[WinServer2012R2] Updates Reverting during Reboot

WELDRIDGE

Member
Joined
May 16, 2017
Posts
11
First time posting here. On to the problem at hand:

We have a production 2012 R2 terminal server that will not apply any windows updates in any way. It normally scans for updates just fine, downloads, installs, but when it comes time to reboot and apply the updates it always fails and has to revert the changes (which takes over an hour usually). This server has not been upgraded, it is a native 2012 R2 VM on hyper-v with the RDS roles and services installed. When the server was first built all updates were installed that were available at the time and for a while after updates/patches applied just fine. Then out of the blue (not sure when anymore as it has been months) it stopped being able to apply updates during the reboot process. This includes updates manually installed.

SFC /scannow reveals that there is some corruption, and DISM using the /restorehealth always fails with an error of 0x80240021 and says no operation was completed. We've tried running a DISM /startcomponentcleanup first and that completes fine, but it doesn't allow the /restorehealth to complete. We've also purged the windows update SxS directory and removed pending reboots from the registry and then tried installing updates 1 by 1 and still received the same result. We have reached a point where this server is missing quite a few critical security updates and we need to get this issue resolved.

We have run SFCFix which claims to have resolved an issue with corruption, however running SFC /scannow once again reveals there is still corruption. After running the DISM /startcomponentcleanup we have also noticed that windows update continues to scan for updates and never finds anything (meaning the scan never stops). Running overnight still found nothing, restarting the update server did not help resolve anything either. We have renamed the old CBS.log to old and it is included for reference if needed, we did however start a new log just to show the most recent information involving SFCFix, sfc, and DISM. Any help in this situation will be amazing and, ahead of time, thank you. This is a very frustrating issue.

I have tried to attach the CBS.zip but it will not let me and I cannot run the script to upload it to the servers as it does not allow me to download it from the link in the sticky. If someone could please provide information on how to upload it, it is just shy of 60 MB in size.
 

Attachments

Please do the following so I can get a current log. Thanks.

SFC Scan
1. Right-click on the Start button and select Command Prompt (Admin)
2. When command prompt opens, Copy (Ctrl+C) and Paste (Right-click > Paste) the following command into it, then press Enter
sfc /scannow

3. Once it finishes, copy and paste the following into the command-prompt window and press Enter.
copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"

4. Once this has completed please go to your Desktop and you will find CBS.txt => Right-click on this file and choose Send To...Compressed (zipped folder). Please upload this zipped file CBS.zip to this thread

Please Note:: if the file is too big to upload to your next post please upload via a service such as Dropbox or One Drive or SendSpace and just provide the link.
 
OK, let's first fix the easy one.
Code:
2017-05-16 10:43:56, Info                  CSI    00000f94 Hashes for file member \SystemRoot\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.16384_none_9590ba64d5b91f79\Amd64\CNBJ2530.DPB do not match actual file [l:36{18}]"Amd64\CNBJ2530.DPB" :
  Found: {l:32 b:zTOrULvptWdn7brFWINkGSNSjkbwIY3qvW7s6p7uJ/0=} Expected: {l:32 b:n520k714Uu3utHa5JGQ6HQYbZphKhlMWq5pEmfnCDuw=}

Please do the following.

Step#1 - SFCFix Script
Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

  1. Download SFCFix.exe (by niemiro) and save this to your Desktop. If you still have this on your desktop from downloading previously, you don't need to re-download.
  2. Download the file below, SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
  3. Save any open documents and close all open windows.
  4. On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
  5. Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
  6. SFCFix will now process the script.
  7. Upon completion, a file should be created on your Desktop: SFCFix.txt.
  8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please
 

Attachments

SFCFix version 3.0.0.0 by niemiro.
Start time: 2017-05-24 07:06:03.737
Microsoft Windows Server 2012 R2 Update 3 - amd64
Using .zip script file at C:\Users\rtisupport\Desktop\SFCFix.zip [0]








PowerCopy::
Successfully took permissions for file or folder C:\Windows\Winsxs\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.16384_none_9590ba64d5b91f79\Amd64\CNBJ2530.DPB


Successfully copied file C:\Users\rtisupport\AppData\Local\niemiro\Archive\Winsxs\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.16384_none_9590ba64d5b91f79\Amd64\CNBJ2530.DPB to C:\Windows\Winsxs\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.16384_none_9590ba64d5b91f79\Amd64\CNBJ2530.DPB.


Successfully restored ownership for C:\Windows\Winsxs\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.16384_none_9590ba64d5b91f79\Amd64\CNBJ2530.DPB
Successfully restored permissions on C:\Windows\Winsxs\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.16384_none_9590ba64d5b91f79\Amd64\CNBJ2530.DPB
PowerCopy:: directive completed successfully.








Successfully processed all directives.
SFCFix version 3.0.0.0 by niemiro has completed.
Currently storing 1 datablocks.
Finish time: 2017-05-24 07:06:04.344
Script hash: wazH5sZNUEk/HZB47xOdtijHlSzK6feHoVyFI3jumEA=
----------------------EOF-----------------------
 
Repeat the following to verify the fix.

SFC Scan
1. Right-click on the Start button and select Command Prompt (Admin)
2. When command prompt opens, Copy (Ctrl+C) and Paste (Right-click > Paste) the following command into it, then press Enter
sfc /scannow

3. Once it finishes, copy and paste the following into the command-prompt window and press Enter.
copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"

4. Once this has completed please go to your Desktop and you will find CBS.txt => Right-click on this file and choose Send To...Compressed (zipped folder). Please upload this zipped file CBS.zip to this thread

Please Note:: if the file is too big to upload to your next post please upload via a service such as Dropbox or One Drive or SendSpace and just provide the link.
 
Cannot run the sfc /scannow due to a pending repair which requires a reboot to complete. A reboot will not be able to be performed until much later today due it being a production server and the current situation with windows updates failing to apply during reboot. I will post results once this has been done.
 
Well, long story short we cannot run "sfc /scannow" any longer. After performing a reboot it took an exceptionally long time due to the reverting changes issue (hours) and we still cannot run the scan due to a pending repair operation. Any suggestions?
 
Please do the following again. I understand an error will come up. That's OK. Please continue with the steps to provide me with the log. Thanks.

SFC Scan
1. Right-click on the Start button and select Command Prompt (Admin)
2. When command prompt opens, Copy (Ctrl+C) and Paste (Right-click > Paste) the following command into it, then press Enter
sfc /scannow

3. Once it finishes, copy and paste the following into the command-prompt window and press Enter.
copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"

4. Once this has completed please go to your Desktop and you will find CBS.txt => Right-click on this file and choose Send To...Compressed (zipped folder). Please upload this zipped file CBS.zip to this thread

Please Note:: if the file is too big to upload to your next post please upload via a service such as Dropbox or One Drive or SendSpace and just provide the link.
 
The service is set to disabled at the moment as it was the only way to get it out of the reverting changes loop. We tried re-enabling it but it does a weird thing where it shows a reverting changes screen to anyone that tries to log in.
 
When time permits, set this service to Automatic. If it is set to Manual it won't work. Then reboot the server twice. Let me know once you are able to do this. No rush. Thanks.
 
This probably won't happen for weeks as scheduling 6+ hours of down time for this production server will have to happen outside of business hours. Every time we reboot it goes through the reverting changes which takes 3+ hours for each reboot. If there is anything we can do without rebooting the server that would be great, otherwise I understand.
 
Well, I guess I spoke too soon. The service is currently in a running status set to automatic. The system must've done that itself, not sure how.
 
Back
Top