Windows 2019 Server Microsoft Updates Failing

S

scjohnson

Member
Joined
Feb 28, 2025
Posts
22
Hello, I apologize if this is not the correct forum, but I have ran into an issue on a single server that has me scratching my head.

We do quarterly updates on a range of servers for a product we host and out of 80+ servers there is one that has stopped updating. The last updates were ran by another admin and I was unaware they didn't take until I ran them this past week.

We update with WSUS but I have also attempted downloading the updates from Microsoft Update Catalog. Each time the update process finishes and the server reboots, it gets to 97% and then says "We couldn't complete the updates. Undoing changes. Don't turn off your computer." at which point it reverts and reboots.

I have tried manually installing the updates that failed 2024-10 kb5044277, and the 2025-02 kb5052000, but neither worked successfully.

I deleted all of the previous update files as well.

The error that is showing in Event Viewer is the following:

Installation Failure: Windows failed to install the following update with error 0x800F0922: 2025-01 Cumulative Update for Windows Server 2019 for x64-based Systems (KB5050008).

Any help or guidance will be greatly appreciated.

Thank you.
 
Hi @scjohnson,

Welcome to Sysnative Forums!

If you haven't already, please review the posting instructions here, and attach the requested log files. Without log files, our helpers will not be able to assist, and this will slow down fixing your machine.

If logs have been already been provided, our team of volunteers will analyse the provided log files to build a fix for your system. Please be aware that this may take several days from your initial post, due to the high volume of threads that we receive.


- Sysnative Windows Update Team
 
Following up on this request for help. Please let me know if there is anything additional information needed. Thanks.
 
Hi and welcome to Sysnative,

The WeTransfer link is expired, so please provide a new copy of the CBS logs.

Upload a copy of the CBS folder
  • Open Windows Explorer and browse to the C:\Windows\Logs folder.
  • Right-click on the CBS folder and choose Send to > Compressed (zipped) folder.
  • Now the message will appear, "Windows cannot create the Compressed (zipped) Folder here. Do you want it to be placed on the desktop instead?"
  • Click on the Yes button here.
653a64385d891-618e949e09fef-CBS-Folder.png

  • Attach the file CBS.zip to your next reply. If the file is too large to attach, upload the CBS.zip file to www.wetransfer.com and post the link in your next reply.
 
Hi,

Please do the following, if the result contains sensitive info (full names) please ZIP the TXT file in a password protected archive and send the password in a private message.

Provide the profile information of this server.
  • Click the Start button and in the search box, type Command Prompt
  • When you see Command Prompt on the list, right-click on it and select Run as administrator.
    Copy and paste the following commands one at a time into the command prompt and press enter after each.
    Code: 
    reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList" /s > "%userprofile%\desktop\ProfileList.txt"
reg query "HKEY_USERS" >> "%userprofile%\desktop\ProfileList.txt"
  • These commands will collect the System and Application logs and create ProfileList.txt on your Desktop.
  • Attach this file in your next reply.
 
It seems some profiles has been migrated, which software is used for the migration because it seems it left some remnants.

Code: 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1960408961-1897051121-682003330-18054\fdeploy
    SettingsMigrated    REG_DWORD    0x0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1960408961-1897051121-682003330-18054\fdeploy\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}
    Flags    REG_DWORD    0x9210
    Path    REG_SZ    \\svrfs02\users\%USERNAME%
    PathEffective    REG_SZ    \\svrfs02\users\admin-jt
 
By migrate, do you mean when upgrading to 2019? Because I believe these were updated by mounting the Server 2019 iso and doing a manual upgrade.

I stand corrected, talking to a colleague we believe these were installed fresh onto 2019 when they migrated off of 2012.
 
No, it looks like the profiles where migrated to another server (domain controller etc.). This because the subkey fdeploy is not a default key, but are you sure the ProfileList is from the same server as the CBS logs? This because I See only different SID's?
 
Are the following profiles SID's still in use on this server?
Rich (BB code): 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1960408961-1897051121-682003330-18054\fdeploy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1960408961-1897051121-682003330-18921\fdeploy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1960408961-1897051121-682003330-19387\fdeploy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1960408961-1897051121-682003330-20261\fdeploy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1960408961-1897051121-682003330-20262\fdeploy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1960408961-1897051121-682003330-20384\fdeploy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1960408961-1897051121-682003330-21885\fdeploy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1960408961-1897051121-682003330-23451\fdeploy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1960408961-1897051121-682003330-23764\fdeploy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1960408961-1897051121-682003330-25552\fdeploy
 
Out of these, the following are NOT being used anymore:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1960408961-1897051121-682003330-18921\fdeploy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1960408961-1897051121-682003330-20384\fdeploy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1960408961-1897051121-682003330-21885\fdeploy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1960408961-1897051121-682003330-25552\fdeploy
 
Okay, please remove those entry's from the registry and remove the associated profile folders manually.

Rich (BB code): 
reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1960408961-1897051121-682003330-18921" /f
reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1960408961-1897051121-682003330-20384" /f
reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1960408961-1897051121-682003330-21885" /f
reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1960408961-1897051121-682003330-25552" /f

Afterwards attempt to update again and post the result.
 
Maxstar, it is not allowing me to delete these users as it is saying their "folder or a file in it is open in another program." I opened Computer Management and cannot see a file being used by any of these users, and they have not worked here in some time.

I was able to remove the registry entries.

I am going to reboot it and try again, but this is a production server and it will have to wait until after hours today (approx. 7 hrs from now.). I will keep you updated once that has been completed.
 
Okay, let me know the result. And do you know which software added the fdeploy subkeys to the profiles? E.g. this one?

Rich (BB code): 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1960408961-1897051121-682003330-18054\fdeploy
    SettingsMigrated    REG_DWORD    0x0
 
I believe the fdeploy subkeys is added through Group Policy for mapping the networked user profile to the computer.
 
I am not sure about that. I have checked on several servers and workstations and all domain accounts have the fdeploy key under their SID. It is a registry addition that points the \\FILESERVER\users\%USERNAME%.

I have installed the updates and will reboot it afterhours tonight and report back. Thank you.
 
You must log in or register to reply here.

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top