • Code: 
    Get-WindowsUpdateLog
  • Wait for the message "WindowsUpdate.log written to C:\Users\<username>\Desktop\WindowsUpdate.log".
  • Attach the logfile WindowsUpdate.log to your next reply.
 
Last edited:
Thanks, can you upload the latest CBPersist log as wel from the following directory.
Code: 
%windir%\logs\cbs
 
The CBS log reports still the the same issue, i'm going to consult an Update Expert here about the following reports in the Windows Update log.

Rich (BB code): 
2022/05/10 05:50:44.9350950 1744  9928  SLS             CoCreateInstance Failed: hr = 0x80040154
2022/05/10 05:50:44.9350988 1744  9928  Agent           Failed to retrieve SLS response data for service 117cab2d-82b1-4b5a-a08c-4d62dbee7782, error = 0x80040154
2022/05/10 05:50:44.9351031 1744  9928  Agent           Caller Service Recovery failed to opt in to service 117cab2d-82b1-4b5a-a08c-4d62dbee7782, hr=0X80040154
2022/05/10 06:00:39.0746617 1744  11380 ComApi          ISusInternal:: DisconnectCall failed, hr=8024000C
2022/05/10 06:08:39.0840782 1744  1368  Misc            Got WSUS Client/Server URL: http://****25.********.coop:XXXX/ClientWebService/client.asmx""
 
Hi,

Upload your COMPONENTS hive.
  • Navigate to C:\Windows\System32\Config and locate the COMPONENTS file.
  • Please copy this file to your desktop.
  • Note: If you receive an error that this file is in-use, simply reboot your computer and try again.
  • Right-click on this file on your desktop and select Send To > Compressed (zipped) folder. This will create a file named COMPONENTS.ZIP on your desktop.
  • If the file is too large to upload here, upload the file to www.wetransfer.com and post the link in your next reply.
 
Update: The new May CU from patch Tuesday is out, but the results are the same when I attempt to update.

I cannot use wetransfer.com, but here is the requested file on Dropbox: COMPONENTS.zip
 
Hi,

It looks like KB5013952 is partially installed, can you try to remove it by following instructions.
  • Open the Start menu of Windows and type the command CMD
  • When you see Command Prompt on the list, right-click on it and select Run as administrator.
  • When command prompt opens, copy and paste the following command into it, then press enter.
Code: 
wusa /uninstall /KB:5013952
  • Let me know if it says it was successful or if there are any errors. Or take a screenshot of the command prompt window and paste it into your next reply.
 
Download the
577bf0efb8088-FRST.png
Farbar Recovery Scan Tool and save it to your Desktop:

Download the 64 bit version: - Farbar Recovery Scan Tool Link

  • Open the startmenu and type the command cmd.
  • After you find the Command Prompt, right click on it and select Run as Administrator.
  • Copy and paste the following into the Command Prompt and press enter.
Code: 
reg load HKLM\COMPONENTS C:\WINDOWS\SYSTEM32\CONFIG\COMPONENTS
Right-click on the file FRST64.exe and choose Run as administrator.
  • Copy and paste the following (code) into the Search box and click the Search Registry button.
Code: 
KB5013952
  • When the scan is complete, a message will display that SearchReg.txt is saved in the same folder FRST was started from.
  • Post the logfile SearchReg.txt as attachment in your next reply.
 
Step 1. Start the
577bf0efb8088-FRST.png
Farbar Recovery Scan Tool again.

Warning: This script was written specifically for this system. Do not run this script on another system.
  • Download the attachment fixlist.txt and save it to your desktop.
  • Right-click on FRST.exe and select "Run as administrator".
  • Press the Fix button.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally.
  • When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
  • Post the logfile Fixlog.txt as attachment in your next reply.


Step 2. Reboot the server, then disable the security software of Trend Micro and try to update the system again.
 

Attachments

Attached is the fix log.

If it is helpful, this issue has been going on for several months. KB5013952 was only released a couple of days ago. If it was partially installed, I suspect that the CU's from other months which have been failing may be in the same state. These are the other KB's in question:
kb5010359
kb5012596
kb5011495

I am currently trying to update the server again using the 'check for updates from Microsoft' option. KB5013952 is downloading again. I will report back with the results.
 

Attachments

If it fails please attach a new copy of the CBS log, hopefully it provide more information about this issue.

Code: 
copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"
 
Hi,

The rollback is apparently caused by a driver error. Please run the following command, and attach Setupapi.dev.txt to your next reply.
Code: 
COPY %windir%\INF\setupapi.dev.log "%userprofile%\Desktop\Setupapi.dev.txt"
 
Hi,

Can you take a screenshot of the Windows Update history, to see if the installation of the mentioned LCU's in post #34 failed with error code 0x800f0922?
 
Here is the screenshot, but I doubt it will be any help. Prior to reaching out for help here, I tried many things to fix this. That included resetting the WU components, and deleting the update cache. So, the Update History does not go back further than a few weeks ago.

Capture.JPG
 
You must log in or register to reply here.

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top