[SOLVED] Unable to patch Windows Server 2022

NzxtEpisode

NzxtEpisode

Member
Joined
Oct 3, 2023
Posts
17
Hi,

We installed this server in March 2023 and were able to install that month security patch called 2023-03 (KB5023705) but we haven't been able to install another security patch automatically since then.
We noticed this in September, so we then tried to install the security patch 2023-08 (KB5029250) via Windows update which failed, we made another attempt with 2023-09 (KB5030216) via Windows update which also failed.
All other smaller patches works, it just the security patches which fails, the download works and then the installation goes to 20%, then skips to 100% and then fails with the below error text:

There were some problems installing updates, but we'll try again later. If you keep seeing this and want to search the web or contact support for information, this may help: (0x800f0905)

Have tried all the usual fixes like Reset-WUComponents –verbose, sfc /scannow, Dism /Online /Cleanup-Image /RestoreHealth etc
I will attach the CBS folder and ComponentsScanner output.

Edition: Windows Server 2022 Datacenter
Version: 21H2
Installed on: 2023-03-16
OS build: 20348.1607
 

Attachments

Hi and welcome to Sysnative,

Note: I have closed your other thread: Unable to patch Windows Server 2022

Some questions:
  • Is this server installed with the evaluation version of Windows Server 2022?
  • In what way has the license been upgraded to Datacenter?
  • ... And what license has been used (OEM, Retail, Microsoft Action Pack subscription)?
 
Hi,

The server was created from a Windows Server 2022 template in VMware that was using a full ISO from Microsoft Volume License Center and where Datacenter was selected during install.
To license the server we use a MAK key for Windows Server 2022.
 
Please run the following commands in an elevated command prompt and post the result. (Note: Please mask the product key if showed by the second command!)
Code: 
DISM /Online /Get-CurrentEdition
WMIC Path SoftwareLicensingService get OA3xOriginalProductKey
 
PS C:\Windows\system32> DISM /Online /Get-CurrentEdition

Deployment Image Servicing and Management tool
Version: 10.0.20348.681

Image Version: 10.0.20348.1607

Current edition is:

Current Edition : ServerDatacenter

The operation completed successfully.
PS C:\Windows\system32> WMIC Path SoftwareLicensingService get OA3xOriginalProductKey
OA3xOriginalProductKey


PS C:\Windows\system32>

Note: No product key was showed by the second command
 
Please open an elevated prompt, run the following command and post a screenshot of the result.
Code: 
slmgr /dli
 
Can you please check if the license started with J8JD4 is overused or not.
 
The licens containing J8JD4 is a datacenter licens and can't be overused, it offers unlimited vm's on a physical host.
So it can't be that either unfortunately, do you have any other tips?
 
Hi,

Please run the following command in an elevated prompt and copy and paste the result in your next post.
Code: 
reg query "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion" /v EditionId
 
C:\Windows\system32>reg query "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion" /v EditionId

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion
EditionId REG_SZ ServerDatacenter


C:\Windows\system32>
 
Export CBS (Component Based Servicing) hive
  • Click on the Start button and type regedit
  • When you see regedit on the list, right-click on it and select Run as administrator.
  • When regedit opens, using the left pane, navigate to the following registry key and select it by clicking on it once.
    Code: 
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing
  • Once selected, click File > Export....
  • Change the Save as type: to Registry Hive Files (*.*).

    622dbef75cd3a-Export-CBS-hive.png

  • Name this file ComponentBasedServicing (with no file extension) and save it to your Desktop.
  • Right-click on the saved file and choose Send > Compressed (zipped) Folder.
  • Attach the .ZIP file to your next post.
  • If the file is too large to upload here, upload the file to www.wetransfer.com and post the link in your next reply.
 
Please run the following commands in an elevated prompt and post the result:
Code: 
certutil -hashfile C:\Windows\servicing\Packages\Package_for_RollupFix~31bf3856ad364e35~amd64~~20348.1970.1.6.cat SHA256
certutil -hashfile C:\Windows\servicing\Packages\Package_for_RollupFix~31bf3856ad364e35~amd64~~20348.1970.1.6.mum SHA256
 
The command couldn't find the files so I tried to find them in Windows Explorer and they wasn't there but I could find two files that looked similar so I ran the command on them instead, don't know if that helps or not.

C:\Windows\system32>certutil -hashfile C:\Windows\servicing\Packages\Package_for_RollupFix~31bf3856ad364e35~amd64~~20348.1970.1.6.cat SHA256
CertUtil: -hashfile command FAILED: 0x80070002 (WIN32: 2 ERROR_FILE_NOT_FOUND)
CertUtil: The system cannot find the file specified.

C:\Windows\system32>certutil -hashfile C:\Windows\servicing\Packages\Package_for_RollupFix~31bf3856ad364e35~amd64~~20348.1970.1.6.mum SHA256
CertUtil: -hashfile command FAILED: 0x80070002 (WIN32: 2 ERROR_FILE_NOT_FOUND)
CertUtil: The system cannot find the file specified.

C:\Windows\system32>certutil -hashfile C:\Windows\servicing\Packages\Package_for_RollupFix~31bf3856ad364e35~amd64~~20348.1607.1.7.cat SHA256
SHA256 hash of C:\Windows\servicing\Packages\Package_for_RollupFix~31bf3856ad364e35~amd64~~20348.1607.1.7.cat:
2c1bcd5c80998c0a47c2164179596e5ef772aac95efcc396d467bb041e244b8c
CertUtil: -hashfile command completed successfully.

C:\Windows\system32>certutil -hashfile C:\Windows\servicing\Packages\Package_for_RollupFix~31bf3856ad364e35~amd64~~20348.1607.1.7.mum SHA256
SHA256 hash of C:\Windows\servicing\Packages\Package_for_RollupFix~31bf3856ad364e35~amd64~~20348.1607.1.7.mum:
71c1c69b3aa9925c59202dc1b84bc94d6ef2a7c5d3d1ade06c077a296c762e14
CertUtil: -hashfile command completed successfully.
 
The last *.cat/mum pair is a part of KB5023705 which is the latest installed update. For now this variation of error 0x800f0905 is still a mystery to me, this because it is different to known examples.

I'll need to do some more research on this one, so this can take a while.
 
Hi,

Download the
577bf0efb8088-FRST.png
Farbar Recovery Scan Tool and save it to your Desktop:

Right-click on the file FRST64.exe and choose Run as administrator.
  • Copy and paste the following (code) into the Search box and click the Search Files button.
Code: 
unattend.*
  • When the scan is complete, a message will display that 'Search.txt' is saved in the same folder FRST was started from. Notepad will open this file also.
  • Post the logfile Search.txt as attachment in your next reply.
 
Please run the following command as well in an elevated prompt and attach Packages.txt to your next post.
Code: 
DISM /online /get-packages /format:table > "%USERPROFILE%\desktop\Packages.txt"
 
Is Farbar safe? Our antivirus removes it and classes it as ransomware.

Packages.txt is attached below.
 

Attachments

Last edited:
You must log in or register to reply here.

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top