Server 2019 updates failing, but only after domain joining. For the life of me I can't see why! (I can't see any obvious GPO settings!)

peteypie

New member
Joined
Jan 14, 2025
Posts
2
Hi team, I've been trying to trouleshoot and look at this for over a week, and it's driving me nuts.

Something seems to be stopping the majority (15 or so) of our 2019 VMs from updating since June time last year. I can't understand what it is.

These are Windows Server 2019, all domain joined, running on Hyper-V.
If I create a new VM, the system patches fine. To me, this seems to rule out something environmental/web filter/some other oddity.
As soon as I domain join, I can't patch it - it throws the same error (0x80070002) when trying to apply updates (cumulative and .Net updates seem to be mostly affected)
If I remove from the domain, it still doesn't patch - same error code.
The updates download and install, the server goes to reboot but fails around 9% updating and rolls back.

I've tried all the regular fixes, and even did a reinstall of Windows (keeping apps and docs, so not a complete wipe).
I can't see anything obvious in the default domain GPO that woudl be causing this. Its really light on what it sets.

I'm hoping someone that knows what they're looking for, can spot something in the CBS logs. I can see something about the usbstor.inf in the CBS log, but not sure if that's relevant. The VMs are on Hyper-V and don't have any USB pass-through or USB devices obviously listed in device manager.

Anyway, any help or pointers that you can see will be very gratefully appreciated.

CBS logs from one of the affected VMs I've been working on is attached.

Thanks again in advance!
 

Attachments

Hi @peteypie,

Welcome to Sysnative Forums!

If you haven't already, please review the posting instructions here, and attach the requested log files. Without log files, our helpers will not be able to assist, and this will slow down fixing your machine.

If logs have been already been provided, our team of volunteers will analyse the provided log files to build a fix for your system. Please be aware that this may take several days from your initial post, due to the high volume of threads that we receive.


- Sysnative Windows Update Team
 

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top