[SOLVED] Server 2016 Cumulative Updates Rolling Back

[Maxstar]

Hi,

Thanks for the additional info, please try to remove KB5013952 again with the following command.

wusa /uninstall /KB:5013952

If it fails, perform the steps in post #31 again and post and attach the new SearchReg.txt to your next reply.

 

[jaycee5585]

The command failed. New searchreg.txt below.

 

[Maxstar]

Step 1. Start the

Farbar Recovery Scan Tool again.

Warning: This script was written specifically for this system. Do not run this script on another system.

• Download the attachment fixlist.txt and save it to your desktop.
• Right-click on FRST.exe and select "Run as administrator".
• Press the Fix button.
• If for some reason the tool needs a restart, please make sure you let the system restart normally.
• When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
• Post the logfile Fixlog.txt as attachment in your next reply.

Step 2. Open a elevated command prompt and run the following commands once at a time.

lodctr.exe /R
winmgmt.exe /RESYNCPERF
Dism /Online /Cleanup-Image /RestoreHealth

Please let me know the result with a screenshot or a copy/paste after running this three commands.


Step 3. Reboot the server and try Windows Update again. *

* If it fails I think we should remove all the failed updates first.

 

[jaycee5585]

STEP 1
Fixlog.txt is attached.

STEP 2


STEP 3
Server has been rebooted, however - it is too late in the day for me to attempt updating this server now. I will try the updates on Monday.

 

[jaycee5585]

I just attempted to update, and it failed.

 

[Maxstar]

Hi,

Please post the following logs.

%systemdrive%\$Windows.~BT\Sources\Rollback\setupact.log
%systemdrive%\$Windows.~BT\Sources\Rollback\setuperr.log
%systemdrive%\Windows\Logs\CBS\cbs.log

If there is an memory dump in the following folder as well - please zip it and upload it to WeTransfer and post the downloadlink.

%systemdrive%\$Windows.~BT\Sources\Rollback\setupmem.dmp

 

[jaycee5585]

The folder C:\$Windows.~BT does not exist on this system.


Attached is the current CBS.log .

 

[Maxstar]

The folder C:\$Windows.~BT does not exist on this system.

That's odd, can you please run the following tool from Microsoft.

Download and run SetupDiag from Microsoft

• Download
  
  SetupDiag to your desktop.
• Right-click on SetupDiag.exe and select Run as administrator.
• When completed the following files are created: "Logs.zip, SetupDiag.exe.config and SetupDiagResults.log"
• Attach SetupDiagResults.log and Logs.zip to your next reply.

 

[jaycee5585]

I ran the tool. It only took about 2 seconds to run. When finished, it did not generate a zip file. The log file generated was empty (0 bytes).

 

[Maxstar]

Hmm, strange. I suppose that the update this time also resulted in a rollback?

 

[jaycee5585]

I did find files with the same names in C:\Windows\Panther\UnattendGC which were updated today. setuperr.log was empty. setupact.log is attached.

 

[jaycee5585]

Yes. It did roll back.

 

[Maxstar]

Thank you very much! This is quite interesting, I'll need to figure out some things.

 

[jaycee5585]

Step 3. Reboot the server and try Windows Update again. *

* If it fails I think we should remove all the failed updates first.

Do you still think this is a valid plan?

 

[Maxstar]

Maybe, but first I'm going to consult one of the experts here.

 

[Maxstar]

Do you still think this is a valid plan?

Yes, let's start with KB5013952 again.

1. Open a elevated command prompt and run the following command

reg load HKLM\COMPONENTS C:\WINDOWS\SYSTEM32\CONFIG\COMPONENTS

2. Open FRST64.exe as administrator and perform a registry search for:

KB5013952

3. Attach SearchReg.txt in your next reply.

 

[jaycee5585]

Done.

 

[Maxstar]

Step 1. Start the

Farbar Recovery Scan Tool again.

Warning: This script was written specifically for this system. Do not run this script on another system.

• Download the attachment fixlist.txt and save it to your desktop.
• Right-click on FRST.exe and select "Run as administrator".
• Press the Fix button.
• If for some reason the tool needs a restart, please make sure you let the system restart normally.
• When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
• Post the logfile Fixlog.txt as attachment in your next reply.

Step 2. Try to uninstall KB5012596 with the following command:

wusa /uninstall /KB:5012596

When you get the message: The update KB..... is not installed on this computer, then perform step 3.


Step 3. FRST REG Search.
1. Open a elevated command prompt and run the following command (to be sure that the COMPONENTS hive is loaded).

reg load HKLM\COMPONENTS C:\WINDOWS\SYSTEM32\CONFIG\COMPONENTS

2. Open FRST64.exe as administrator and perform a registry search for:

KB5012596

3. Attach SearchReg.txt in your next reply.

 

[jaycee5585]

As requested. All commands completed.

 

[Maxstar]

Hi,

Start the

Farbar Recovery Scan Tool again.

Warning: This script was written specifically for this system. Do not run this script on another system.

• Download the attachment fixlist.txt and save it to your desktop.
• Right-click on FRST.exe and select "Run as administrator".
• Press the Fix button.
• If for some reason the tool needs a restart, please make sure you let the system restart normally.
• When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
• Post the logfile Fixlog.txt as attachment in your next reply.