Windows Update Failures on Server 2016

[LeeA-KCU]

Good afternoon,

I am having an issue with a Server 2016 system not taking updates. I have run "sfc /scannow" which completed without issues stating no issues found. When I try to run "Dism /Online /Cleanup-Image /RestoreHealth" I get an error at around 93% that states

C:\Users\xxxxx>sfc /scannow

Beginning system scan.  This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection did not find any integrity violations.


C:\Users\xxxxx>Dism /Online /Cleanup-Image /Restore-Health

Deployment Image Servicing and Management tool
Version: 10.0.14393.4169

Image Version: 10.0.14393.7426


Error: 87

The restore-health option is not recognized in this context.
For more information, refer to the help.

The DISM log file can be found at C:\Windows\Logs\DISM\dism.log

I ran sfcfix.exe and it also completes without issues detected. When I try to run the "ComponentsScanner.exe" it immediately fails when pulling the hive. I copied the failure messages into the attached "componentsscanner.txt" file.

Thanks in advance for the assistance!

 

[Windows Update Bot]

Hi @LeeA-KCU,

Welcome to Sysnative Forums!

If you haven't already, please review the posting instructions here, and attach the requested log files. Without log files, our helpers will not be able to assist, and this will slow down fixing your machine.

If logs have been already been provided, our team of volunteers will analyse the provided log files to build a fix for your system. Please be aware that this may take several days from your initial post, due to the high volume of threads that we receive.


- Sysnative Windows Update Team

 

[PeterJ]

Hello and welcome,

Follow the instructions below please.

WARNING! The following fix is specific to the user's system in this thread only. No one else should follow these instructions, as it could damage your system.

• Download
  
  SFCFix and move the executable to your desktop.
• Download the attachment SFCFix.zip and save it on your desktop.
• Save any work you have open, and close all programs.
• Drag the SFCFix.zip file over the SFCFix.exe executable and release it.
  
  
• SFCFix will launch, let it complete.
• Once done, a file will appear on your desktop, called SFCFix.txt.
• Open the file, then copy and paste its content in your next reply.

 

[LeeA-KCU]

Good morning,

Attached is the output of SFCFix generated with the SFCFix.zip file.

Thank you again!

 

[PeterJ]

Restart the machine.
Check Windows Update again and report the result.
If it fails, copy the file C:\Windows\Logs\CBS\cbs.log to your desktop.
Zip the copied file and attach the zipped cbs.log to your next reply.

 

[LeeA-KCU]

Good morning, Sorry for the delay as I missed the email for the reply. I tried to perform the install after reboot and it failed. Attached is the CBS log.

Again thank you in advance!!!

 

[PeterJ]

Restart the machine ones again.
Check Windows Update again and report the result.
If it fails provide a screenshot of the available important updates.

 

[LeeA-KCU]

Good afternoon, Attached is a screenshot of the update that is now failing. It appears that now that the 2025-01 cumulative was release yesterday now it is trying to apply that update instead since it replaced it which is what is failing now.

Again thank you!!

 

[PeterJ]

Open an elevated command prompt.
Copy and paste the following command into it, then press enter.
net stop cryptsvc
Wait for completion before you continue.

Copy and paste the following command into it, then press enter.
esentutl /g %systemroot%\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb
Wait for completion before you continue.

Copy and paste the following command into it, then press enter.
net start cryptsvc
Provide a screenshot of the command prompt window.

 

[LeeA-KCU]

Here you go as requested....

 

[PeterJ]

OK.

Open an elevated command prompt.
Copy and paste the following command into it, then press enter.
net stop cryptsvc
Wait for completion before you continue.

Copy and paste the following command into it, then press enter.
esentutl /p %systemroot%\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb
Wait for completion before you continue.

Copy and paste the following command into it, then press enter.
net start cryptsvc
Provide a screenshot of the command prompt window.

 

[LeeA-KCU]

Here is a screenshot of the repair...

 

[PeterJ]

Great. The repair seems successful.
Create a full system backup first as recommended. Report when done.

 

[LeeA-KCU]

Ok so should I backup, reboot, and then try updates again?

 

[PeterJ]

Indeed.

 

[LeeA-KCU]

No success....it now is failing right when I click Install Now to install the 2015-01 Cumulative update. It seems like it is not even trying to download it.

CBS attached.

 

[PeterJ]

Install Update with DISM

1. Download the update MSU here: https://catalog.s.download.windowsu..._e915f9605715432ac0878df761df326f7cbd6532.msu
2. Copy the MSU file to a convenient location (such as C:\temp).
3. Click on the Start button and in the search box, type Command Prompt
4. When you see Command Prompt on the list, right-click on it and select Run as administrator
5. When command prompt opens, copy and paste the following commands into it, press enter after each
   
   cd C:\temp
   replace C:\temp with your path if different
   
   expand windows10.0-kb5050109-x64_e915f9605715432ac0878df761df326f7cbd6532.msu -f:* C:\temp
   
   DISM.exe /Online /Add-Package /PackagePath:C:\temp\windows10.0-kb5050109-x64.cab
   
   
6. You should receive the message:
   The operation completed successfully.
   Make sure to allow the computer to restart if prompted.
   
7. If you receive any other message:
   Post a screenshot of the Commandprompt window.
   Zip and attach the file C:\Windows\Logs\CBS\CBS.log

 

[LeeA-KCU]

We received a "Success" message. The server did not prompt for a reboot but we did any way to make sure. We attempted the update again and it immediately failed again. CBS attached.

Thank you!

 

[PeterJ]

Install Update with DISM

1. Download the update MSU here: https://catalog.s.download.windowsu..._1377c8d258cc869680b69ed7dba401b695e4f2ed.msu
2. Copy the MSU file to a convenient location (such as C:\temp).
3. Click on the Start button and in the search box, type Command Prompt
4. When you see Command Prompt on the list, right-click on it and select Run as administrator
5. When command prompt opens, copy and paste the following commands into it, press enter after each
   
   cd C:\temp
   replace C:\temp with your path if different
   
   expand windows10.0-kb5043124-x64_1377c8d258cc869680b69ed7dba401b695e4f2ed.msu -f:* C:\temp
   
   DISM.exe /Online /Add-Package /PackagePath:C:\temp\windows10.0-kb5043124-x64.cab
   
   
6. You should receive the message:
   The operation completed successfully.
   Make sure to allow the computer to restart if prompted.
   
7. If you receive any other message:
   Post a screenshot of the Commandprompt window.
   Zip and attach the file C:\Windows\Logs\CBS\CBS.log

 

[LeeA-KCU]

We received a "Success" message. The server did not prompt for a reboot but we did any way to make sure. We attempted the update again and it immediately failed again. CBS attached.

Thank you!