locked
ZTIWindowsUpdate takes for ages to start after adding the KB3125574 rollup. RRS feed

  • Question

  • Hi all, I Made a working Build and Capture TS. Used the default Windows 7 install.wim everything works fine. The Pre-App Windows Updates search and install starts after 3 times within 5min.
    (using the latest WUA Version: 7.6.7601.19161). First 150 updates then anonther 90 updates. Capture is fine and after xx hours i have a complete Win7 capture.

    Now the problem:

    To save time I offline updated the original install.wim with the required prereq (KB3020369) and added the KB3125574 (Win7 SP1 convenience rollup) to the MDT packages. when I use this offline updated install.wim it takes hours to start the The Pre-App Windows Updates search and begining the install of the rest of the updates.

    So with original install.wim starting to update image within 3 tries and 5min.

    With updated install.wim starting to update image withing 3 tries and many hours and still 123 updates to go. (including .net)

    WUA = Latest version

    Does anyone have an idea what causes this problem?

    ------------

    Logging from working and original install.wim:


    Property SMSTSRetryRequested is now =  ZTIWindowsUpdate 13-5-2016 10:25:29 0 (0x0000)
    Configuring client to use WSUS server http://XXXX0004.dev.XXX.nl:8530 ZTIWindowsUpdate 13-5-2016 10:25:29 0 (0x0000)
    Configuring Windows Update settings (manual update, use server) ZTIWindowsUpdate 13-5-2016 10:25:29 0 (0x0000)
    Windows Update Agent verion 6 found, OK to continue ZTIWindowsUpdate 13-5-2016 10:25:31 0 (0x0000)
    Ready to Opt-In to Microsoft Update: WUA Version: 7.6.7601.19161 ZTIWindowsUpdate 13-5-2016 10:25:31 0 (0x0000)
    Microsoft Update Service:  Enabled = False ZTIWindowsUpdate 13-5-2016 10:25:31 0 (0x0000)
    Command Line Procesed Query=False Registered=False  UpdateCommand=[IsInstalled = 0 and IsHidden = 0 and Type = 'Software'] ZTIWindowsUpdate 13-5-2016 10:25:31 0 (0x0000)
    Start Search... ZTIWindowsUpdate 13-5-2016 10:25:31 0 (0x0000)
    INSTALL - 57260dfe-227c-45e3-9ffc-2fc77a67f95a - Security Update for Microsoft .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2 SP1 for x64-based Systems (KB2656356) - 4 MB ZTIWindowsUpdate 13-5-2016 10:30:33 0 (0x0000)

    ------------

    Logging from updated install.wim:

    Begin Windows Update. Reboot=[false]  Retry=[true]  Count = 2 ZTIWindowsUpdate 18-5-2016 08:44:09 0 (0x0000)
    Property MSIT_WU_Count is now = 3 ZTIWindowsUpdate 18-5-2016 08:44:09 0 (0x0000)
    Property SMSTSRebootRequested is now =  ZTIWindowsUpdate 18-5-2016 08:44:09 0 (0x0000)
    Property SMSTSRetryRequested is now =  ZTIWindowsUpdate 18-5-2016 08:44:09 0 (0x0000)
    Configuring client to use WSUS server http://XXXX0004.dev.XXX.nl:8530 ZTIWindowsUpdate 18-5-2016 08:44:09 0 (0x0000)
    Configuring Windows Update settings (manual update, use server) ZTIWindowsUpdate 18-5-2016 08:44:09 0 (0x0000)
    Windows Update Agent verion 6 found, OK to continue ZTIWindowsUpdate 18-5-2016 08:44:12 0 (0x0000)
    Ready to Opt-In to Microsoft Update: WUA Version: 7.6.7601.23435 ZTIWindowsUpdate 18-5-2016 08:44:12 0 (0x0000)
    Microsoft Update Service:  Enabled = False ZTIWindowsUpdate 18-5-2016 08:44:12 0 (0x0000)
    Command Line Procesed Query=False Registered=False  UpdateCommand=[IsInstalled = 0 and IsHidden = 0 and Type = 'Software'] ZTIWindowsUpdate 18-5-2016 08:44:12 0 (0x0000)
    Start Search... ZTIWindowsUpdate 18-5-2016 08:44:12 0 (0x0000)
    INSTALL - 57260dfe-227c-45e3-9ffc-2fc77a67f95a - Security Update for Microsoft .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2 SP1 for x64-based Systems (KB2656356) - 4 MB ZTIWindowsUpdate 18-5-2016 13:52:57 0 (0x0000)
    INSTALL - 6502a461-7262-48fc-b567-f8d3c2f82ae6 - Security Update for Microsoft .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2 SP1 for x64-based Systems (KB2604115) - 23 MB ZTIWindowsUpdate 18-5-2016 13:52:57 0 (0x0000)
    INSTALL - 78f92451-801a-40f5-9582-cb8d1ca993be - Security Update for Microsoft .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2 SP1 for x64-based Systems (KB2729452) - 13 MB ZTIWindowsUpdate 18-5-2016 13:52:57 0 (0x0000)

    ---------------------------------------------

    This is what I did to update the install.wim offline:

    Used the original install.wim from the Win7 SP1 sources

    (expand not required but I did)
    Downloaded the KB3020369 (req) and the rollup KB3125574.

    expand -F:* F:\Update\AMD64-all-windows6.1-kb3125574-v4-x64_2dafb1d203c8964239af3048b5dd4b1264cd93b9.msu F:\Update

    expand -F:* “F:\Update\Windows6.1-KB3020369-x64.msu” F:\Update

    dism /mount-wim /wimfile:C:\install.wim /mountdir:C:\Mount /index:1

    dism /image:C:\mount /Add-Package /PackagePath:C:\Update\Windows6.1-KB3020369-x64.cab

    dism /image:C:\mount /Add-Package /PackagePath:C:\Update\Windows6.1-KB3125574-v4-x64.cab

    dism /unmount-wim /mountdir:C:\mount /commit

    After that copied the install.wim back to the OS deployment shares directory I used.

    Started the Build Ref Win7 Tasksequence on a VM (2cores 10GBmem)

    WUA Version: 7.6.7601.23435 (latest)

    MDT 2013 Update 2 - Windows 2012 R2 Server

    ZTIWindowsUpdate.log - The Good file : https://onedrive.live.com/redir?resid=749BF03D0E7EF0BB%211611

    ZTIWindowsUpdate.log - The wrong file: https://onedrive.live.com/redir?resid=749BF03D0E7EF0BB%211612



    • Edited by Tim NL Thursday, May 19, 2016 1:07 PM
    Thursday, May 19, 2016 10:25 AM

Answers

  • It seems like it's fixed.

    I also added the KB3145739 mentioned in the above article (so I added the KB3153199 and KB3145739 to the packages in MDT) The are installed in the Pre-install section. After that the third run on the Updates started after 6min and found 66 additional updates.

    Configuring client to use WSUS server http://XXX0004.dev.xxx.nl:8530 ZTIWindowsUpdate 19-5-2016 17:24:50 0 (0x0000)
    Configuring Windows Update settings (manual update, use server) ZTIWindowsUpdate 19-5-2016 17:24:50 0 (0x0000)
    Windows Update Agent verion 6 found, OK to continue ZTIWindowsUpdate 19-5-2016 17:24:52 0 (0x0000)
    Ready to Opt-In to Microsoft Update: WUA Version: 7.6.7601.23435 ZTIWindowsUpdate 19-5-2016 17:24:52 0 (0x0000)
    Microsoft Update Service:  Enabled = False ZTIWindowsUpdate 19-5-2016 17:24:52 0 (0x0000)
    Command Line Procesed Query=False Registered=False  UpdateCommand=[IsInstalled = 0 and IsHidden = 0 and Type = 'Software'] ZTIWindowsUpdate 19-5-2016 17:24:52 0 (0x0000)
    Start Search... ZTIWindowsUpdate 19-5-2016 17:24:52 0 (0x0000)
    INSTALL - c7db1d28-9160-4e63-9eae-2c7df322dc00 - Security Update for .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2 SP1 for x64-based Systems (KB2446710) - 11 MB ZTIWindowsUpdate 19-5-2016 17:30:09 0 (0x0000)

    I will run another test.

    • Marked as answer by Tim NL Thursday, May 19, 2016 6:06 PM
    • Unmarked as answer by Tim NL Thursday, May 19, 2016 6:06 PM
    • Marked as answer by Ty Glander Thursday, May 19, 2016 7:24 PM
    Thursday, May 19, 2016 3:47 PM

All replies

  • I'm not trying to use a WSUS, nor did I slipstream the updates into the ISO, but I'm getting the exact same problem when using the new Windows 7 Rollup - Windows update has been "stuck" on Checking for Updates for nearly 2 hours this last round.
    Thursday, May 19, 2016 1:51 PM
  • @Ladewig pointed me to the following article online.

    http://www.infoworld.com/article/3069693/microsoft-windows/windows-7-update-scans-taking-forever-kb-3153199-may-solve-the-problem.html

    Poster EP on AskWoody.com came up with the solution:

    Sad to say this Tuesday May 10, 1pm pacific time, doing a recent Windows Update scan on a Win7 SP1 system has resulted in a seemingly long or "forever" scan.  So the KB 3145739 security fix as well as the older KB 3139852 fix no longer works as of 5/10/2016 (yup, I knew it -- I saw it coming!)

    There is a newer win32k.sys security update posted on May 10 -- KB 3153199 (MS16-062)

    While KB 3153199 only updates the win32k.sys file (and does not supersede KB 3145739 but DOES supersede KB 3139852), I will manually download & install the KB3153199 security fix on my Win7 machines to resolve the very long WU scan problem.

    I'm testing this at the moment by adding the named KB3153199 to the packages in MDT and rerunning a build and capture.


    Will post a update when finished.

    Thursday, May 19, 2016 1:59 PM
  • Here's what I have configured at the moment if it helps:

    The following are imported as Packages:

    IE11 Pre-reqs

    https://support.microsoft.com/en-us/kb/2775511

    https://support.microsoft.com/en-us/kb/3020369

    https://support.microsoft.com/en-us/kb/3112343

    https://support.microsoft.com/en-us/kb/2852386

    https://support.microsoft.com/en-us/kb/2728738

    Then I have the convenience update configured as my first Application to install with a restart task immediately after.

    Command line: wusa.exe Windows6.1-KB3125574-v4-x64.msu /quiet /norestart

    Then it goes on to install Visual C++ runtimes, Silverlight, IE11, .NET Framework 4.6.1, WMF 4.0, WMF 5.0.

    Going this route with the April 2015 servicing stack update as a Package and installing the convenience update as an Application seems to be working well.

    This might help your scan times: I also imported the convenience update into WSUS on my MDT server and then performed a synchronization. After that, I declined all updates that have been superseded by another update. (Add the Supersedence column and sort). I think declining all of these unnecessary updates greatly helps the scan time from what I can tell.

    Granted, this is still a work in progress. I'm missing a few updates (about 20 where usually there's 3-4) after the build and capture completes. Hopefully I can work through that and be good to go. I'll check back if anyone has better options!

    Thursday, May 19, 2016 3:29 PM
  • It seems like it's fixed.

    I also added the KB3145739 mentioned in the above article (so I added the KB3153199 and KB3145739 to the packages in MDT) The are installed in the Pre-install section. After that the third run on the Updates started after 6min and found 66 additional updates.

    Configuring client to use WSUS server http://XXX0004.dev.xxx.nl:8530 ZTIWindowsUpdate 19-5-2016 17:24:50 0 (0x0000)
    Configuring Windows Update settings (manual update, use server) ZTIWindowsUpdate 19-5-2016 17:24:50 0 (0x0000)
    Windows Update Agent verion 6 found, OK to continue ZTIWindowsUpdate 19-5-2016 17:24:52 0 (0x0000)
    Ready to Opt-In to Microsoft Update: WUA Version: 7.6.7601.23435 ZTIWindowsUpdate 19-5-2016 17:24:52 0 (0x0000)
    Microsoft Update Service:  Enabled = False ZTIWindowsUpdate 19-5-2016 17:24:52 0 (0x0000)
    Command Line Procesed Query=False Registered=False  UpdateCommand=[IsInstalled = 0 and IsHidden = 0 and Type = 'Software'] ZTIWindowsUpdate 19-5-2016 17:24:52 0 (0x0000)
    Start Search... ZTIWindowsUpdate 19-5-2016 17:24:52 0 (0x0000)
    INSTALL - c7db1d28-9160-4e63-9eae-2c7df322dc00 - Security Update for .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2 SP1 for x64-based Systems (KB2446710) - 11 MB ZTIWindowsUpdate 19-5-2016 17:30:09 0 (0x0000)

    I will run another test.

    • Marked as answer by Tim NL Thursday, May 19, 2016 6:06 PM
    • Unmarked as answer by Tim NL Thursday, May 19, 2016 6:06 PM
    • Marked as answer by Ty Glander Thursday, May 19, 2016 7:24 PM
    Thursday, May 19, 2016 3:47 PM
  • Seems to work. Don't know why others don't have this behaviour but it solved for me by adding KB3145739 and KB3153199.

    Configuring client to use WSUS server  http://XXX0004.dev.xxx.nl:8530 ZTIWindowsUpdate 19-5-2016 18:51:23 0 (0x0000)
    Configuring Windows Update settings (manual update, use server) ZTIWindowsUpdate 19-5-2016 18:51:23 0 (0x0000)
    Windows Update Agent verion 6 found, OK to continue ZTIWindowsUpdate 19-5-2016 18:51:25 0 (0x0000)
    Ready to Opt-In to Microsoft Update: WUA Version: 7.6.7601.23435 ZTIWindowsUpdate 19-5-2016 18:51:25 0 (0x0000)
    Microsoft Update Service:  Enabled = False ZTIWindowsUpdate 19-5-2016 18:51:25 0 (0x0000)
    Command Line Procesed Query=False Registered=False  UpdateCommand=[IsInstalled = 0 and IsHidden = 0 and Type = 'Software'] ZTIWindowsUpdate 19-5-2016 18:51:25 0 (0x0000)
    Start Search... ZTIWindowsUpdate 19-5-2016 18:51:25 0 (0x0000)
    INSTALL - c7db1d28-9160-4e63-9eae-2c7df322dc00 - Security Update for .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2 SP1 for x64-based Systems (KB2446710) - 11 MB ZTIWindowsUpdate 19-5-2016 18:56:43 0 (0x0000)

    Thursday, May 19, 2016 5:30 PM
  • Also note:

    http://wu.krelay.de/en/


    Keith Garner - Principal Consultant [owner] - http://DeploymentLive.com

    Monday, May 23, 2016 11:51 PM