[Server2019 Essentials x64] "We are having difficulties downloading updates"

Rich (BB code): 
2023/05/03 16:21:56.6428344 9036  10300 DownloadManager *FAILED* [80080005] Connect to the DO service
2023/05/03 16:21:56.6428365 9036  10300 DownloadManager Exit Code: 0x80246008, Extended Code: 0x80080005
2023/05/03 16:21:56.6428384 9036  10300 DownloadManager Failed creating DO job with hr 80246008
2023/05/03 16:21:56.6432608 9036  10300 DownloadManager *FAILED* [80246008] Method failed [CAgentDownloadManager::DownloadUpdate:8538]
2023/05/03 16:21:56.6432650 9036  10300 DownloadManager *FAILED* [80246008] Got error starting update 0 in call 81. Notifying call.
2023/05/03 16:21:56.6438248 9036  10300 DownloadManager *FAILED* [80246008] Error occurred while downloading update E7670803-5F9C-42EB-95A3-34084559234E.200; notifying dependent calls.

0x80080005 (Server execution failed).

Just to note, this is a part of the error to identify the cause of.
 
[For Future Reference]
The Warning "this app has been blocked by your system administrator" was blocked by default local policy (not the domain one)

And the workaround was this:
___________________________________________

Solution 5: Make Changes to the Group Policy​

With the Group Policy, you can make changes you won't easily find anywhere else on your computer.

One of these changes can be made on the User Accounts Control (UAC) to allow apps to escape the administrator check.

To make the changes that will get rid of the error, follow the steps below:

Step 1: Press WIN + R on your keyboard to open the Run dialogue.

Step 2: In the run dialogue, type in "gpedit.msc" and hit ENTER on your keyboard.
ss-13-1


Step 3: Under Computer Configuration, expand Windows Settings, Security Settings, and Local Policies.

Step 4: Click on Security Options. Don’t attempt to expand it, just click on it.
ss-14-1


Step 5: Navigate to the bottom and double-click "User Account Control: Run all administrators in Admin Approval Mode".
ss-15


Step 6: Select Disable, click Apply, and then Ok.
ss-16
 
Rich (BB code): 
4:52:42.8495621 PM    svchost.exe    9344    FileSystemControl    C:\Windows\System32\dosvc.dll    INVALID DEVICE REQUEST    Control: FSCTL_GET_EXTERNAL_BACKING

In the previous post I noticed 0x80080005 (Server execution failed). So far as I can see this server is not connected to an WSUS server..
But the ProcMon trace also shows: FSCTL_GET_EXTERNAL_BACKING

How is Windows Update configured on this server?
 
Normal way, I think.
No other server on the network, nor WSUS installed.
No settings on group polocy
No setting on local policy

1683389311039.png
 
Interesting, could you please perform a file-search with SFCFix for dosvc.dll.

Download
56f31e53c97da-SFCFix.PNG
SFCFix and save it to your desktop.
  • Download the attachment SFCFixScript.txt and save it to your desktop.
  • Drag the SFCFixScript.txt file over the SFCFix.exe executable and release it.
62151e1bebac4-SFCFix-Txt-Eng.gif

  • SFCFix will launch, let it complete.
  • Once done, a file will appear on your desktop, called SFCFix.txt.
  • Post the logfile (SFCFix.txt) as attachment in your next reply.
 

Attachments

Could you also check if the file: C:\Windows\System32\dosvc.dll exist - if so provide the hash of this file.
Code: 
certutil -hashfile C:\Windows\System32\dosvc.dll SHA256
 
Maxstar said:
Please run the System File Checker and let me know the result.
Code: 
SFC /Scannow
Click to expand...
Result

Code: 
C:\Users\Administrador>sfc /scannow

Beginning system scan.  This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection did not find any integrity violations.
 
Maxstar said:
Could you also check if the file: C:\Windows\System32\dosvc.dll exist - if so provide the hash of this file.
Code: 
certutil -hashfile C:\Windows\System32\dosvc.dll SHA256
Click to expand...
It does exists!

Code: 
SHA256 hash of C:\Windows\System32\dosvc.dll:
f56010cfbf0d36b2d7a025d2e37d769fbf802a1a54e34226b7bc79c6557f2228
CertUtil: -hashfile command completed successfully.
 
Hi,

Great, please run the following commands again and post the result.
Code: 
sc start DoSvC
Wait a few seconds and then run the following commands.
Code: 
sc query DoSvc
sc qc DoSvc
 
Code: 
C:\Users\Administrador>sc start DoSvC

SERVICE_NAME: DoSvC
        TYPE               : 30  WIN32
        STATE              : 2  START_PENDING
                                (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
        WIN32_EXIT_CODE    : 0  (0x0)
        SERVICE_EXIT_CODE  : 0  (0x0)
        CHECKPOINT         : 0x0
        WAIT_HINT          : 0x7d0
        PID                : 252
        FLAGS              :

C:\Users\Administrador>sc query DoSvc

SERVICE_NAME: DoSvc
        TYPE               : 30  WIN32
        STATE              : 1  STOPPED
        WIN32_EXIT_CODE    : 1066  (0x42a)
        SERVICE_EXIT_CODE  : 2147942405  (0x80070005)
        CHECKPOINT         : 0x0
        WAIT_HINT          : 0x0

C:\Users\Administrador>sc qc DoSvc
[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: DoSvc
        TYPE               : 20  WIN32_SHARE_PROCESS
        START_TYPE         : 3   DEMAND_START
        ERROR_CONTROL      : 1   NORMAL
        BINARY_PATH_NAME   : C:\Windows\System32\svchost.exe -k NetworkService -p
        LOAD_ORDER_GROUP   :
        TAG                : 0
        DISPLAY_NAME       : DoSvc
        DEPENDENCIES       : rpcss
        SERVICE_START_NAME : NT Authority\NetworkService

C:\Users\Administrador>
 
Hmm, still the same issue. Could you please try to attempt to update with Process Monitor running. Perhaps it gives us more info what happens.

Please run the following commands as well and post the result.
Code: 
certutil -hashfile C:\Windows\WinSxS\amd64_microsoft-windows-deliveryoptimization_31bf3856ad364e35_10.0.17763.1697_none_17cf181298e5b907\dosvc.dll SHA256
fsutil hardlink list C:\Windows\System32\dosvc.dll

Edit:

Please do the following as well.

Download the
577bf0efb8088-FRST.png
Farbar Recovery Scan Tool and save it to your Desktop:

Download the 64 bit version: - Farbar Recovery Scan Tool Link
  • Open the startmenu and type the command cmd.
  • After you find the Command Prompt, right click on it and select Run as Administrator.
  • Copy and paste the following into the Command Prompt and press enter.
Code: 
reg load HKLM\DRIVERS C:\WINDOWS\SYSTEM32\CONFIG\DRIVERS
Right-click on the file FRST64.exe and choose Run as administrator.
  • Copy and paste the following (code) into the Search box and click the Search Registry button.
Code: 
dosvc
  • When the scan is complete, a message will display that SearchReg.txt is saved in the same folder FRST was started from.
  • Post the logfile SearchReg.txt as attachment in your next reply.
 
Last edited:
Hi again, and thanks! Here goes the results:

PROCMON:
Code: 
https://transfer.sapo.pt/downloads/c99ea9b7-ec84-4f68-8795-2ee29417d906/sapotransfer-5fb444a8c2460Q0/

CERTUTIL

Code: 
C:\Users\Administrador>certutil -hashfile C:\Windows\WinSxS\amd64_microsoft-windows-deliveryoptimization_31bf3856ad364e35_10.0.17763.1697_none_17cf181298e5b907\dosvc.dll SHA256
SHA256 hash of C:\Windows\WinSxS\amd64_microsoft-windows-deliveryoptimization_31bf3856ad364e35_10.0.17763.1697_none_17cf181298e5b907\dosvc.dll:
f56010cfbf0d36b2d7a025d2e37d769fbf802a1a54e34226b7bc79c6557f2228
CertUtil: -hashfile command completed successfully.

C:\Users\Administrador>fsutil hardlink list C:\Windows\System32\dosvc.dll
\Windows\System32\dosvc.dll
\Windows\WinSxS\amd64_microsoft-windows-deliveryoptimization_31bf3856ad364e35_10.0.17763.1697_none_17cf181298e5b907\dosvc.dll

C:\Users\Administrador>

FARBAR in attach
 

Attachments

Thanks, could you please post an export of the following registry key. Attach Svchost.txt to your next post.

Code: 
reg export "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost" "%userprofile%\desktop\Svchost.txt"
 
Export registry key as hive file.
  • Open the Start menu of Windows and type CMD.
  • When you see Command Prompt on the list, select the option Run as administrator.
  • Copy and paste the following commands one at a time into the command prompt and press enter after each.
Code: 
reg save "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost" "%userprofile%\Desktop\Svchost.hiv"
  • Once done, a file will appear on your desktop, called Svchost.hiv.
  • ZIP this file and attach it to your next reply.
 
You must log in or register to reply here.

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top