Server 2016 won't update

[x BlueRobot]

Could you please open a Powershell window and then enter the following cmdlet:

Install-WindowsFeature -Name Windows-Defender-GUI

It may be worthwhile doing this while you have a Process Monitor trace running. If it fails, then please provide the latest CBS log(s) along with the Process Monitor trace.

 

[Gudzy]

This is the error message. Please find the procmon extract and the latest cbs.log file attached.

 

[x BlueRobot]

You shouldn't get an error message like that, I would at least expect it to mention that it couldn't install the feature. Could you please open a command prompt and then enter the following command:

reg query HKLM\SOFTWARE\Microsoft\ServerManager\ServicingStorage\ServerComponentCache\Windows-Defender-Features

If it is successfully found, then could you please export the key as a registry hive file?

 

[Gudzy]

That reg key is found, please find attached the registry hive file

 

[x BlueRobot]

It seems that the feature isn't installed for some reason? Could you please open a Powershell command prompt and then enter the following cmdlet:

Install-WindowsFeature -Name Windows-Defender

 

[Gudzy]

Defender installed but even after a reboot, Defender GUI still doesn't install from powershell, with the same error message as before.

 

[x BlueRobot]

Could you please open command prompt again and then enter the following command:

reg query HKLM\SOFTWARE\Microsoft\ServerManager\ServicingStorage\ServerComponentCache\Windows-Defender-Features /v InstallState

Please post the output in your next post.

 

[Gudzy]

Output is:
InstallState REG_DWORD 0x1

 

[x BlueRobot]

Okay, at the install state is now consistent with what it should be. I've had another comparison between my CBS hive and yours and noticed that you didn't have the following packages (only localised versions):

Windows-Defender-Group-Policy-Package~31bf3856ad364e35~amd64~~10.0.14393.0
Windows-Defender-Server-AppLayer-Group-amcore-Package~31bf3856ad364e35~amd64~~10.0.14393.0
Windows-Defender-Server-AppLayer-Group-onecore-Package~31bf3856ad364e35~amd64~~10.0.14393.0
Windows-Defender-Server-AppLayer-Group-Package~31bf3856ad364e35~amd64~~10.0.14393.0
Windows-Defender-Server-AppLayer-Group-WOW64-Package~31bf3856ad364e35~amd64~~10.0.14393.0
Windows-Defender-Server-Gui-Package~31bf3856ad364e35~amd64~~10.0.14393.0
Windows-Defender-Server-Gui-WOW64-Package~31bf3856ad364e35~amd64~~10.0.14393.0

Microsoft-Antimalware-Scan-Interface-Core-Package~31bf3856ad364e35~amd64~~10.0.14393.0
Microsoft-Antimalware-Scan-Interface-Core-WOW64-Package~31bf3856ad364e35~amd64~~10.0.14393.0

Could you please provide your SOFTWARE hive as you did before and I'll add them back?

 

[x BlueRobot]

I've sent you a PM with your modified SOFTWARE hive, could you please create a backup of your current version and then replace it with the version sent via PM?

 

[Gudzy]

I've replaced the software hive with the new version, defender looks to not be installed again and no option to install the GUI.

 

[x BlueRobot]

It shouldn't have uninstalled it? The only option I can think of would be to attempt to install the missing feature using the Windows Server 2016 .ISO as a source.

Install-WindowsFeature -Name Windows-Defender-GUI -Source D:\Sources\install.wim

You download the .ISO from the Microsoft Evaluation Center. Remember to change the source path to where the .ISO has been mounted to.

 

[Gudzy]

The iso was mounted as drive letter D but it wouldn't install unfortunately

 

[x BlueRobot]

Have you tried doing a repair install from the Windows Server 2016 .ISO?