Remove From My Forums

"Failure configuring Windows updates. Reverting changes" - Post-reboot status 0x800f0922

Question

Server 2012 [6.2.9200] Standard Core

VMWare VM running in BIOS mode (*not* UEFI)

It is a production Read-Only Domain Controller. DC functionality is currently unaffected. Replication and diag all show 'green'

We have an internal WSUS server and there are currently 8 pending updates:

Security Update for Windows Server 2012 (KB2853587)
Security Update for Windows Server 2012 (KB2923392)
Security Update for Windows Server 2012 (KB2973501)
Security Update for Microsoft .NET Framework 4.5, 4.5.1 and 4.5.2 on Windows 8 and Windows Server 2012 x64 (KB2978042)
Security Update for Microsoft .NET Framework 4.5, 4.5.1 and 4.5.2 on Windows 8 and Windows Server 2012 x64 (KB2979577)
Update for Windows Server 2012 (KB2995387)
Security Update for Windows Server 2012 (KB3000061)
Update for Windows Server 2012 (KB3000988)

Regardless of whether I install them all at once or go through them one by one, upon reboot, I get the error message ""Failure configuring Windows updates. Reverting changes". This box has previously had updates applied successfully however the last successful update was prior to installing the ADDS role and promoting it to a RODC.

ReportingEvents.log

{A94C6378-4107-430E-9B9D-76088CE63CFF}	2014-10-17 09:30:16:165-0400	1	147 [AGENT_DETECTION_FINISHED]	101	{00000000-0000-0000-0000-000000000000}	0	0	(null)	Success	Software Synchronization	Windows Update Client successfully detected 8 updates.
{ED5CABD7-8DB0-4C53-AFD1-E292BB5A8198}	2014-10-17 09:30:16:165-0400	1	156 [AGENT_STATUS_30]	101	{00000000-0000-0000-0000-000000000000}	0	0	(null)	Success	Pre-Deployment Check	Reporting client status.
{559FBACF-6FCB-4540-A999-A566C128FEAF}	2014-10-17 09:35:31:851-0400	1	147 [AGENT_DETECTION_FINISHED]	101	{00000000-0000-0000-0000-000000000000}	0	0	(null)	Success	Software Synchronization	Windows Update Client successfully detected 8 updates.
{0C901AA0-07A7-4540-8A12-39F30770E2D5}	2014-10-17 09:35:40:665-0400	1	162 [AGENT_DOWNLOAD_SUCCEEDED]	101	{CD2A752F-FF51-46A5-8134-54DD0AE32D2A}	202	0	(null)	Success	Content Download	Download succeeded.
{2B0E6215-61FA-4A5E-9C61-3926CA038D4C}	2014-10-17 09:35:42:256-0400	1	162 [AGENT_DOWNLOAD_SUCCEEDED]	101	{4193EAE0-AE33-4774-B479-D9660D15E5F2}	201	0	(null)	Success	Content Download	Download succeeded.
{200D0802-2103-42D7-B827-D8D030CD088F}	2014-10-17 09:35:45:953-0400	1	162 [AGENT_DOWNLOAD_SUCCEEDED]	101	{2346EB42-185C-49CC-9856-190C294FE502}	202	0	(null)	Success	Content Download	Download succeeded.
{BAE97C9F-94AB-4E09-8388-471B101153C3}	2014-10-17 09:35:48:418-0400	1	162 [AGENT_DOWNLOAD_SUCCEEDED]	101	{8001616A-1D31-4D17-B3DC-861E3CE0C3E3}	202	0	(null)	Success	Content Download	Download succeeded.
{DD2DDC26-4878-4341-A624-6554B0265CB9}	2014-10-17 09:35:50:493-0400	1	162 [AGENT_DOWNLOAD_SUCCEEDED]	101	{C822D00A-FEC3-4B65-8F63-6E6BEA292944}	203	0	(null)	Success	Content Download	Download succeeded.
{A6036EBE-D66E-4840-B6C8-409F036106BC}	2014-10-17 09:35:56:405-0400	1	162 [AGENT_DOWNLOAD_SUCCEEDED]	101	{FD33CBA9-736E-4E42-8FC6-91F5534670C6}	200	0	(null)	Success	Content Download	Download succeeded.
{62F5A078-93F6-45FE-934F-E4F443E6BE69}	2014-10-17 09:35:57:029-0400	1	162 [AGENT_DOWNLOAD_SUCCEEDED]	101	{DF82A201-7E54-420E-A08C-3281F731C3D7}	202	0	(null)	Success	Content Download	Download succeeded.
{CFAE64D9-FFCA-49A7-911D-134F7307D308}	2014-10-17 09:36:01:897-0400	1	162 [AGENT_DOWNLOAD_SUCCEEDED]	101	{957ACF74-78FB-4045-91E5-A8714DD0915F}	200	0	(null)	Success	Content Download	Download succeeded.
{A3ADCF16-5037-493E-BB35-D9CB373DAA3D}	2014-10-17 09:36:03:831-0400	1	201 [AGENT_INSTALLING_PENDING]	101	{CD2A752F-FF51-46A5-8134-54DD0AE32D2A}	202	240005	(null)	Success	Content Install	Installation pending.
{178EA9C2-BF23-4219-946A-66DA592F88D9}	2014-10-17 09:36:04:642-0400	1	201 [AGENT_INSTALLING_PENDING]	101	{4193EAE0-AE33-4774-B479-D9660D15E5F2}	201	240005	(null)	Success	Content Install	Installation pending.
{15D42F71-652C-4D52-92F5-BD5453AC9E5E}	2014-10-17 09:36:06:171-0400	1	201 [AGENT_INSTALLING_PENDING]	101	{2346EB42-185C-49CC-9856-190C294FE502}	202	240005	(null)	Success	Content Install	Installation pending.
{09EA6B96-82E0-4E60-9927-E05905FAEFEA}	2014-10-17 09:36:07:793-0400	1	201 [AGENT_INSTALLING_PENDING]	101	{8001616A-1D31-4D17-B3DC-861E3CE0C3E3}	202	240005	(null)	Success	Content Install	Installation pending.
{42CEC48F-3F9D-461A-8E27-C906775E8828}	2014-10-17 09:36:09:868-0400	1	201 [AGENT_INSTALLING_PENDING]	101	{C822D00A-FEC3-4B65-8F63-6E6BEA292944}	203	240005	(null)	Success	Content Install	Installation pending.
{8726869B-6485-4754-BAD6-6F4B475F46B4}	2014-10-17 09:36:15:999-0400	1	201 [AGENT_INSTALLING_PENDING]	101	{FD33CBA9-736E-4E42-8FC6-91F5534670C6}	200	240005	(null)	Success	Content Install	Installation pending.
{409A3494-2A03-4F15-825D-1D41371DC87F}	2014-10-17 09:36:19:322-0400	1	201 [AGENT_INSTALLING_PENDING]	101	{DF82A201-7E54-420E-A08C-3281F731C3D7}	202	240005	(null)	Success	Content Install	Installation pending.
{52965D52-2DB3-4E88-9481-4D3D59AD52D5}	2014-10-17 09:36:26:810-0400	1	201 [AGENT_INSTALLING_PENDING]	101	{957ACF74-78FB-4045-91E5-A8714DD0915F}	200	240005	(null)	Success	Content Install	Installation pending.
{F43E4A5F-E53C-4554-A905-A1B41EE024E0}	2014-10-17 09:40:24:927-0400	1	182 [AGENT_INSTALLING_FAILED]	101	{957ACF74-78FB-4045-91E5-A8714DD0915F}	200	800f0922	(null)	Failure	Content Install	Installation Failure: Windows failed to install the following update with error 0x800f0922: Update for Windows Server 2012 (KB3000988).
{B7504C25-377E-4FB2-83DD-6B8EF50AA081}	2014-10-17 09:40:24:942-0400	1	182 [AGENT_INSTALLING_FAILED]	101	{DF82A201-7E54-420E-A08C-3281F731C3D7}	202	800f0922	(null)	Failure	Content Install	Installation Failure: Windows failed to install the following update with error 0x800f0922: Security Update for Windows Server 2012 (KB3000061).
{0B2C14FB-5000-4BFD-A06B-73AB944D7297}	2014-10-17 09:40:24:942-0400	1	182 [AGENT_INSTALLING_FAILED]	101	{FD33CBA9-736E-4E42-8FC6-91F5534670C6}	200	800f0922	(null)	Failure	Content Install	Installation Failure: Windows failed to install the following update with error 0x800f0922: Update for Windows Server 2012 (KB2995387).
{8FDB7384-BD2B-4B29-9A12-02075A4B0A55}	2014-10-17 09:40:24:942-0400	1	182 [AGENT_INSTALLING_FAILED]	101	{C822D00A-FEC3-4B65-8F63-6E6BEA292944}	203	800f0922	(null)	Failure	Content Install	Installation Failure: Windows failed to install the following update with error 0x800f0922: Security Update for Microsoft .NET Framework 4.5, 4.5.1 and 4.5.2 on Windows 8 and Windows Server 2012 x64 (KB2979577).
{AB2869B9-963E-445B-BC05-655B1D007912}	2014-10-17 09:40:24:942-0400	1	182 [AGENT_INSTALLING_FAILED]	101	{8001616A-1D31-4D17-B3DC-861E3CE0C3E3}	202	800f0922	(null)	Failure	Content Install	Installation Failure: Windows failed to install the following update with error 0x800f0922: Security Update for Microsoft .NET Framework 4.5, 4.5.1 and 4.5.2 on Windows 8 and Windows Server 2012 x64 (KB2978042).
{70C10EF0-4C29-4333-9DB3-F9F6A24E33F2}	2014-10-17 09:40:24:942-0400	1	182 [AGENT_INSTALLING_FAILED]	101	{2346EB42-185C-49CC-9856-190C294FE502}	202	800f0922	(null)	Failure	Content Install	Installation Failure: Windows failed to install the following update with error 0x800f0922: Security Update for Windows Server 2012 (KB2973501).
{AE7088FF-7517-46DE-ABB5-873A0B8B8B09}	2014-10-17 09:40:24:957-0400	1	182 [AGENT_INSTALLING_FAILED]	101	{4193EAE0-AE33-4774-B479-D9660D15E5F2}	201	800f0922	(null)	Failure	Content Install	Installation Failure: Windows failed to install the following update with error 0x800f0922: Security Update for Windows Server 2012 (KB2923392).
{3577AE7C-A861-43B6-A7B4-65383F6148F3}	2014-10-17 09:40:24:973-0400	1	182 [AGENT_INSTALLING_FAILED]	101	{CD2A752F-FF51-46A5-8134-54DD0AE32D2A}	202	800f0922	(null)	Failure	Content Install	Installation Failure: Windows failed to install the following update with error 0x800f0922: Security Update for Windows Server 2012 (KB2853587).
{FE35AF71-70B3-4637-AED1-F2F9CBF2B282}	2014-10-17 10:08:14:141-0400	1	147 [AGENT_DETECTION_FINISHED]	101	{00000000-0000-0000-0000-000000000000}	0	0	(null)	Success	Software Synchronization	Windows Update Client successfully detected 8 updates.
{CBD02322-EA98-4C5C-8DD2-137FFAC595B7}	2014-10-17 10:08:14:141-0400	1	156 [AGENT_STATUS_30]	101	{00000000-0000-0000-0000-000000000000}	0	0	(null)	Success	Pre-Deployment Check	Reporting client status.

I have taken the following steps based on research without success:

Restarted the box - try again
Complete shutdown - try again
verified with my VMWare admins that there is no 'Secure Boot' or similar option set on the VM
Shutdown wuauserv, renamed SoftwareDistribution, started the service back up, reattempt
installed, but did not enable/configure, BitLocker Drive Encryption feature
sfc /scannow - no errors found
dism /online /cleanup-image /checkhealth and /scanhealth - neither found any issues
verified that the 'System Reserved Partition' is the correct size (350MB) and has free space (115MB)
deactivated the OS license, reactivated the OS license - no change
Pointed to the MS Windows Update servers instead of local WSUS

I have a little flexibility in how I repair this box. Given that DC functionality is unaffected and that this specific DC is not used heavily I want to try to repair it rather than wipe it out and rebuild it. I have not yet attempted to run updates on our other, non-Read-Only DCs. If I run in to the same problem on them, I won't have as much leeway so I want to try to come up with a repair process if needed. I also have some concern regarding my ability to demote it from it's DC role given its current state. There is nothing to indicate that that would also be a problem, but I would prefer to get it in working order before attempting a demotion.

Any help and insight would be greatly appreciated.

Full WindowsUpdate.log to follow due to post size restrictions.

Justin Cervero - MS Enterprise Admin - Appalachian State University

Edited by J Cervero Friday, October 17, 2014 2:52 PM formatting

Friday, October 17, 2014 2:44 PM

All replies

Pre-Reboot WindowsUpdate.log

Misc	===========  Logging initialized (build: 7.8.9200.17099, tz: -0400)  ===========
Misc	  = Process: C:\Windows\system32\svchost.exe
Misc	  = Module: c:\windows\system32\wuaueng.dll
Service	*************
Service	** START **  Service: Service startup
Service	*********
Agent	  * WU client version 7.8.9200.17099
Agent	  * Base directory: C:\Windows\SoftwareDistribution
Agent	  * Access type: No proxy
Service	UpdateNetworkState Ipv6, cNetworkInterfaces = 1.
Service	UpdateNetworkState Ipv4, cNetworkInterfaces = 1.
Agent	  * Network state: Connected
Service	UpdateNetworkState Ipv6, cNetworkInterfaces = 1.
Service	UpdateNetworkState Ipv4, cNetworkInterfaces = 1.
DtaStor	Default service for AU is {00000000-0000-0000-0000-000000000000}
DtaStor	Default service for AU is {9482F4B4-E343-43B6-B170-9A65BC822C77}
DtaStor	Data store successfully created
Agent	***********  Agent: Initializing global settings cache  ***********
Agent	  * Endpoint Provider: 00000000-0000-0000-0000-000000000000
Agent	  * WSUS server: http://wsusserver
Agent	  * WSUS status server: http://wsusserver
Agent	  * Target group: Systems
Agent	  * Windows Update access disabled: No
Misc	WARNING: Network Cost is assumed to be not supported as something failed with trying to get handles to wcmapi.dll
WuTask	WuTaskManager delay initialize completed successfully..
Report	CWERReporter::Init succeeded
Agent	***********  Agent: Initializing Windows Update Agent  ***********
DnldMgr	Download manager restoring 0 downloads
AU	###########  AU: Initializing Automatic Updates  ###########
AU	AIR Mode is disabled
AU	  # Policy Driven Provider: http://wsusserver
AU	  # Detection frequency: 22
AU	  # Target group: Systems
AU	  # Approval type: Pre-install notify (Policy)
AU	  # Auto-install minor updates: No (User preference)
AU	  # Will interact with non-admins (Non-admins are elevated (Policy))
AU	WARNING: Failed to get Wu Exemption info from NLM, assuming not exempt, error = 0x80240037
AU	AU finished delayed initialization
Misc	===========  Logging initialized (build: 7.8.9200.17099, tz: -0400)  ===========
Misc	  = Process: C:\Windows\System32\cscript.exe
Misc	  = Module: C:\Windows\System32\wuapi.dll
COMAPI	-------------
COMAPI	-- START --  COMAPI: Init Search [ClientId = <NULL>]
COMAPI	---------
COMAPI	-------------
COMAPI	-- START --  COMAPI: Search [ClientId = <NULL>]
COMAPI	---------
Report	***********  Report: Initializing static reporting data  ***********
Report	  * OS Version = 6.2.9200.0.0.131344
Report	  * OS Product Type = 0x00000007
Report	  * Computer Brand = VMware, Inc.
Report	  * Computer Model = VMware Virtual Platform
Report	  * Platform Role = 1
Report	  * AlwaysOn/AlwaysConnected (AOAC) = 0
Report	  * Bios Revision = 6.00
Report	  * Bios Name = PhoenixBIOS 4.0 Release 6.0     
Report	  * Bios Release Date = 2013-07-30T00:00:00
Report	  * Bios Sku Number unavailable.
Report	  * Bios Vendor = Phoenix Technologies LTD
Report	  * Bios Family unavailable.
Report	  * Bios Major Release = 4
Report	  * Bios Minor Release = 6
Report	  * Locale ID = 1033
COMAPI	<<-- SUBMITTED -- COMAPI: Search [ClientId = <NULL>]
Agent	*************
Agent	** START **  Agent: Finding updates [CallerId = ]
Agent	*********
Agent	  * Online = Yes; Ignore download priority = No
Agent	  * Criteria = "IsInstalled=0 and Type='Software'"
Agent	  * ServiceID = {00000000-0000-0000-0000-000000000000} Third party service
Agent	  * Search Scope = {Machine}
Agent	  * Caller SID for Applicability: S-1-5-21-3125904992-2106718063-2989486192-100700
EP	Got WSUS Client/Server URL: "http://wsusserver/ClientWebService/client.asmx"
PT	+++++++++++  PT: Synchronizing server updates  +++++++++++
PT	  + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://wsusserver/ClientWebService/client.asmx
PT	WARNING: Cached cookie has expired or new PID is available
EP	Got WSUS SimpleTargeting URL: "http://wsusserver"
PT	Initializing simple targeting cookie, clientId = 5cb617c5-4bcc-44a6-a8bc-6f5d116a9dc3, target group = Systems, DNS name = rodcserver
PT	  Server URL = http://wsusserver/SimpleAuthWebService/SimpleAuth.asmx
Driver	WARNING: No system hardware ids found
PT	+++++++++++  PT: Synchronizing extended update info  +++++++++++
PT	  + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://wsusserver/ClientWebService/client.asmx
Agent	  * Added update {CD2A752F-FF51-46A5-8134-54DD0AE32D2A}.202 to search result
Agent	  * Added update {4193EAE0-AE33-4774-B479-D9660D15E5F2}.201 to search result
Agent	  * Added update {2346EB42-185C-49CC-9856-190C294FE502}.202 to search result
Agent	  * Added update {8001616A-1D31-4D17-B3DC-861E3CE0C3E3}.202 to search result
Agent	  * Added update {C822D00A-FEC3-4B65-8F63-6E6BEA292944}.203 to search result
Agent	  * Added update {FD33CBA9-736E-4E42-8FC6-91F5534670C6}.200 to search result
Agent	  * Added update {DF82A201-7E54-420E-A08C-3281F731C3D7}.202 to search result
Agent	  * Added update {957ACF74-78FB-4045-91E5-A8714DD0915F}.200 to search result
Agent	  * Found 8 updates and 73 categories in search; evaluated appl. rules of 693 out of 1048 deployed entities
Agent	Reporting status event with 8 installable, 92 installed,  0 installed pending, 0 failed and 0 downloaded updates
Agent	*********
Agent	**  END  **  Agent: Finding updates [CallerId = ]
Agent	*************
Report	REPORT EVENT: {A4CA39D6-71D6-48DB-B678-7A793B95B2A0}	2014-10-16 21:01:20:736-0400	1	147 [AGENT_DETECTION_FINISHED]	101	{00000000-0000-0000-0000-000000000000}	0	0	(null)	Success	Software Synchronization	Windows Update Client successfully detected 8 updates.
Report	REPORT EVENT: {3F841CDC-22AC-4A45-8A6A-C426A1CA65C9}	2014-10-16 21:01:20:736-0400	1	156 [AGENT_STATUS_30]	101	{00000000-0000-0000-0000-000000000000}	0	0	(null)	Success	Pre-Deployment Check	Reporting client status.
COMAPI	>>--  RESUMED  -- COMAPI: Search [ClientId = <NULL>]
Report	CWERReporter finishing event handling. (00000000)
COMAPI	  - Updates found = 8
COMAPI	---------
COMAPI	--  END  --  COMAPI: Search [ClientId = <NULL>]
COMAPI	-------------
COMAPI	-------------
COMAPI	-- START --  COMAPI: Download [ClientId = <NULL>]
COMAPI	---------
COMAPI	  - Forced: No; Download priority: 3; Network Cost Policy: 0
COMAPI	  - Updates in request: 8
COMAPI	  - ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
COMAPI	<<-- SUBMITTED -- COMAPI: Download [ClientId = <NULL>]
DnldMgr	***********  DnldMgr: Begin Downloading Updates [CallerId = ]  ***********
DnldMgr	  * Call ID = {BD88591F-3074-490D-8D97-2D2018AA40F0}
DnldMgr	  * Priority = 3, NetworkCostPolicy = 0, Interactive = 1, Owner is system = 0, Explicit proxy = 1, Proxy session id = -1, ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}
DnldMgr	  * Updates to download = 8
Agent	  *   Title = Security Update for Windows Server 2012 (KB2853587)
Agent	  *   UpdateId = {CD2A752F-FF51-46A5-8134-54DD0AE32D2A}.202
Agent	  *     Bundles 1 updates:
Agent	  *       {1AAF7D9A-3BFF-4DA1-8809-E120E4B5EECE}.202
Agent	  *   Title = Security Update for Windows Server 2012 (KB2923392)
Agent	  *   UpdateId = {4193EAE0-AE33-4774-B479-D9660D15E5F2}.201
Agent	  *     Bundles 1 updates:
Agent	  *       {86CCFF78-28E7-4C1A-98E6-2B2C762D4BB6}.201
Agent	  *   Title = Security Update for Windows Server 2012 (KB2973501)
Agent	  *   UpdateId = {2346EB42-185C-49CC-9856-190C294FE502}.202
Agent	  *     Bundles 1 updates:
Agent	  *       {041EDA5D-FF28-450B-AA8C-557161884100}.201
Agent	  *   Title = Security Update for Microsoft .NET Framework 4.5, 4.5.1 and 4.5.2 on Windows 8 and Windows Server 2012 x64 (KB2978042)
Agent	  *   UpdateId = {8001616A-1D31-4D17-B3DC-861E3CE0C3E3}.202
Agent	  *     Bundles 1 updates:
Agent	  *       {5CFECF17-2661-4D81-9211-6B85CF760867}.202
Agent	  *   Title = Security Update for Microsoft .NET Framework 4.5, 4.5.1 and 4.5.2 on Windows 8 and Windows Server 2012 x64 (KB2979577)
Agent	  *   UpdateId = {C822D00A-FEC3-4B65-8F63-6E6BEA292944}.203
Agent	  *     Bundles 1 updates:
Agent	  *       {0D796BFF-1B7A-41D0-9E20-D7087F570410}.201
Agent	  *   Title = Update for Windows Server 2012 (KB2995387)
Agent	  *   UpdateId = {FD33CBA9-736E-4E42-8FC6-91F5534670C6}.200
Agent	  *     Bundles 1 updates:
Agent	  *       {D5D6C690-7BCA-441B-9319-3278EB1E55AE}.200
Agent	  *   Title = Security Update for Windows Server 2012 (KB3000061)
Agent	  *   UpdateId = {DF82A201-7E54-420E-A08C-3281F731C3D7}.202
Agent	  *     Bundles 1 updates:
Agent	  *       {E396BB10-86E0-4C7D-8E26-8B864103FE74}.201
Agent	  *   Title = Update for Windows Server 2012 (KB3000988)
Agent	  *   UpdateId = {957ACF74-78FB-4045-91E5-A8714DD0915F}.200
Agent	  *     Bundles 1 updates:
Agent	  *       {7380A2AB-4BC4-476C-8AAF-8A045C6BA908}.200
DnldMgr	No locked revisions found for update CD2A752F-FF51-46A5-8134-54DD0AE32D2A; locking the user-specified revision.
DnldMgr	Adding revision ID 202 for update CD2A752F-FF51-46A5-8134-54DD0AE32D2A to the lock revision cache.
DnldMgr	No locked revisions found for update 1AAF7D9A-3BFF-4DA1-8809-E120E4B5EECE; locking the user-specified revision.
DnldMgr	Adding revision ID 202 for update 1AAF7D9A-3BFF-4DA1-8809-E120E4B5EECE to the lock revision cache.
DnldMgr	No locked revisions found for update 4193EAE0-AE33-4774-B479-D9660D15E5F2; locking the user-specified revision.
DnldMgr	Adding revision ID 201 for update 4193EAE0-AE33-4774-B479-D9660D15E5F2 to the lock revision cache.
DnldMgr	No locked revisions found for update 86CCFF78-28E7-4C1A-98E6-2B2C762D4BB6; locking the user-specified revision.
DnldMgr	Adding revision ID 201 for update 86CCFF78-28E7-4C1A-98E6-2B2C762D4BB6 to the lock revision cache.
DnldMgr	No locked revisions found for update 2346EB42-185C-49CC-9856-190C294FE502; locking the user-specified revision.
DnldMgr	Adding revision ID 202 for update 2346EB42-185C-49CC-9856-190C294FE502 to the lock revision cache.
DnldMgr	No locked revisions found for update 041EDA5D-FF28-450B-AA8C-557161884100; locking the user-specified revision.
DnldMgr	Adding revision ID 201 for update 041EDA5D-FF28-450B-AA8C-557161884100 to the lock revision cache.
DnldMgr	No locked revisions found for update 8001616A-1D31-4D17-B3DC-861E3CE0C3E3; locking the user-specified revision.
DnldMgr	Adding revision ID 202 for update 8001616A-1D31-4D17-B3DC-861E3CE0C3E3 to the lock revision cache.
DnldMgr	No locked revisions found for update 5CFECF17-2661-4D81-9211-6B85CF760867; locking the user-specified revision.
DnldMgr	Adding revision ID 202 for update 5CFECF17-2661-4D81-9211-6B85CF760867 to the lock revision cache.
DnldMgr	No locked revisions found for update C822D00A-FEC3-4B65-8F63-6E6BEA292944; locking the user-specified revision.
DnldMgr	Adding revision ID 203 for update C822D00A-FEC3-4B65-8F63-6E6BEA292944 to the lock revision cache.
DnldMgr	No locked revisions found for update 0D796BFF-1B7A-41D0-9E20-D7087F570410; locking the user-specified revision.
DnldMgr	Adding revision ID 201 for update 0D796BFF-1B7A-41D0-9E20-D7087F570410 to the lock revision cache.
DnldMgr	No locked revisions found for update FD33CBA9-736E-4E42-8FC6-91F5534670C6; locking the user-specified revision.
DnldMgr	Adding revision ID 200 for update FD33CBA9-736E-4E42-8FC6-91F5534670C6 to the lock revision cache.
DnldMgr	No locked revisions found for update D5D6C690-7BCA-441B-9319-3278EB1E55AE; locking the user-specified revision.
DnldMgr	Adding revision ID 200 for update D5D6C690-7BCA-441B-9319-3278EB1E55AE to the lock revision cache.
DnldMgr	No locked revisions found for update DF82A201-7E54-420E-A08C-3281F731C3D7; locking the user-specified revision.
DnldMgr	Adding revision ID 202 for update DF82A201-7E54-420E-A08C-3281F731C3D7 to the lock revision cache.
DnldMgr	No locked revisions found for update E396BB10-86E0-4C7D-8E26-8B864103FE74; locking the user-specified revision.
DnldMgr	Adding revision ID 201 for update E396BB10-86E0-4C7D-8E26-8B864103FE74 to the lock revision cache.
DnldMgr	No locked revisions found for update 957ACF74-78FB-4045-91E5-A8714DD0915F; locking the user-specified revision.
DnldMgr	Adding revision ID 200 for update 957ACF74-78FB-4045-91E5-A8714DD0915F to the lock revision cache.
DnldMgr	No locked revisions found for update 7380A2AB-4BC4-476C-8AAF-8A045C6BA908; locking the user-specified revision.
DnldMgr	Adding revision ID 200 for update 7380A2AB-4BC4-476C-8AAF-8A045C6BA908 to the lock revision cache.
EP	Got WSUS Client/Server URL: "http://wsusserver/ClientWebService/client.asmx"
PT	+++++++++++  PT: Synchronizing file locations  +++++++++++
PT	  + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://wsusserver/ClientWebService/client.asmx
DnldMgr	***********  DnldMgr: New download job [UpdateId = {1AAF7D9A-3BFF-4DA1-8809-E120E4B5EECE}.202]  ***********
DnldMgr	WARNING: CheckIfDirExists returned error 0x80070002.
DnldMgr	  * Queueing update for download handler request generation.
DnldMgr	Generating download request for update {1AAF7D9A-3BFF-4DA1-8809-E120E4B5EECE}.202
Handler	Generating request for CBS update 1AAF7D9A-3BFF-4DA1-8809-E120E4B5EECE in sandbox C:\Windows\SoftwareDistribution\Download\8c62f0bd9a2a79c738ff67ff2d3dc530
Handler	Selecting self-contained because update has express payload but server doesn't support it.
Handler	Selected payload type is ptSelfContained
Handler	Detected download state is dsStart
Handler	Adding windows8-rt-kb2853587-x64.cab (entire file) to request list.
Handler	Request generation for CBS update complete with hr=0x0 and pfResetSandbox=0 
DnldMgr	***********  DnldMgr: New download job [UpdateId = {1AAF7D9A-3BFF-4DA1-8809-E120E4B5EECE}.202]  ***********
DnldMgr	WARNING: CheckIfDirExists returned error 0x80070002.
DnldMgr	  * BITS job initialized, JobId = {B74E24AD-0BC1-4F12-8562-2EACC741B4B3}
DnldMgr	  * Downloading from http://wsusserver/Content/DD/E5743ACAD2AEFCD99979F1680501AD9D120A0BDD.cab to C:\Windows\SoftwareDistribution\Download\8c62f0bd9a2a79c738ff67ff2d3dc530\windows8-rt-kb2853587-x64.cab (full file).
DnldMgr	*********
DnldMgr	**  END  **  DnldMgr: Begin Downloading Updates [CallerId = ]
DnldMgr	*************
DnldMgr	BITS job {B74E24AD-0BC1-4F12-8562-2EACC741B4B3} completed successfully
DnldMgr	CUpdateDownloadJob::GetNetworkCostSwitch() Neither unrestricted or restricted network cost used, so using current cost
DnldMgr	CUpdateDownloadJob::GetNetworkCostSwitch() Neither unrestricted or restricted network cost used, so using current cost
Misc	Validating signature for C:\Windows\SoftwareDistribution\Download\8c62f0bd9a2a79c738ff67ff2d3dc530\windows8-rt-kb2853587-x64.cab with dwProvFlags 0x00000080:
Misc	 Microsoft signed: Yes
DnldMgr	  Download job bytes total = 58979, bytes transferred = 58979
DnldMgr	***********  DnldMgr: New download job [UpdateId = {1AAF7D9A-3BFF-4DA1-8809-E120E4B5EECE}.202]  ***********
DnldMgr	  * Queueing update for download handler request generation.
DnldMgr	Generating download request for update {1AAF7D9A-3BFF-4DA1-8809-E120E4B5EECE}.202
Handler	Generating request for CBS update 1AAF7D9A-3BFF-4DA1-8809-E120E4B5EECE in sandbox C:\Windows\SoftwareDistribution\Download\8c62f0bd9a2a79c738ff67ff2d3dc530
Handler	Selecting self-contained because update has express payload but server doesn't support it.
Handler	Selected payload type is ptSelfContained
Handler	Detected download state is dsHavePackage
Handler	Request generation for CBS update complete with hr=0x0 and pfResetSandbox=0 
DnldMgr	***********  DnldMgr: New download job [UpdateId = {1AAF7D9A-3BFF-4DA1-8809-E120E4B5EECE}.202]  ***********
DnldMgr	  * All files for update were already downloaded and are valid.
DnldMgr	***********  DnldMgr: New download job [UpdateId = {86CCFF78-28E7-4C1A-98E6-2B2C762D4BB6}.201]  ***********
DnldMgr	WARNING: CheckIfDirExists returned error 0x80070002.
DnldMgr	  * Queueing update for download handler request generation.
DnldMgr	Generating download request for update {86CCFF78-28E7-4C1A-98E6-2B2C762D4BB6}.201
Handler	Generating request for CBS update 86CCFF78-28E7-4C1A-98E6-2B2C762D4BB6 in sandbox C:\Windows\SoftwareDistribution\Download\0d3ba17529129e6f7a167d67d018a0a7
Handler	Selecting self-contained because update has express payload but server doesn't support it.
Handler	Selected payload type is ptSelfContained
Handler	Detected download state is dsStart
Handler	Adding windows8-rt-kb2923392-x64.cab (entire file) to request list.
Handler	Request generation for CBS update complete with hr=0x0 and pfResetSandbox=0 
DnldMgr	***********  DnldMgr: New download job [UpdateId = {86CCFF78-28E7-4C1A-98E6-2B2C762D4BB6}.201]  ***********
DnldMgr	WARNING: CheckIfDirExists returned error 0x80070002.
DnldMgr	  * BITS job initialized, JobId = {810D170F-D6E6-494B-98F9-6EA8EAAFB70C}
DnldMgr	  * Downloading from http://wsusserver/Content/56/2CAD1BFE488CF3B0EB93F48400A542CB72965056.cab to C:\Windows\SoftwareDistribution\Download\0d3ba17529129e6f7a167d67d018a0a7\windows8-rt-kb2923392-x64.cab (full file).
DnldMgr	BITS job {810D170F-D6E6-494B-98F9-6EA8EAAFB70C} completed successfully
DnldMgr	CUpdateDownloadJob::GetNetworkCostSwitch() Neither unrestricted or restricted network cost used, so using current cost
Misc	Validating signature for C:\Windows\SoftwareDistribution\Download\0d3ba17529129e6f7a167d67d018a0a7\windows8-rt-kb2923392-x64.cab with dwProvFlags 0x00000080:
Misc	 Microsoft signed: Yes
DnldMgr	  Download job bytes total = 500177, bytes transferred = 500177
DnldMgr	***********  DnldMgr: New download job [UpdateId = {86CCFF78-28E7-4C1A-98E6-2B2C762D4BB6}.201]  ***********
DnldMgr	  * Queueing update for download handler request generation.
DnldMgr	Generating download request for update {86CCFF78-28E7-4C1A-98E6-2B2C762D4BB6}.201
Handler	Generating request for CBS update 86CCFF78-28E7-4C1A-98E6-2B2C762D4BB6 in sandbox C:\Windows\SoftwareDistribution\Download\0d3ba17529129e6f7a167d67d018a0a7
Handler	Selecting self-contained because update has express payload but server doesn't support it.
Handler	Selected payload type is ptSelfContained
Handler	Detected download state is dsHavePackage
Handler	Request generation for CBS update complete with hr=0x0 and pfResetSandbox=0 
DnldMgr	***********  DnldMgr: New download job [UpdateId = {86CCFF78-28E7-4C1A-98E6-2B2C762D4BB6}.201]  ***********
DnldMgr	  * All files for update were already downloaded and are valid.
DnldMgr	***********  DnldMgr: New download job [UpdateId = {041EDA5D-FF28-450B-AA8C-557161884100}.201]  ***********
DnldMgr	WARNING: CheckIfDirExists returned error 0x80070002.
DnldMgr	  * Queueing update for download handler request generation.
DnldMgr	Generating download request for update {041EDA5D-FF28-450B-AA8C-557161884100}.201
Handler	Generating request for CBS update 041EDA5D-FF28-450B-AA8C-557161884100 in sandbox C:\Windows\SoftwareDistribution\Download\debc00fbc52d73e267c6bc2e1d2d04de
Handler	Selecting self-contained because update has express payload but server doesn't support it.
Handler	Selected payload type is ptSelfContained
Handler	Detected download state is dsStart
Handler	Adding windows8-rt-kb2973501-x64.cab (entire file) to request list.
Handler	Request generation for CBS update complete with hr=0x0 and pfResetSandbox=0 
DnldMgr	***********  DnldMgr: New download job [UpdateId = {041EDA5D-FF28-450B-AA8C-557161884100}.201]  ***********
DnldMgr	WARNING: CheckIfDirExists returned error 0x80070002.
DnldMgr	  * BITS job initialized, JobId = {5D9BAB80-C055-4BB5-A445-58D78D37D7AA}
DnldMgr	  * Downloading from http://wsusserver/Content/D3/05BDA5A7A88A70739E71C166263CC40C45A2ADD3.cab to C:\Windows\SoftwareDistribution\Download\debc00fbc52d73e267c6bc2e1d2d04de\windows8-rt-kb2973501-x64.cab (full file).
DnldMgr	BITS job {5D9BAB80-C055-4BB5-A445-58D78D37D7AA} completed successfully
DnldMgr	CUpdateDownloadJob::GetNetworkCostSwitch() Neither unrestricted or restricted network cost used, so using current cost
Misc	Validating signature for C:\Windows\SoftwareDistribution\Download\debc00fbc52d73e267c6bc2e1d2d04de\windows8-rt-kb2973501-x64.cab with dwProvFlags 0x00000080:
Misc	 Microsoft signed: Yes
DnldMgr	  Download job bytes total = 8580759, bytes transferred = 8580759
DnldMgr	***********  DnldMgr: New download job [UpdateId = {041EDA5D-FF28-450B-AA8C-557161884100}.201]  ***********
DnldMgr	  * Queueing update for download handler request generation.
DnldMgr	Generating download request for update {041EDA5D-FF28-450B-AA8C-557161884100}.201
Handler	Generating request for CBS update 041EDA5D-FF28-450B-AA8C-557161884100 in sandbox C:\Windows\SoftwareDistribution\Download\debc00fbc52d73e267c6bc2e1d2d04de
Handler	Selecting self-contained because update has express payload but server doesn't support it.
Handler	Selected payload type is ptSelfContained
Handler	Detected download state is dsHavePackage
Handler	Request generation for CBS update complete with hr=0x0 and pfResetSandbox=0 
DnldMgr	***********  DnldMgr: New download job [UpdateId = {041EDA5D-FF28-450B-AA8C-557161884100}.201]  ***********
DnldMgr	  * All files for update were already downloaded and are valid.
DnldMgr	***********  DnldMgr: New download job [UpdateId = {5CFECF17-2661-4D81-9211-6B85CF760867}.202]  ***********
DnldMgr	WARNING: CheckIfDirExists returned error 0x80070002.
DnldMgr	  * Queueing update for download handler request generation.
DnldMgr	Generating download request for update {5CFECF17-2661-4D81-9211-6B85CF760867}.202
Handler	Generating request for CBS update 5CFECF17-2661-4D81-9211-6B85CF760867 in sandbox C:\Windows\SoftwareDistribution\Download\68f04df682752774f0b5441ae642a9a4
Handler	Selecting self-contained because update has express payload but server doesn't support it.
Handler	Selected payload type is ptSelfContained
Handler	Detected download state is dsStart
Handler	Adding windows8-rt-kb2978042-x64.cab (entire file) to request list.
Handler	Request generation for CBS update complete with hr=0x0 and pfResetSandbox=0 
DnldMgr	***********  DnldMgr: New download job [UpdateId = {5CFECF17-2661-4D81-9211-6B85CF760867}.202]  ***********
DnldMgr	WARNING: CheckIfDirExists returned error 0x80070002.
DnldMgr	  * BITS job initialized, JobId = {717CEFF6-05A0-4E81-83EC-DD900B1D675E}
DnldMgr	  * Downloading from http://wsusserver/Content/8B/E6C82EE971D152ADB9DEC1906EA9D53D7638328B.cab to C:\Windows\SoftwareDistribution\Download\68f04df682752774f0b5441ae642a9a4\windows8-rt-kb2978042-x64.cab (full file).
DnldMgr	BITS job {717CEFF6-05A0-4E81-83EC-DD900B1D675E} completed successfully
DnldMgr	CUpdateDownloadJob::GetNetworkCostSwitch() Neither unrestricted or restricted network cost used, so using current cost
Misc	Validating signature for C:\Windows\SoftwareDistribution\Download\68f04df682752774f0b5441ae642a9a4\windows8-rt-kb2978042-x64.cab with dwProvFlags 0x00000080:
Misc	 Microsoft signed: Yes
DnldMgr	  Download job bytes total = 2951091, bytes transferred = 2951091
DnldMgr	***********  DnldMgr: New download job [UpdateId = {5CFECF17-2661-4D81-9211-6B85CF760867}.202]  ***********
DnldMgr	  * Queueing update for download handler request generation.
DnldMgr	Generating download request for update {5CFECF17-2661-4D81-9211-6B85CF760867}.202
Handler	Generating request for CBS update 5CFECF17-2661-4D81-9211-6B85CF760867 in sandbox C:\Windows\SoftwareDistribution\Download\68f04df682752774f0b5441ae642a9a4
Handler	Selecting self-contained because update has express payload but server doesn't support it.
Handler	Selected payload type is ptSelfContained
Handler	Detected download state is dsHavePackage
Handler	Request generation for CBS update complete with hr=0x0 and pfResetSandbox=0 
DnldMgr	***********  DnldMgr: New download job [UpdateId = {5CFECF17-2661-4D81-9211-6B85CF760867}.202]  ***********
DnldMgr	  * All files for update were already downloaded and are valid.
DnldMgr	***********  DnldMgr: New download job [UpdateId = {0D796BFF-1B7A-41D0-9E20-D7087F570410}.201]  ***********
DnldMgr	WARNING: CheckIfDirExists returned error 0x80070002.
DnldMgr	  * Queueing update for download handler request generation.
DnldMgr	Generating download request for update {0D796BFF-1B7A-41D0-9E20-D7087F570410}.201
Handler	Generating request for CBS update 0D796BFF-1B7A-41D0-9E20-D7087F570410 in sandbox C:\Windows\SoftwareDistribution\Download\9fea4aca66b4c2de886ddcea9c313b57
Handler	Selecting self-contained because update has express payload but server doesn't support it.
Handler	Selected payload type is ptSelfContained
Handler	Detected download state is dsStart
Handler	Adding windows8-rt-kb2979577-x64.cab (entire file) to request list.
Handler	Request generation for CBS update complete with hr=0x0 and pfResetSandbox=0 
DnldMgr	***********  DnldMgr: New download job [UpdateId = {0D796BFF-1B7A-41D0-9E20-D7087F570410}.201]  ***********
DnldMgr	WARNING: CheckIfDirExists returned error 0x80070002.
DnldMgr	  * BITS job initialized, JobId = {F801B6AB-04F3-4783-8E64-C5E816022C6A}
DnldMgr	  * Downloading from http://wsusserver/Content/DE/02C29E96F798623EDDB7ADDA4C53C80C705455DE.cab to C:\Windows\SoftwareDistribution\Download\9fea4aca66b4c2de886ddcea9c313b57\windows8-rt-kb2979577-x64.cab (full file).
DnldMgr	BITS job {F801B6AB-04F3-4783-8E64-C5E816022C6A} completed successfully
DnldMgr	CUpdateDownloadJob::GetNetworkCostSwitch() Neither unrestricted or restricted network cost used, so using current cost
Misc	Validating signature for C:\Windows\SoftwareDistribution\Download\9fea4aca66b4c2de886ddcea9c313b57\windows8-rt-kb2979577-x64.cab with dwProvFlags 0x00000080:
Misc	 Microsoft signed: Yes
DnldMgr	  Download job bytes total = 969469, bytes transferred = 969469
DnldMgr	***********  DnldMgr: New download job [UpdateId = {0D796BFF-1B7A-41D0-9E20-D7087F570410}.201]  ***********
DnldMgr	  * Queueing update for download handler request generation.
DnldMgr	Generating download request for update {0D796BFF-1B7A-41D0-9E20-D7087F570410}.201
Handler	Generating request for CBS update 0D796BFF-1B7A-41D0-9E20-D7087F570410 in sandbox C:\Windows\SoftwareDistribution\Download\9fea4aca66b4c2de886ddcea9c313b57
Handler	Selecting self-contained because update has express payload but server doesn't support it.
Handler	Selected payload type is ptSelfContained
Handler	Detected download state is dsHavePackage
Handler	Request generation for CBS update complete with hr=0x0 and pfResetSandbox=0 
DnldMgr	***********  DnldMgr: New download job [UpdateId = {0D796BFF-1B7A-41D0-9E20-D7087F570410}.201]  ***********
DnldMgr	  * All files for update were already downloaded and are valid.
DnldMgr	***********  DnldMgr: New download job [UpdateId = {D5D6C690-7BCA-441B-9319-3278EB1E55AE}.200]  ***********
DnldMgr	WARNING: CheckIfDirExists returned error 0x80070002.
DnldMgr	  * Queueing update for download handler request generation.
DnldMgr	Generating download request for update {D5D6C690-7BCA-441B-9319-3278EB1E55AE}.200
Handler	Generating request for CBS update D5D6C690-7BCA-441B-9319-3278EB1E55AE in sandbox C:\Windows\SoftwareDistribution\Download\2018d4c85979fa8f21eb9e2fecda5f75
Handler	Selecting self-contained because update has express payload but server doesn't support it.
Handler	Selected payload type is ptSelfContained
Handler	Detected download state is dsStart
Handler	Adding windows8-rt-kb2995387-x64.cab (entire file) to request list.
Handler	Request generation for CBS update complete with hr=0x0 and pfResetSandbox=0 
DnldMgr	***********  DnldMgr: New download job [UpdateId = {D5D6C690-7BCA-441B-9319-3278EB1E55AE}.200]  ***********
DnldMgr	WARNING: CheckIfDirExists returned error 0x80070002.
DnldMgr	  * BITS job initialized, JobId = {4E0BFB47-4E72-418A-AB0E-8F342AE5DB56}
DnldMgr	  * Downloading from http://wsusserver/Content/A9/6CB3E80BD08277A99B0A11D90DD2081B34B82BA9.cab to C:\Windows\SoftwareDistribution\Download\2018d4c85979fa8f21eb9e2fecda5f75\windows8-rt-kb2995387-x64.cab (full file).
Report	REPORT EVENT: {C61B89A2-C92F-45C0-9955-E07145849911}	2014-10-16 21:01:32:874-0400	1	162 [AGENT_DOWNLOAD_SUCCEEDED]	101	{CD2A752F-FF51-46A5-8134-54DD0AE32D2A}	202	0	(null)	Success	Content Download	Download succeeded.
Report	REPORT EVENT: {9DB84D85-ED5E-47EF-B397-16AD39A03D70}	2014-10-16 21:01:32:998-0400	1	162 [AGENT_DOWNLOAD_SUCCEEDED]	101	{4193EAE0-AE33-4774-B479-D9660D15E5F2}	201	0	(null)	Success	Content Download	Download succeeded.
Report	REPORT EVENT: {E0940842-C059-4B40-BE78-27E063853CB1}	2014-10-16 21:01:33:342-0400	1	162 [AGENT_DOWNLOAD_SUCCEEDED]	101	{2346EB42-185C-49CC-9856-190C294FE502}	202	0	(null)	Success	Content Download	Download succeeded.
Report	REPORT EVENT: {30E65A27-7451-48DE-839E-83CA4E1A6927}	2014-10-16 21:01:33:544-0400	1	162 [AGENT_DOWNLOAD_SUCCEEDED]	101	{8001616A-1D31-4D17-B3DC-861E3CE0C3E3}	202	0	(null)	Success	Content Download	Download succeeded.
Report	REPORT EVENT: {95C04AD5-642D-4002-9CB5-8B4231C46837}	2014-10-16 21:01:33:700-0400	1	162 [AGENT_DOWNLOAD_SUCCEEDED]	101	{C822D00A-FEC3-4B65-8F63-6E6BEA292944}	203	0	(null)	Success	Content Download	Download succeeded.
Report	CWERReporter finishing event handling. (00000000)
DnldMgr	BITS job {4E0BFB47-4E72-418A-AB0E-8F342AE5DB56} completed successfully
DnldMgr	CUpdateDownloadJob::GetNetworkCostSwitch() Neither unrestricted or restricted network cost used, so using current cost
Misc	Validating signature for C:\Windows\SoftwareDistribution\Download\2018d4c85979fa8f21eb9e2fecda5f75\windows8-rt-kb2995387-x64.cab with dwProvFlags 0x00000080:
Misc	 Microsoft signed: Yes
DnldMgr	  Download job bytes total = 20260063, bytes transferred = 20260063
DnldMgr	***********  DnldMgr: New download job [UpdateId = {D5D6C690-7BCA-441B-9319-3278EB1E55AE}.200]  ***********
DnldMgr	  * Queueing update for download handler request generation.
DnldMgr	Generating download request for update {D5D6C690-7BCA-441B-9319-3278EB1E55AE}.200
Handler	Generating request for CBS update D5D6C690-7BCA-441B-9319-3278EB1E55AE in sandbox C:\Windows\SoftwareDistribution\Download\2018d4c85979fa8f21eb9e2fecda5f75
Handler	Selecting self-contained because update has express payload but server doesn't support it.
Handler	Selected payload type is ptSelfContained
Handler	Detected download state is dsHavePackage
Handler	Request generation for CBS update complete with hr=0x0 and pfResetSandbox=0 
DnldMgr	***********  DnldMgr: New download job [UpdateId = {D5D6C690-7BCA-441B-9319-3278EB1E55AE}.200]  ***********
DnldMgr	  * All files for update were already downloaded and are valid.
DnldMgr	***********  DnldMgr: New download job [UpdateId = {E396BB10-86E0-4C7D-8E26-8B864103FE74}.201]  ***********
DnldMgr	WARNING: CheckIfDirExists returned error 0x80070002.
DnldMgr	  * Queueing update for download handler request generation.
DnldMgr	Generating download request for update {E396BB10-86E0-4C7D-8E26-8B864103FE74}.201
Handler	Generating request for CBS update E396BB10-86E0-4C7D-8E26-8B864103FE74 in sandbox C:\Windows\SoftwareDistribution\Download\47d1a26b6ef9995305b237cc1c7f3432
Handler	Selecting self-contained because update has express payload but server doesn't support it.
Handler	Selected payload type is ptSelfContained
Handler	Detected download state is dsStart
Handler	Adding windows8-rt-kb3000061-x64.cab (entire file) to request list.
Handler	Request generation for CBS update complete with hr=0x0 and pfResetSandbox=0 
DnldMgr	***********  DnldMgr: New download job [UpdateId = {E396BB10-86E0-4C7D-8E26-8B864103FE74}.201]  ***********
DnldMgr	WARNING: CheckIfDirExists returned error 0x80070002.
DnldMgr	  * BITS job initialized, JobId = {E47CFB47-5B8F-4A37-B639-0C2386F033FA}
DnldMgr	  * Downloading from http://wsusserver/Content/2B/30A068C8F4A986FB1DA95E6C16A8376927D6332B.cab to C:\Windows\SoftwareDistribution\Download\47d1a26b6ef9995305b237cc1c7f3432\windows8-rt-kb3000061-x64.cab (full file).
DnldMgr	BITS job {E47CFB47-5B8F-4A37-B639-0C2386F033FA} completed successfully
DnldMgr	CUpdateDownloadJob::GetNetworkCostSwitch() Neither unrestricted or restricted network cost used, so using current cost
Misc	Validating signature for C:\Windows\SoftwareDistribution\Download\47d1a26b6ef9995305b237cc1c7f3432\windows8-rt-kb3000061-x64.cab with dwProvFlags 0x00000080:
Misc	 Microsoft signed: Yes
DnldMgr	  Download job bytes total = 2323339, bytes transferred = 2323339
DnldMgr	***********  DnldMgr: New download job [UpdateId = {E396BB10-86E0-4C7D-8E26-8B864103FE74}.201]  ***********
DnldMgr	  * Queueing update for download handler request generation.
DnldMgr	Generating download request for update {E396BB10-86E0-4C7D-8E26-8B864103FE74}.201
Handler	Generating request for CBS update E396BB10-86E0-4C7D-8E26-8B864103FE74 in sandbox C:\Windows\SoftwareDistribution\Download\47d1a26b6ef9995305b237cc1c7f3432
Handler	Selecting self-contained because update has express payload but server doesn't support it.
Handler	Selected payload type is ptSelfContained
Handler	Detected download state is dsHavePackage
Handler	Request generation for CBS update complete with hr=0x0 and pfResetSandbox=0 
DnldMgr	***********  DnldMgr: New download job [UpdateId = {E396BB10-86E0-4C7D-8E26-8B864103FE74}.201]  ***********
DnldMgr	  * All files for update were already downloaded and are valid.
DnldMgr	***********  DnldMgr: New download job [UpdateId = {7380A2AB-4BC4-476C-8AAF-8A045C6BA908}.200]  ***********
DnldMgr	WARNING: CheckIfDirExists returned error 0x80070002.
DnldMgr	  * Queueing update for download handler request generation.
DnldMgr	Generating download request for update {7380A2AB-4BC4-476C-8AAF-8A045C6BA908}.200
Handler	Generating request for CBS update 7380A2AB-4BC4-476C-8AAF-8A045C6BA908 in sandbox C:\Windows\SoftwareDistribution\Download\5758d9b681af82eac26404b1316f8e5e
Handler	Selecting self-contained because update has express payload but server doesn't support it.
Handler	Selected payload type is ptSelfContained
Handler	Detected download state is dsStart
Handler	Adding windows8-rt-kb3000988-x64.cab (entire file) to request list.
Handler	Request generation for CBS update complete with hr=0x0 and pfResetSandbox=0 
DnldMgr	***********  DnldMgr: New download job [UpdateId = {7380A2AB-4BC4-476C-8AAF-8A045C6BA908}.200]  ***********
DnldMgr	WARNING: CheckIfDirExists returned error 0x80070002.
DnldMgr	  * BITS job initialized, JobId = {C51DECC8-58EF-45BA-A4E0-1849221356A6}
DnldMgr	  * Downloading from http://wsusserver/Content/1D/CA446010058397415CCD8CDC80C2B9F1AA04C11D.cab to C:\Windows\SoftwareDistribution\Download\5758d9b681af82eac26404b1316f8e5e\windows8-rt-kb3000988-x64.cab (full file).
DnldMgr	BITS job {C51DECC8-58EF-45BA-A4E0-1849221356A6} completed successfully
DnldMgr	CUpdateDownloadJob::GetNetworkCostSwitch() Neither unrestricted or restricted network cost used, so using current cost
Misc	Validating signature for C:\Windows\SoftwareDistribution\Download\5758d9b681af82eac26404b1316f8e5e\windows8-rt-kb3000988-x64.cab with dwProvFlags 0x00000080:
Misc	 Microsoft signed: Yes
DnldMgr	  Download job bytes total = 9959275, bytes transferred = 9959275
DnldMgr	***********  DnldMgr: New download job [UpdateId = {7380A2AB-4BC4-476C-8AAF-8A045C6BA908}.200]  ***********
DnldMgr	  * Queueing update for download handler request generation.
DnldMgr	Generating download request for update {7380A2AB-4BC4-476C-8AAF-8A045C6BA908}.200
Handler	Generating request for CBS update 7380A2AB-4BC4-476C-8AAF-8A045C6BA908 in sandbox C:\Windows\SoftwareDistribution\Download\5758d9b681af82eac26404b1316f8e5e
Handler	Selecting self-contained because update has express payload but server doesn't support it.
Handler	Selected payload type is ptSelfContained
Handler	Detected download state is dsHavePackage
Handler	Request generation for CBS update complete with hr=0x0 and pfResetSandbox=0 
DnldMgr	***********  DnldMgr: New download job [UpdateId = {7380A2AB-4BC4-476C-8AAF-8A045C6BA908}.200]  ***********
DnldMgr	  * All files for update were already downloaded and are valid.
COMAPI	>>--  RESUMED  -- COMAPI: Download [ClientId = <NULL>]
COMAPI	  - Download call complete (succeeded = 8, succeeded with errors = 0, failed = 0, unaccounted = 0)
COMAPI	---------
COMAPI	--  END  --  COMAPI: Download [ClientId = <NULL>]
COMAPI	-------------
COMAPI	-------------
COMAPI	-- START --  COMAPI: Install [ClientId = <NULL>]
COMAPI	---------
COMAPI	  - Allow source prompts: Yes; Forced: No; Force quiet: No; Attempt close apps if necessary: No
COMAPI	  - Updates in request: 8
COMAPI	  - ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
Agent	Beginning install of conventional work item
COMAPI	  - Updates to install = 8
COMAPI	<<-- SUBMITTED -- COMAPI: Install [ClientId = <NULL>]
Agent	*************
Agent	** START **  Agent: Installing updates [CallerId = ]
Agent	*********
Agent	  * Updates to install = 8
Agent	  *   Title = Security Update for Windows Server 2012 (KB2853587)
Agent	  *   UpdateId = {CD2A752F-FF51-46A5-8134-54DD0AE32D2A}.202
Agent	  *     Bundles 1 updates:
Agent	  *       {1AAF7D9A-3BFF-4DA1-8809-E120E4B5EECE}.202
Agent	  *   Title = Security Update for Windows Server 2012 (KB2923392)
Agent	  *   UpdateId = {4193EAE0-AE33-4774-B479-D9660D15E5F2}.201
Agent	  *     Bundles 1 updates:
Agent	  *       {86CCFF78-28E7-4C1A-98E6-2B2C762D4BB6}.201
Agent	  *   Title = Security Update for Windows Server 2012 (KB2973501)
Agent	  *   UpdateId = {2346EB42-185C-49CC-9856-190C294FE502}.202
Agent	  *     Bundles 1 updates:
Agent	  *       {041EDA5D-FF28-450B-AA8C-557161884100}.201
Agent	  *   Title = Security Update for Microsoft .NET Framework 4.5, 4.5.1 and 4.5.2 on Windows 8 and Windows Server 2012 x64 (KB2978042)
Agent	  *   UpdateId = {8001616A-1D31-4D17-B3DC-861E3CE0C3E3}.202
Agent	  *     Bundles 1 updates:
Agent	  *       {5CFECF17-2661-4D81-9211-6B85CF760867}.202
Agent	  *   Title = Security Update for Microsoft .NET Framework 4.5, 4.5.1 and 4.5.2 on Windows 8 and Windows Server 2012 x64 (KB2979577)
Agent	  *   UpdateId = {C822D00A-FEC3-4B65-8F63-6E6BEA292944}.203
Agent	  *     Bundles 1 updates:
Agent	  *       {0D796BFF-1B7A-41D0-9E20-D7087F570410}.201
Agent	  *   Title = Update for Windows Server 2012 (KB2995387)
Agent	  *   UpdateId = {FD33CBA9-736E-4E42-8FC6-91F5534670C6}.200
Agent	  *     Bundles 1 updates:
Agent	  *       {D5D6C690-7BCA-441B-9319-3278EB1E55AE}.200
Agent	  *   Title = Security Update for Windows Server 2012 (KB3000061)
Agent	  *   UpdateId = {DF82A201-7E54-420E-A08C-3281F731C3D7}.202
Agent	  *     Bundles 1 updates:
Agent	  *       {E396BB10-86E0-4C7D-8E26-8B864103FE74}.201
Agent	  *   Title = Update for Windows Server 2012 (KB3000988)
Agent	  *   UpdateId = {957ACF74-78FB-4045-91E5-A8714DD0915F}.200
Agent	  *     Bundles 1 updates:
Agent	  *       {7380A2AB-4BC4-476C-8AAF-8A045C6BA908}.200
Handler	Attempting to create remote handler process as myuser in session 2
DnldMgr	Preparing update for install, updateId = {1AAF7D9A-3BFF-4DA1-8809-E120E4B5EECE}.202.
Misc	===========  Logging initialized (build: 7.8.9200.17099, tz: -0400)  ===========
Misc	  = Process: C:\Windows\system32\wuauclt.exe
Misc	  = Module: C:\Windows\SYSTEM32\wuaueng.dll
Handler	:::::::::::::
Handler	:: START ::  Handler: CBS Install
Handler	:::::::::
Handler	Starting install of CBS update 1AAF7D9A-3BFF-4DA1-8809-E120E4B5EECE
Handler	CBS session identity: 30402981_3864500492
Handler	CBS package identity: Package_for_KB2853587~31bf3856ad364e35~amd64~~6.2.1.1
Handler	Installing self-contained with source=C:\Windows\SoftwareDistribution\Download\c21818e00e3275900ed08a1e2ff5db7f\windows8-rt-kb2853587-x64.cab, workingdir=C:\Windows\SoftwareDistribution\Download\c21818e00e3275900ed08a1e2ff5db7f\inst
Handler	Requesting post-reboot reporting for package Package_for_KB2853587~31bf3856ad364e35~amd64~~6.2.1.1.
Handler	Completed install of CBS update with type=3, requiresReboot=1, installerError=0, hr=0x0
Handler	:::::::::
Handler	::  END  ::  Handler: CBS Install
Handler	:::::::::::::
AU	Preventing expiration of polled reporting events until next restart
DnldMgr	Preparing update for install, updateId = {86CCFF78-28E7-4C1A-98E6-2B2C762D4BB6}.201.
Handler	:::::::::::::
Handler	:: START ::  Handler: CBS Install
Handler	:::::::::
Handler	Starting install of CBS update 86CCFF78-28E7-4C1A-98E6-2B2C762D4BB6
Handler	CBS session identity: 30402981_3878852909
Handler	CBS package identity: Package_for_KB2923392~31bf3856ad364e35~amd64~~6.2.1.1
Handler	Installing self-contained with source=C:\Windows\SoftwareDistribution\Download\e5fa293e91f546a672ac78699659796b\windows8-rt-kb2923392-x64.cab, workingdir=C:\Windows\SoftwareDistribution\Download\e5fa293e91f546a672ac78699659796b\inst
Report	REPORT EVENT: {4E21F200-6A83-4346-804A-1A4F34A308DE}	2014-10-16 21:01:34:356-0400	1	162 [AGENT_DOWNLOAD_SUCCEEDED]	101	{FD33CBA9-736E-4E42-8FC6-91F5534670C6}	200	0	(null)	Success	Content Download	Download succeeded.
Report	REPORT EVENT: {A506EF29-8D86-44D8-80A8-BD4C49FBD6D5}	2014-10-16 21:01:34:527-0400	1	162 [AGENT_DOWNLOAD_SUCCEEDED]	101	{DF82A201-7E54-420E-A08C-3281F731C3D7}	202	0	(null)	Success	Content Download	Download succeeded.
Report	REPORT EVENT: {B24BAB44-6287-4C91-87B3-A1A3B135A5AE}	2014-10-16 21:01:34:855-0400	1	162 [AGENT_DOWNLOAD_SUCCEEDED]	101	{957ACF74-78FB-4045-91E5-A8714DD0915F}	200	0	(null)	Success	Content Download	Download succeeded.
Report	REPORT EVENT: {ABA9513E-9FDF-4195-9061-D886BAB2F448}	2014-10-16 21:01:37:476-0400	1	201 [AGENT_INSTALLING_PENDING]	101	{CD2A752F-FF51-46A5-8134-54DD0AE32D2A}	202	240005	(null)	Success	Content Install	Installation pending.
Report	CWERReporter finishing event handling. (00000000)
Handler	Requesting post-reboot reporting for package Package_for_KB2923392~31bf3856ad364e35~amd64~~6.2.1.1.
Handler	Completed install of CBS update with type=3, requiresReboot=1, installerError=0, hr=0x0
Handler	:::::::::
Handler	::  END  ::  Handler: CBS Install
Handler	:::::::::::::
AU	Preventing expiration of polled reporting events until next restart
DnldMgr	Preparing update for install, updateId = {041EDA5D-FF28-450B-AA8C-557161884100}.201.
Handler	:::::::::::::
Handler	:: START ::  Handler: CBS Install
Handler	:::::::::
Handler	Starting install of CBS update 041EDA5D-FF28-450B-AA8C-557161884100
Handler	CBS session identity: 30402981_3898977768
Handler	CBS package identity: Package_for_KB2973501~31bf3856ad364e35~amd64~~6.2.1.4
Handler	Installing self-contained with source=C:\Windows\SoftwareDistribution\Download\85932643c90c0498263f0303ff003e2d\windows8-rt-kb2973501-x64.cab, workingdir=C:\Windows\SoftwareDistribution\Download\85932643c90c0498263f0303ff003e2d\inst
Report	REPORT EVENT: {54547F34-7356-49A5-BE8F-384636863D8F}	2014-10-16 21:01:39:473-0400	1	201 [AGENT_INSTALLING_PENDING]	101	{4193EAE0-AE33-4774-B479-D9660D15E5F2}	201	240005	(null)	Success	Content Install	Installation pending.
Report	CWERReporter finishing event handling. (00000000)
Handler	Requesting post-reboot reporting for package Package_for_KB2973501~31bf3856ad364e35~amd64~~6.2.1.4.
Handler	Completed install of CBS update with type=3, requiresReboot=1, installerError=0, hr=0x0
Handler	:::::::::
Handler	::  END  ::  Handler: CBS Install
Handler	:::::::::::::
AU	Preventing expiration of polled reporting events until next restart
DnldMgr	Preparing update for install, updateId = {5CFECF17-2661-4D81-9211-6B85CF760867}.202.
Handler	:::::::::::::
Handler	:: START ::  Handler: CBS Install
Handler	:::::::::
Handler	Starting install of CBS update 5CFECF17-2661-4D81-9211-6B85CF760867
Handler	CBS session identity: 30402981_3996325907
Handler	CBS package identity: Package_for_KB2978042~31bf3856ad364e35~amd64~~6.2.1.0
Handler	Installing self-contained with source=C:\Windows\SoftwareDistribution\Download\66f978e263d5de45076a28c052dd7777\windows8-rt-kb2978042-x64.cab, workingdir=C:\Windows\SoftwareDistribution\Download\66f978e263d5de45076a28c052dd7777\inst
Handler	Requesting post-reboot reporting for package Package_for_KB2978042~31bf3856ad364e35~amd64~~6.2.1.0.
Handler	Completed install of CBS update with type=3, requiresReboot=1, installerError=0, hr=0x0
Handler	:::::::::
Handler	::  END  ::  Handler: CBS Install
Handler	:::::::::::::
AU	Preventing expiration of polled reporting events until next restart
DnldMgr	Preparing update for install, updateId = {0D796BFF-1B7A-41D0-9E20-D7087F570410}.201.
Handler	:::::::::::::
Handler	:: START ::  Handler: CBS Install
Handler	:::::::::
Handler	Starting install of CBS update 0D796BFF-1B7A-41D0-9E20-D7087F570410
Handler	CBS session identity: 30402981_4035015583
Handler	CBS package identity: Package_for_KB2979577~31bf3856ad364e35~amd64~~6.2.1.1
Handler	Installing self-contained with source=C:\Windows\SoftwareDistribution\Download\3e28b9501903e8c5723f4b8e55d15df8\windows8-rt-kb2979577-x64.cab, workingdir=C:\Windows\SoftwareDistribution\Download\3e28b9501903e8c5723f4b8e55d15df8\inst
Report	REPORT EVENT: {0EA6046F-846C-4C19-93EA-AB0E71B76F52}	2014-10-16 21:01:49:207-0400	1	201 [AGENT_INSTALLING_PENDING]	101	{2346EB42-185C-49CC-9856-190C294FE502}	202	240005	(null)	Success	Content Install	Installation pending.
Report	REPORT EVENT: {E0203371-F1E3-4FE2-8D7A-7DED17BE48F1}	2014-10-16 21:01:53:092-0400	1	201 [AGENT_INSTALLING_PENDING]	101	{8001616A-1D31-4D17-B3DC-861E3CE0C3E3}	202	240005	(null)	Success	Content Install	Installation pending.
Report	CWERReporter finishing event handling. (00000000)
Handler	Requesting post-reboot reporting for package Package_for_KB2979577~31bf3856ad364e35~amd64~~6.2.1.1.
Handler	Completed install of CBS update with type=3, requiresReboot=1, installerError=0, hr=0x0
Handler	:::::::::
Handler	::  END  ::  Handler: CBS Install
Handler	:::::::::::::
AU	Preventing expiration of polled reporting events until next restart
DnldMgr	Preparing update for install, updateId = {D5D6C690-7BCA-441B-9319-3278EB1E55AE}.200.
Handler	:::::::::::::
Handler	:: START ::  Handler: CBS Install
Handler	:::::::::
Handler	Starting install of CBS update D5D6C690-7BCA-441B-9319-3278EB1E55AE
Handler	CBS session identity: 30402981_4075265308
Handler	CBS package identity: Package_for_KB2995387~31bf3856ad364e35~amd64~~6.2.1.2
Handler	Installing self-contained with source=C:\Windows\SoftwareDistribution\Download\5c380797af1ae165bf813d087411c52a\windows8-rt-kb2995387-x64.cab, workingdir=C:\Windows\SoftwareDistribution\Download\5c380797af1ae165bf813d087411c52a\inst
Report	REPORT EVENT: {3F463EB9-DA95-46B4-9FA0-AEA26AFE9AC7}	2014-10-16 21:01:57:101-0400	1	201 [AGENT_INSTALLING_PENDING]	101	{C822D00A-FEC3-4B65-8F63-6E6BEA292944}	203	240005	(null)	Success	Content Install	Installation pending.
Report	CWERReporter finishing event handling. (00000000)
Handler	Requesting post-reboot reporting for package Package_for_KB2995387~31bf3856ad364e35~amd64~~6.2.1.2.
Handler	Completed install of CBS update with type=3, requiresReboot=1, installerError=0, hr=0x0
Handler	:::::::::
Handler	::  END  ::  Handler: CBS Install
Handler	:::::::::::::
AU	Preventing expiration of polled reporting events until next restart
DnldMgr	Preparing update for install, updateId = {E396BB10-86E0-4C7D-8E26-8B864103FE74}.201.
Handler	:::::::::::::
Handler	:: START ::  Handler: CBS Install
Handler	:::::::::
Handler	Starting install of CBS update E396BB10-86E0-4C7D-8E26-8B864103FE74
Handler	CBS session identity: 30402981_4242192660
Handler	CBS package identity: Package_for_KB3000061~31bf3856ad364e35~amd64~~6.2.1.2
Handler	Installing self-contained with source=C:\Windows\SoftwareDistribution\Download\792e73d5df6aed16fbb300b8eb82dd6e\windows8-rt-kb3000061-x64.cab, workingdir=C:\Windows\SoftwareDistribution\Download\792e73d5df6aed16fbb300b8eb82dd6e\inst
Report	REPORT EVENT: {2EBB3A05-7213-40EC-B38E-209493B8019D}	2014-10-16 21:02:13:810-0400	1	201 [AGENT_INSTALLING_PENDING]	101	{FD33CBA9-736E-4E42-8FC6-91F5534670C6}	200	240005	(null)	Success	Content Install	Installation pending.
Report	CWERReporter finishing event handling. (00000000)
Handler	Requesting post-reboot reporting for package Package_for_KB3000061~31bf3856ad364e35~amd64~~6.2.1.2.
Handler	Completed install of CBS update with type=3, requiresReboot=1, installerError=0, hr=0x0
Handler	:::::::::
Handler	::  END  ::  Handler: CBS Install
Handler	:::::::::::::
AU	Preventing expiration of polled reporting events until next restart
DnldMgr	Preparing update for install, updateId = {7380A2AB-4BC4-476C-8AAF-8A045C6BA908}.200.
Handler	:::::::::::::
Handler	:: START ::  Handler: CBS Install
Handler	:::::::::
Handler	Starting install of CBS update 7380A2AB-4BC4-476C-8AAF-8A045C6BA908
Handler	CBS session identity: 30402982_579441
Handler	CBS package identity: Package_for_KB3000988~31bf3856ad364e35~amd64~~6.2.1.1
Handler	Installing self-contained with source=C:\Windows\SoftwareDistribution\Download\a7c10dd1ff9315f43981eefa8c4fa1c7\windows8-rt-kb3000988-x64.cab, workingdir=C:\Windows\SoftwareDistribution\Download\a7c10dd1ff9315f43981eefa8c4fa1c7\inst
Report	REPORT EVENT: {1C3D36EC-A8EA-4D6A-9919-A3975E5AD2F4}	2014-10-16 21:02:19:130-0400	1	201 [AGENT_INSTALLING_PENDING]	101	{DF82A201-7E54-420E-A08C-3281F731C3D7}	202	240005	(null)	Success	Content Install	Installation pending.
Report	CWERReporter finishing event handling. (00000000)
Handler	Requesting post-reboot reporting for package Package_for_KB3000988~31bf3856ad364e35~amd64~~6.2.1.1.
Handler	Completed install of CBS update with type=3, requiresReboot=1, installerError=0, hr=0x0
Handler	:::::::::
Handler	::  END  ::  Handler: CBS Install
Handler	:::::::::::::
AU	Preventing expiration of polled reporting events until next restart
RebootNotify	UpdateRebootRequiredNotification, set reboot grace timeout reg value SecurityUpdatesRebootRequiredNotificationTime to 2014-10-20 01:02:33
Agent	*********
Agent	**  END  **  Agent: Installing updates [CallerId = ]
Agent	*************
COMAPI	>>--  RESUMED  -- COMAPI: Install [ClientId = <NULL>]
COMAPI	  - Install call complete (succeeded = 8, succeeded with errors = 0, failed = 0, unaccounted = 0)
COMAPI	  - Reboot required = Yes
COMAPI	---------
COMAPI	--  END  --  COMAPI: Install [ClientId = <NULL>]
COMAPI	-------------
Report	REPORT EVENT: {3080CEFC-A045-48BA-A639-1D323FE053B8}	2014-10-16 21:02:33:077-0400	1	201 [AGENT_INSTALLING_PENDING]	101	{957ACF74-78FB-4045-91E5-A8714DD0915F}	200	240005	(null)	Success	Content Install	Installation pending.
Report	CWERReporter finishing event handling. (00000000)
EP	Got WSUS Client/Server URL: "http://wsusserver/ClientWebService/client.asmx"
PT	WARNING: Cached cookie has expired or new PID is available
EP	Got WSUS SimpleTargeting URL: "http://wsusserver"
PT	Initializing simple targeting cookie, clientId = 5cb617c5-4bcc-44a6-a8bc-6f5d116a9dc3, target group = Systems, DNS name = rodcserver
PT	  Server URL = http://wsusserver/SimpleAuthWebService/SimpleAuth.asmx
EP	Got WSUS Reporting URL: "http://wsusserver/ReportingWebService/ReportingWebService.asmx"
Report	Uploading 18 events using cached cookie, reporting URL = http://wsusserver/ReportingWebService/ReportingWebService.asmx
Report	Reporter successfully uploaded 18 events.
Shutdwn	Checking to see whether install at shutdown is appropriate
Shutdwn	user declined update at shutdown
AU	AU initiates service shutdown
AU	###########  AU: Uninitializing Automatic Updates  ###########
WuTask	Uninit WU Task Manager
Agent	Sending shutdown notification to client
Report	CWERReporter finishing event handling. (00000000)
Service	*********
Service	**  END  **  Service: Service exit [Exit code = 0x240001]
Service	*************

Justin Cervero - MS Enterprise Admin - Appalachian State University

Friday, October 17, 2014 2:58 PM

Post-Reboot WindowsUpdate.log

Misc	===========  Logging initialized (build: 7.8.9200.17099, tz: -0400)  ===========
Misc	  = Process: C:\Windows\system32\svchost.exe
Misc	  = Module: c:\windows\system32\wuaueng.dll
Service	*************
Service	** START **  Service: Service startup
Service	*********
Agent	  * WU client version 7.8.9200.17099
Agent	  * Base directory: C:\Windows\SoftwareDistribution
Agent	  * Access type: No proxy
Service	UpdateNetworkState Ipv6, cNetworkInterfaces = 1.
Service	UpdateNetworkState Ipv4, cNetworkInterfaces = 1.
Agent	  * Network state: Connected
Service	UpdateNetworkState Ipv6, cNetworkInterfaces = 1.
Service	UpdateNetworkState Ipv4, cNetworkInterfaces = 1.
Agent	***********  Agent: Initializing global settings cache  ***********
Agent	  * Endpoint Provider: 00000000-0000-0000-0000-000000000000
Agent	  * WSUS server: http://wsusserver
Agent	  * WSUS status server: http://wsusserver
Agent	  * Target group: Systems
Agent	  * Windows Update access disabled: No
Misc	WARNING: Network Cost is assumed to be not supported as something failed with trying to get handles to wcmapi.dll
WuTask	WuTaskManager delay initialize completed successfully..
Report	WARNING: CSerializationHelper:: InitSerialize failed : 0x80070002
Report	CWERReporter::Init succeeded
Agent	***********  Agent: Initializing Windows Update Agent  ***********
DnldMgr	Download manager restoring 0 downloads
Agent	Attempt 0 to obtain post-reboot results.
Handler	Post-reboot status for session 30402981_3864500492: 0x800f0922.
Handler	Post-reboot status for session 30402981_3878852909: 0x800f0922.
Handler	Post-reboot status for session 30402981_3898977768: 0x800f0922.
Handler	Post-reboot status for session 30402981_3996325907: 0x800f0922.
Handler	Post-reboot status for session 30402981_4035015583: 0x800f0922.
Handler	Post-reboot status for session 30402981_4075265308: 0x800f0922.
Handler	Post-reboot status for session 30402981_4242192660: 0x800f0922.
Handler	Post-reboot status for session 30402982_579441: 0x800f0922.
Report	***********  Report: Initializing static reporting data  ***********
Report	  * OS Version = 6.2.9200.0.0.131344
Report	  * OS Product Type = 0x00000007
Report	  * Computer Brand = VMware, Inc.
Report	  * Computer Model = VMware Virtual Platform
Report	  * Platform Role = 1
Report	  * AlwaysOn/AlwaysConnected (AOAC) = 0
Report	  * Bios Revision = 6.00
Report	  * Bios Name = PhoenixBIOS 4.0 Release 6.0     
Report	  * Bios Release Date = 2013-07-30T00:00:00
Report	  * Bios Sku Number unavailable.
Report	  * Bios Vendor = Phoenix Technologies LTD
Report	  * Bios Family unavailable.
Report	  * Bios Major Release = 4
Report	  * Bios Minor Release = 6
Report	  * Locale ID = 1033
AU	###########  AU: Initializing Automatic Updates  ###########
AU	AIR Mode is disabled
AU	  # Policy Driven Provider: http://wsusserver
AU	  # Detection frequency: 22
AU	  # Target group: Systems
AU	  # Approval type: Pre-install notify (Policy)
AU	  # Auto-install minor updates: No (User preference)
AU	  # Will interact with non-admins (Non-admins are elevated (Policy))
AU	WARNING: Failed to get Wu Exemption info from NLM, assuming not exempt, error = 0x80240037
AU	AU finished delayed initialization
AU	#############
AU	## START ##  AU: Search for updates
AU	#########
AU	<<## SUBMITTED ## AU: Search for updates  [CallId = {CBF31EEA-877B-47E0-944D-405F0050517B} ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}]
Agent	*************
Agent	** START **  Agent: Finding updates [CallerId = AutomaticUpdates]
Agent	*********
Agent	  * Online = No; Ignore download priority = No
Agent	  * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
Agent	  * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
Agent	  * Search Scope = {Machine & All Users}
Agent	  * Caller SID for Applicability: S-1-5-18
Report	REPORT EVENT: {AC61D384-5E0C-47DD-B5E1-236F49C0E789}	2014-10-16 21:10:10:091-0400	1	182 [AGENT_INSTALLING_FAILED]	101	{957ACF74-78FB-4045-91E5-A8714DD0915F}	200	800f0922	(null)	Failure	Content Install	Installation Failure: Windows failed to install the following update with error 0x800f0922: Update for Windows Server 2012 (KB3000988).
Report	REPORT EVENT: {A5726491-68B3-409A-897E-EF62347F2787}	2014-10-16 21:10:10:107-0400	1	182 [AGENT_INSTALLING_FAILED]	101	{DF82A201-7E54-420E-A08C-3281F731C3D7}	202	800f0922	(null)	Failure	Content Install	Installation Failure: Windows failed to install the following update with error 0x800f0922: Security Update for Windows Server 2012 (KB3000061).
Report	REPORT EVENT: {3DFB8B32-0BD7-43B6-9560-9EB52777FEB7}	2014-10-16 21:10:10:107-0400	1	182 [AGENT_INSTALLING_FAILED]	101	{FD33CBA9-736E-4E42-8FC6-91F5534670C6}	200	800f0922	(null)	Failure	Content Install	Installation Failure: Windows failed to install the following update with error 0x800f0922: Update for Windows Server 2012 (KB2995387).
Report	REPORT EVENT: {F2CB0CC9-BE75-460F-963D-4CC4C1E49381}	2014-10-16 21:10:10:107-0400	1	182 [AGENT_INSTALLING_FAILED]	101	{C822D00A-FEC3-4B65-8F63-6E6BEA292944}	203	800f0922	(null)	Failure	Content Install	Installation Failure: Windows failed to install the following update with error 0x800f0922: Security Update for Microsoft .NET Framework 4.5, 4.5.1 and 4.5.2 on Windows 8 and Windows Server 2012 x64 (KB2979577).
Report	REPORT EVENT: {1C0A409A-B35D-4C28-A910-6E6B870658C4}	2014-10-16 21:10:10:107-0400	1	182 [AGENT_INSTALLING_FAILED]	101	{8001616A-1D31-4D17-B3DC-861E3CE0C3E3}	202	800f0922	(null)	Failure	Content Install	Installation Failure: Windows failed to install the following update with error 0x800f0922: Security Update for Microsoft .NET Framework 4.5, 4.5.1 and 4.5.2 on Windows 8 and Windows Server 2012 x64 (KB2978042).
Report	CWERReporter::HandleEvents - WER report upload completed with status 0x8
Report	WER Report sent: 7.8.9200.17099 0x800f0922(0) 957ACF74-78FB-4045-91E5-A8714DD0915F Install 101 Managed
Report	CWERReporter::HandleEvents - WER report upload completed with status 0x8
Report	WER Report sent: 7.8.9200.17099 0x800f0922(0) DF82A201-7E54-420E-A08C-3281F731C3D7 Install 101 Managed
Report	CWERReporter::HandleEvents - WER report upload completed with status 0x8
Report	WER Report sent: 7.8.9200.17099 0x800f0922(0) FD33CBA9-736E-4E42-8FC6-91F5534670C6 Install 101 Managed
Report	CWERReporter::HandleEvents - WER report upload completed with status 0x8
Report	WER Report sent: 7.8.9200.17099 0x800f0922(0) C822D00A-FEC3-4B65-8F63-6E6BEA292944 Install 101 Managed
Report	CWERReporter::HandleEvents - WER report upload completed with status 0x8
Report	WER Report sent: 7.8.9200.17099 0x800f0922(0) 8001616A-1D31-4D17-B3DC-861E3CE0C3E3 Install 101 Managed
Report	CWERReporter finishing event handling. (00000000)
Report	REPORT EVENT: {7D8CD525-84A5-4AA8-881E-B5BDC8A77E9B}	2014-10-16 21:10:10:122-0400	1	182 [AGENT_INSTALLING_FAILED]	101	{2346EB42-185C-49CC-9856-190C294FE502}	202	800f0922	(null)	Failure	Content Install	Installation Failure: Windows failed to install the following update with error 0x800f0922: Security Update for Windows Server 2012 (KB2973501).
Report	REPORT EVENT: {8DFD646E-E0F7-495E-BFA1-EAF624645300}	2014-10-16 21:10:10:122-0400	1	182 [AGENT_INSTALLING_FAILED]	101	{4193EAE0-AE33-4774-B479-D9660D15E5F2}	201	800f0922	(null)	Failure	Content Install	Installation Failure: Windows failed to install the following update with error 0x800f0922: Security Update for Windows Server 2012 (KB2923392).
Report	REPORT EVENT: {D9FFD882-6D0D-4790-8D55-C3499C593392}	2014-10-16 21:10:10:122-0400	1	182 [AGENT_INSTALLING_FAILED]	101	{CD2A752F-FF51-46A5-8134-54DD0AE32D2A}	202	800f0922	(null)	Failure	Content Install	Installation Failure: Windows failed to install the following update with error 0x800f0922: Security Update for Windows Server 2012 (KB2853587).
Report	REPORT EVENT: {9832A44F-84B3-426C-8BE7-71242214E48C}	2014-10-16 21:10:10:155-0400	1	202 [AU_REBOOT_COMPLETED]	102	{00000000-0000-0000-0000-000000000000}	0	0	AutomaticUpdates	Success	Content Install	Reboot completed.
Report	CWERReporter::HandleEvents - WER report upload completed with status 0x8
Report	WER Report sent: 7.8.9200.17099 0x800f0922(0) 2346EB42-185C-49CC-9856-190C294FE502 Install 101 Managed
Report	CWERReporter::HandleEvents - WER report upload completed with status 0x8
Report	WER Report sent: 7.8.9200.17099 0x800f0922(0) 4193EAE0-AE33-4774-B479-D9660D15E5F2 Install 101 Managed
Report	CWERReporter::HandleEvents - WER report upload completed with status 0x8
Report	WER Report sent: 7.8.9200.17099 0x800f0922(0) CD2A752F-FF51-46A5-8134-54DD0AE32D2A Install 101 Managed
Report	CWERReporter finishing event handling. (00000000)
AU	###########  AU: Uninitializing Automatic Updates  ###########
WuTask	Uninit WU Task Manager
Agent	  * WARNING: Exit code = 0x8024000B
Agent	*********
Agent	**  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]
Agent	*************
Agent	WARNING: WU client failed Searching for update with error 0x8024000b
Service	*********
Service	**  END  **  Service: Service exit [Exit code = 0x240001]
Service	*************

Justin Cervero - MS Enterprise Admin - Appalachian State University

Friday, October 17, 2014 3:01 PM

0

Sign in to vote
This thread is giving me an idea:

https://social.technet.microsoft.com/Forums/en-US/f77691d8-a9d0-4714-98ad-71665cfa8965/kb3000061-fails-to-install-on-server-2012?forum=winserver8gen

I'm going to kill the update service, rename, and then do updates one by one so that the one in question, KB3000061, doesn't get downloaded

edit: this seems to be the issue.
- Edited by J Cervero Friday, October 17, 2014 3:14 PM solution
Friday, October 17, 2014 3:09 PM
0

Sign in to vote

Hi,

Could you please try to download these updates and install them manually?

To download these updates, please click the link below,

http://catalog.update.microsoft.com/v7/site/Home.aspx

Best Regards.

Steven Lee

TechNet Community Support

Monday, October 20, 2014 10:02 AM
0

Sign in to vote

When I open that on my local machine, it wants to install a Microsoft add-on. I assume that means that you would normally run this as a replacement for WSUS/AU like the old days of browser based MS Updates. Unfortunately, I can't use that on server core.

Am I understanding correctly?
Justin Cervero - MS Enterprise Admin - Appalachian State University

Monday, October 20, 2014 8:12 PM
0

Sign in to vote

Hi,

I have similar problem when installing KB2973501, KB3000061 and KB3000988 Windows Updates on Windows Server 2012. When I download them from Windows Up[date Catalog and then install them one by one I can see 'Succeeded' status in updates history for them but when I 'check for updates' I still see '3 important updates are available'. How can I finally install them?

Best Regards,

Artur W

Tuesday, October 21, 2014 5:27 PM
1

Sign in to vote

We have a large number of 2012 RODCs that won't install KB2995387 or KB3000061. Either of those two patches prevented the installation of any other patch in the same deployment. After pulling these updates from SCCM, we have also noticed that the WUA on the affected servers is very slow or unresponsive and that SCCM compliance reporting has slowed.

Thursday, October 23, 2014 4:10 AM
0

Sign in to vote

I'm encountering the same issue with my 2012 RODCs. They have been very reluctant to install these two updates, but after doing it about 6 or 8 times it finally took. I've also noticed that SCCM compliance reporting has slowed way down, to the point that I started looking for problems in SCCM.

Wednesday, October 29, 2014 12:20 AM
11

Sign in to vote
To alleviate this problem on Windows 8 and Windows Server 2012 based systems, please export and delete the following registry value, reboot your system and then re-attempt the update: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{e7ef96be-969f-414f-97d7-3ddb7b558ccc}
If deleting the above registry value does not resolve the issue for you, please ping this thread as I'd like to see your follow-up CBS.logs from the system
For those of you running Windows 8 and Windows Server 2012, I'd actually like to know some additional information about your environments, namely, if the systems impacted were upgrades of a specific kinda (Vista->Win7->Win8) or if there was a special process used when creating your images. Anything you think might be relevant and would be outside of a 'clean install' from media.
For Windows 8.1 and Windows Server 2012 R2 customers, I still haven't seen a set of logs to confirm we're seeing the same issue. Everything I've seen to this point has been on Windows 8/Windows 2012. I'd love to see logs if you're having an issue.

This is the supported method to resolve this issue (and as others have noted above, this works). This occurs when servers have been upgraded from 2008R2 to 2012 (or WinVista to Win8). The key is being carried over in these scenarios and not being set to the proper value. We're investingating why this occurred but deleting the key and rebooting the system will resolve the problem. If you see something otherwise, please let me know.

--Joseph [MSFT] http://blogs.technet.com/b/joscon/
- Edited by joscon [Microsoft]Microsoft employee Thursday, October 30, 2014 7:36 PM
- Proposed as answer by villaire11 Wednesday, March 4, 2015 12:47 AM
Thursday, October 30, 2014 7:35 PM
0

Sign in to vote
To alleviate this problem on Windows 8 and Windows Server 2012 based systems, please export and delete the following registry value, reboot your system and then re-attempt the update: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{e7ef96be-969f-414f-97d7-3ddb7b558ccc}

This worked for me. System is: Asustek laptop preinstalled with Windows 7 upgraded to Windows 8 Pro

Thanks!

Bryan
Thursday, October 30, 2014 10:59 PM
0

Sign in to vote

Glad that worked for you Bryan.

I should also note that you dont need (or want) to re-import that key after you reboot, you can safely delete it.
--Joseph [MSFT] http://blogs.technet.com/b/joscon/

Thursday, October 30, 2014 11:01 PM
0

Sign in to vote

I am having the same issue but I do not have that registry key.

Windows Server 2012 Standard. VM built from scratch.

I also tried to install it manually, same reverting changes.

Thanks

Friday, October 31, 2014 12:16 PM
1

Sign in to vote
Can you share your CBS.logs somewhere for me so we can take a look at them?

Do you have the following key in your registry: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{8c416c79-d49b-4f01-a467-e56d3aa8234c}
--Joseph [MSFT] http://blogs.technet.com/b/joscon/
- Proposed as answer by Miguel Rosales Tuesday, September 27, 2016 10:58 PM
Friday, October 31, 2014 2:34 PM
0

Sign in to vote

I do have that registry entry.

My current CBS.log does not have the entry in it for KB2995387 but the first Persist does but it is 50mb.

I could run the update again tomorrow if that will put it directly in the CBS.log file

If the file is large, how do you want me to get that to you?

Friday, October 31, 2014 5:27 PM
0

Sign in to vote

Thanks, if you have that registry entry then you're likely hitting another issue. You can put the files on a OneDrive and share out a link (or whatever other cloud data service you like). A couple of things I would also try on the system is running corruption repair and making sure there isnt an issue with the compnent store in general thats preventing you from installing the update.

I have any entry on doing this located here: http://blogs.technet.com/b/joscon/archive/2012/09/26/fixing-component-store-corruption-in-windows-8-and-windows-server-2012.aspx
--Joseph [MSFT] http://blogs.technet.com/b/joscon/

Friday, October 31, 2014 5:35 PM
0

Sign in to vote

Here's a CBS.log from one of my 2012 RODCs that is not taking the patch: http://1drv.ms/1tIqV3g

I cleared the old log file, installed KB2995387, and then rebooted. Windows came up, the update failed completion and began reverting, then rebooted again. Errors begin at 13:07:34.

Friday, October 31, 2014 6:23 PM
0

Sign in to vote

Thanks Eric, this is a different issue. Looks like this is related to the WinRMRemoteWMIUsers__ group on the machine. Do you have this group in your AD?
--Joseph [MSFT] http://blogs.technet.com/b/joscon/

Friday, October 31, 2014 10:58 PM
0

Sign in to vote

I do not. I seem to remember having to create this in one of my previous lives to fix a different problem. Should I assume that creating the group may fix the issue? Any idea why this is only causing grief for the RODCs?

Friday, October 31, 2014 11:46 PM
0

Sign in to vote

To be honest, no, I'm not sure why it would cause a problem. There was an old issue in SBS where if that account existed it would cause issues. We're looking into it and I hope to have something for you in the next few days.
--Joseph [MSFT] http://blogs.technet.com/b/joscon/

Friday, October 31, 2014 11:57 PM
0

Sign in to vote
To alleviate this problem on Windows 8 and Windows Server 2012 based systems, please export and delete the following registry value, reboot your system and then re-attempt the update: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{e7ef96be-969f-414f-97d7-3ddb7b558ccc}
If deleting the above registry value does not resolve the issue for you, please ping this thread as I'd like to see your follow-up CBS.logs from the system
For those of you running Windows 8 and Windows Server 2012, I'd actually like to know some additional information about your environments, namely, if the systems impacted were upgrades of a specific kinda (Vista->Win7->Win8) or if there was a special process used when creating your images. Anything you think might be relevant and would be outside of a 'clean install' from media.
For Windows 8.1 and Windows Server 2012 R2 customers, I still haven't seen a set of logs to confirm we're seeing the same issue. Everything I've seen to this point has been on Windows 8/Windows 2012. I'd love to see logs if you're having an issue.

This is the supported method to resolve this issue (and as others have noted above, this works). This occurs when servers have been upgraded from 2008R2 to 2012 (or WinVista to Win8). The key is being carried over in these scenarios and not being set to the proper value. We're investingating why this occurred but deleting the key and rebooting the system will resolve the problem. If you see something otherwise, please let me know.

--Joseph [MSFT] http://blogs.technet.com/b/joscon/

I am currently having this issue myself and I have removed the reg. Three updates will not install: KB2973501, KB3000061 and KB3000988. IT is reverting and rolling back the updates after they are installed and the VM reboots. I am trying to figure out what else to do here. Also, not familiar with where to post the cbs.log file for you. Can you give me some direction on this as I am new here. Thank you in advacne.
Sunday, November 2, 2014 12:01 AM
0

Sign in to vote

we have the same issue with patch KB2995387 can't be installed on Server 2012 RODC CORE, when the server is only a member server we can install the patch

Monday, November 3, 2014 12:00 PM
0

Sign in to vote

Hello,

Here is my CBS from the second machine. It seems it is just on the RODC's

This one did not have the registry key either. I have not tried the component store corruption fix yet.

http://1drv.ms/1wrM42z

Thanks for your help.

Monday, November 3, 2014 3:14 PM
0

Sign in to vote
To alleviate this problem on Windows 8 and Windows Server 2012 based systems, please export and delete the following registry value, reboot your system and then re-attempt the update: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{e7ef96be-969f-414f-97d7-3ddb7b558ccc}
If deleting the above registry value does not resolve the issue for you, please ping this thread as I'd like to see your follow-up CBS.logs from the system
For those of you running Windows 8 and Windows Server 2012, I'd actually like to know some additional information about your environments, namely, if the systems impacted were upgrades of a specific kinda (Vista->Win7->Win8) or if there was a special process used when creating your images. Anything you think might be relevant and would be outside of a 'clean install' from media.
For Windows 8.1 and Windows Server 2012 R2 customers, I still haven't seen a set of logs to confirm we're seeing the same issue. Everything I've seen to this point has been on Windows 8/Windows 2012. I'd love to see logs if you're having an issue.

This is the supported method to resolve this issue (and as others have noted above, this works). This occurs when servers have been upgraded from 2008R2 to 2012 (or WinVista to Win8). The key is being carried over in these scenarios and not being set to the proper value. We're investingating why this occurred but deleting the key and rebooting the system will resolve the problem. If you see something otherwise, please let me know.

--Joseph [MSFT] http://blogs.technet.com/b/joscon/

I am currently having this issue myself and I have removed the reg. Three updates will not install: KB2973501, KB3000061 and KB3000988. IT is reverting and rolling back the updates after they are installed and the VM reboots. I am trying to figure out what else to do here. Also, not familiar with where to post the cbs.log file for you. Can you give me some direction on this as I am new here. Thank you in advacne.

You can put the CBS.logs on a OneDrive and share out a link. It sounds like the rest of these issues are going to be servicing related problems not caused by the WMI provider unfortunately. I'll do what I can here but these might be better served with a call into support.
--Joseph [MSFT] http://blogs.technet.com/b/joscon/
Monday, November 3, 2014 3:24 PM
0

Sign in to vote

Hello,

Here is my CBS from the second machine. It seems it is just on the RODC's

This one did not have the registry key either. I have not tried the component store corruption fix yet.

http://1drv.ms/1wrM42z

Thanks for your help.

This appears to be the same issue with the WinRMRemoteWMIUsers__ account as previously seen in logs. If you have the group, make sure the account you're using is a member of this group and has rights to install updates. You could also try installing the updates locally as an admin to see if that works properly.
--Joseph [MSFT] http://blogs.technet.com/b/joscon/

Monday, November 3, 2014 3:26 PM
0

Sign in to vote

I ran this net localgroup WinRMRemoteWMIUsers__ /add <domain>\<username>

It then told me that this Local group does not exist. I am a domain admin and have tried downloading and installing it manually as well.

They are RODC's and VM's

Monday, November 3, 2014 4:57 PM
0

Sign in to vote

Removing e7ef96be-969f-414f-97d7-3ddb7b558ccc fixed KB3000061

KB2923392 and KB2853587 continue to be a problem. We do not have WinRMRemoteWMIUsers__ in our domain and I am installing the updates locally with admi rights.
Justin Cervero - MS Enterprise Admin - Appalachian State University

Tuesday, November 4, 2014 7:56 PM
0

Sign in to vote

WinRMRemoteWMIUsers__ is a local machine group. It isn't present on DCs. We are waiting for PSS to confirm if the patch logic is incorrect for RODCs. They were able to repo the error.

Thursday, November 6, 2014 5:23 AM
0

Sign in to vote

Thanks JT, sorry that I havent been able to get back to this, I've just been slammed here. If you have a CSS case number, send me mail with it and I'll see if I can touch base with the case owner internally.
--Joseph [MSFT] http://blogs.technet.com/b/joscon/

Thursday, November 6, 2014 3:29 PM
0

Sign in to vote

Removing mentioned registry key worked for me like a charm = 3 updates have been installed and warning regarding lost eventlog file has disappeared from server manager

Friday, November 7, 2014 10:41 AM
0

Sign in to vote

Thank you Joseph - this problem has occupied far too much of my time for the past couple of weeks! Removing the registry key and following your instructions resolved it. FYI, this WAS a server upgraded from 2008 R2 to 2012 (long ago). Other symptoms were red "Manageability" in every box in Server Manager which was traced to inaccessible event logs for Win32K (like Concurrency, etc.). Removing the key solved all of these problems just in time for November "update Tuesday".
David Weston DBM Associates - The IT Department for Small Business

Saturday, November 8, 2014 4:36 PM
0

Sign in to vote

Thanks JT, sorry that I havent been able to get back to this, I've just been slammed here. If you have a CSS case number, send me mail with it and I'll see if I can touch base with the case owner internally.

--Joseph [MSFT] http://blogs.technet.com/b/joscon/

114102011918799

Sunday, November 9, 2014 11:23 PM
0

Sign in to vote

Any update on this issue for RODC's?

Thanks

Monday, November 17, 2014 7:17 PM
0

Sign in to vote

Still investigating. What I can tell you right now is that this appears to be an issue with the "protection from accidental deletion" attribute being set on the domain root object. Our testing shows that removing this attribute allows the patch to install. Thats about as far as we are right now.
--Joseph [MSFT] http://blogs.technet.com/b/joscon/

Monday, November 17, 2014 7:20 PM
0

Sign in to vote

Any updates on this issue for RODC?

Thank You

Wednesday, November 19, 2014 3:36 PM
0

Sign in to vote

Still working on it, the one workaround we know of it posted above. If thats not feasible for your environment, then please hold off and I'll reply back to the thread when we do have something. I dont have a timeline right now for when that will be.
--Joseph [MSFT] http://blogs.technet.com/b/joscon/

Thursday, November 20, 2014 3:09 PM
0

Sign in to vote

Can you share your CBS.logs somewhere for me so we can take a look at them?

Do you have the following key in your registry: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{8c416c79-d49b-4f01-a467-e56d3aa8234c}

--Joseph [MSFT] http://blogs.technet.com/b/joscon/

I have the same problem on a Win2k12 VM. I have the above key in the registry should i try to export it and delete it and then reboot the server to see if this Works. I dont have this key in my registry {e7ef96be-969f-414f-97d7-3ddb7b558ccc}

Thanks

Fract

Friday, November 21, 2014 12:49 PM
0

Sign in to vote
To alleviate this problem on Windows 8 and Windows Server 2012 based systems, please export and delete the following registry value, reboot your system and then re-attempt the update: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{e7ef96be-969f-414f-97d7-3ddb7b558ccc}
If deleting the above registry value does not resolve the issue for you, please ping this thread as I'd like to see your follow-up CBS.logs from the system
For those of you running Windows 8 and Windows Server 2012, I'd actually like to know some additional information about your environments, namely, if the systems impacted were upgrades of a specific kinda (Vista->Win7->Win8) or if there was a special process used when creating your images. Anything you think might be relevant and would be outside of a 'clean install' from media.
For Windows 8.1 and Windows Server 2012 R2 customers, I still haven't seen a set of logs to confirm we're seeing the same issue. Everything I've seen to this point has been on Windows 8/Windows 2012. I'd love to see logs if you're having an issue.

This is the supported method to resolve this issue (and as others have noted above, this works). This occurs when servers have been upgraded from 2008R2 to 2012 (or WinVista to Win8). The key is being carried over in these scenarios and not being set to the proper value. We're investingating why this occurred but deleting the key and rebooting the system will resolve the problem. If you see something otherwise, please let me know.

--Joseph [MSFT] http://blogs.technet.com/b/joscon/

Confirmed fix
Wednesday, December 17, 2014 5:34 PM
0

Sign in to vote

This is still an issue for 2012 RODC's. Any updates on this issue for RODC?

Thanks.

Thursday, December 18, 2014 6:35 AM
0

Sign in to vote
This is an issue for us as well. One RODC server 2012. seems as if i can install some patches one by one, but receive the same "failure" message as stated in this thread. I'd like to note in addition that we don't see the registry key referenced in this thread. Our install was a clean server 2012 R2 install from disc (no in place upgrade).

Christopher Gatling Lan Administrator Baltimore, MD.
- Edited by Christopher Gatling Tuesday, December 23, 2014 3:26 PM
Tuesday, December 23, 2014 1:24 PM
0

Sign in to vote

Hi,

I am not sure if this issue is fixed.However can you disable or stop the antivirus and see if you can install the updates?

Thanks,

Umesh.S.K

Saturday, January 3, 2015 1:51 PM
0

Sign in to vote
Still working on it, the one workaround we know of it posted above. If thats not feasible for your environment, then please hold off and I'll reply back to the thread when we do have something. I dont have a timeline right now for when that will be.

--Joseph [MSFT] http://blogs.technet.com/b/joscon/

Hi, Any update on this issue please?

I have a Physical 2012 Server (RODC) with these issues, the proposed fixes above, do not apply.

I have the 0x800F0922 error with the following updates:-

KB2992611 . KB2993958 . KB3002885 . KB3013410 . KB3010788 . KB3006226 . KB3003057 . KB3005607 . KB2995387 . KB3013126 . KB3008923 . KB3008627 . KB3011780 . KB3004394 . KB3000853 . KB3003743 .

I have not yet attempted to manually install them.

Any advice would be gratefully received.

Thank you.
- Edited by Chri5p Wednesday, January 7, 2015 12:06 PM detail added.
Wednesday, January 7, 2015 12:05 PM
0

Sign in to vote

Same Problem here. Have 4 virtual RODCs....none of the workarounds is workin for me.

Have the Error with several Updates, like CHri5p described above.

Thursday, January 8, 2015 3:56 PM
1

Sign in to vote
I had the exact same problem on 2012 RODC. What worked for my was to disable (hide) KB2995387. Then all other update did install correctly. I am still waiting for a solution regarding this KB2995387 patch :-(

Regs.

Haffimt
- Proposed as answer by jiri01 Saturday, January 10, 2015 10:20 AM
Friday, January 9, 2015 11:33 AM
0

Sign in to vote

Thx Haffimt,

disabling KB2995387 worked for me, too :)

Regards

Saturday, January 10, 2015 10:20 AM
0

Sign in to vote

Has there been an update for this for RODCs?

Saturday, January 17, 2015 7:21 AM
0

Sign in to vote
We're getting this too, on around 80 RODCs.

They were all upgraded from 2008R2 to 2012 (not R2) and exhibit this behaviour.

Things tried:

install patch instead via DISM (works fine)
run patch manually (doesn't work)
run patch via WSUS (doesn't work)
run patch via WSUS that doesn't require reboot (eg dotnet or flash update) - works fine
DISM scanhealth/checkhealth reports no issues. On some boxes, WSUS diagnostic tool says it's fixed some things but then they fail again. These are machines I've tried a few different things on tho, generally it says everything is fine.
Stopped WSUS, removed SoftwareDistribution and started again (no change)

I had the {e7ef96be-969f-414f-97d7-3ddb7b558ccc} key which I deleted to no avail. Not tried the {8c416c79-d49b-4f01-a467-e56d3aa8234c} on yet.

I guess the big question is how come the patch works fine via DISM and not via WSUS/exe ?
- Edited by andreww Monday, January 26, 2015 11:16 AM
Monday, January 26, 2015 11:10 AM
0

Sign in to vote
See my update on this at https://social.technet.microsoft.com/Forums/en-US/d6d67f90-9dd2-4b05-a85e-0576a90a061c/server-2012-not-r2-rodc-fails-to-install-windows-updates?forum=winserver8gen

The part you're looking for is where MS admit it's a bug in 2012, but won't be fixed because we're the only customer that has officially reported it with MS. Possible fixes include making your RODC temporarily RW.

Please log a case with MS if you can - I think they're free if it's a problem with a windows update. It's fixed in R2 apparently.
- Edited by andreww Friday, February 6, 2015 11:53 AM
- Proposed as answer by andreww Friday, February 6, 2015 2:12 PM
Friday, February 6, 2015 11:21 AM
0

Sign in to vote
To alleviate this problem on Windows 8 and Windows Server 2012 based systems, please export and delete the following registry value, reboot your system and then re-attempt the update: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{e7ef96be-969f-414f-97d7-3ddb7b558ccc}
If deleting the above registry value does not resolve the issue for you, please ping this thread as I'd like to see your follow-up CBS.logs from the system
For those of you running Windows 8 and Windows Server 2012, I'd actually like to know some additional information about your environments, namely, if the systems impacted were upgrades of a specific kinda (Vista->Win7->Win8) or if there was a special process used when creating your images. Anything you think might be relevant and would be outside of a 'clean install' from media.
For Windows 8.1 and Windows Server 2012 R2 customers, I still haven't seen a set of logs to confirm we're seeing the same issue. Everything I've seen to this point has been on Windows 8/Windows 2012. I'd love to see logs if you're having an issue.

This is the supported method to resolve this issue (and as others have noted above, this works). This occurs when servers have been upgraded from 2008R2 to 2012 (or WinVista to Win8). The key is being carried over in these scenarios and not being set to the proper value. We're investingating why this occurred but deleting the key and rebooting the system will resolve the problem. If you see something otherwise, please let me know.

--Joseph [MSFT] http://blogs.technet.com/b/joscon/

Thanks!
Thursday, February 12, 2015 10:17 PM
0

Sign in to vote

Still working on it, the one workaround we know of it posted above. If thats not feasible for your environment, then please hold off and I'll reply back to the thread when we do have something. I dont have a timeline right now for when that will be.

--Joseph [MSFT] http://blogs.technet.com/b/joscon/

Hello,

is there a fix for KB2995387 yet?

Having the same problem on a RODC 2012 Standard. I have the key {8c416c79-d49b-4f01-a467-e56d3aa8234c}, but I do not have the key {e7ef96be-969f-414f-97d7-3ddb7b558ccc}.

I tried several suggestions, but it is still not working.

Another RODC installed this update without any problems. How is this possible?

Thanks in advance.

Tuesday, February 17, 2015 6:22 PM
0

Sign in to vote
To alleviate this problem on Windows 8 and Windows Server 2012 based systems, please export and delete the following registry value, reboot your system and then re-attempt the update: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{e7ef96be-969f-414f-97d7-3ddb7b558ccc}

This worked for me. System is: Asustek laptop preinstalled with Windows 7 upgraded to Windows 8 Pro

Thanks!

Bryan

Also surprisingly works for me too! Didn't think deleting a simple reg key would have, but it did! Do try this guys if you receive the "failed configuring updates, reverting changes" error.
Sunday, February 22, 2015 5:47 AM
0

Sign in to vote

Failing to install KB 2995387 is a known issue on a server 2012 RODC. for your situation, we can just ignore KB 2995387, and keep installing other patches. I think Microsoft will release a hotfix/another patch to fix this issue.

Friday, February 27, 2015 9:57 AM
0

Sign in to vote
To alleviate this problem on Windows 8 and Windows Server 2012 based systems, please export and delete the following registry value, reboot your system and then re-attempt the update: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{e7ef96be-969f-414f-97d7-3ddb7b558ccc}
If deleting the above registry value does not resolve the issue for you, please ping this thread as I'd like to see your follow-up CBS.logs from the system
For those of you running Windows 8 and Windows Server 2012, I'd actually like to know some additional information about your environments, namely, if the systems impacted were upgrades of a specific kinda (Vista->Win7->Win8) or if there was a special process used when creating your images. Anything you think might be relevant and would be outside of a 'clean install' from media.
For Windows 8.1 and Windows Server 2012 R2 customers, I still haven't seen a set of logs to confirm we're seeing the same issue. Everything I've seen to this point has been on Windows 8/Windows 2012. I'd love to see logs if you're having an issue.

This is the supported method to resolve this issue (and as others have noted above, this works). This occurs when servers have been upgraded from 2008R2 to 2012 (or WinVista to Win8). The key is being carried over in these scenarios and not being set to the proper value. We're investingating why this occurred but deleting the key and rebooting the system will resolve the problem. If you see something otherwise, please let me know.

--Joseph [MSFT] http://blogs.technet.com/b/joscon/

I also had a server that was upgraded from 2008R2 to 2012 that would not successfully install ANY updates. I tried many different things, but deleting this registry value fixed the issue.

Thank you so much, I was banging my head against the wall for days trying to get this resolved!

Thanks,

Shawn
- Edited by villaire11 Wednesday, March 4, 2015 12:51 AM
- Proposed as answer by earthtk Tuesday, June 23, 2015 5:00 PM
- Unproposed as answer by earthtk Tuesday, June 23, 2015 5:00 PM
Wednesday, March 4, 2015 12:50 AM
0

Sign in to vote

Hi Joscon,

I have a clean install of 2012 Standard promoted as a RODC. I have a key {8c416c79-d49b-4f01-a467-e56d3aa8234c} but not {e7ef96be-969f-414f-97d7-3ddb7b558ccc} . It is running as a virtual machine in ESXi server. I've made a simple test in my home environment with the same version and again as RODC and all the updates were successfully installed. I was able to install some minor updates after that on the RODC, I have also KB3000061 installed. So, should I delete {8c416c79-d49b-4f01-a467-e56d3aa8234c}? Or delete the SoftwareDistribution folder and perform a Windows Online update? Currently we are using WSUS.

Wednesday, March 25, 2015 3:31 PM
0

Sign in to vote
I have a 2012 Standard server within Hyper-V 6.3 running SharePoint Server 2013 only. It has been having windows update issues for the better part of a year. Automatic updates causes the machine to revert windows updates every night. I have KB3000061 installed and have the key {8c416c79-d49b-4f01-a467-e56d3aa8234c} but not {e7ef96be-969f-414f-97d7-3ddb7b558ccc}. Would removing the {8c416c79-d49b-4f01-a467-e56d3aa8234c} help? I have tried using DISM to restore health, and the Windows Update Diagnostic with no avail. These are the following updates that install but revert after the reboot.

KB2928678
KB2934016
- Edited by FPSjeremy Wednesday, April 22, 2015 8:31 PM
Wednesday, April 22, 2015 6:14 PM
0

Sign in to vote

Hi Joscon,

I have a clean install of 2012 Standard promoted as a RODC. I have a key {8c416c79-d49b-4f01-a467-e56d3aa8234c} but not {e7ef96be-969f-414f-97d7-3ddb7b558ccc} . It is running as a virtual machine in ESXi server. I've made a simple test in my home environment with the same version and again as RODC and all the updates were successfully installed. I was able to install some minor updates after that on the RODC, I have also KB3000061 installed. So, should I delete {8c416c79-d49b-4f01-a467-e56d3aa8234c}? Or delete the SoftwareDistribution folder and perform a Windows Online update? Currently we are using WSUS.

Just FYI I was able to install the updates after demoting the RODC to server install all updates also from Windows Update (not only WSUS) and after this promoting the server again to RODC. We had luck because it is virtual and we didn't loose connection and didn't use RDC.

Wednesday, May 27, 2015 7:43 PM
0

Sign in to vote

I wish I had gone with linux and prox mox now.   I choose server 2012 core mode for my HV.

Now I find it can't even do a simple update without sputtering.

- in feb when i first installed it it did do updates via Sconfig. But when I run it now I see updates on the list that are older, some from 2013.   Not sure how it missed them.

- The update service seems to lack the ability to sort CORE from GUI mode updates.   When I choose updates from the list of 31 updates it will DL and apply all of them and ask for a reboot. Mind you this is taking like hours to do .   Then after all that time on reboot I get "Failure to update, reverting back"   then after 30 mins of revertig back I am back to square 1.

Then if I manually look up those updates and download and run the .msu file from core. It will say "This update does not apply to core mode.   And it will not bother to install it.

This is something that needs to be done via the computer, that is what they are good at, sorting. One should not have to go 1 by 1 and sort which updates apply to core mode and which ones are gui only. This is total BS.

and all this fixes are half backed bs too.

So many people rely on MS servers and the guys running them don't even realize how crappy they are.

Saturday, July 25, 2015 3:40 PM
0

Sign in to vote

I finally found a fix for us. I went ahead and upgraded them to 2012 R2.

Then all updates were fine and KB2995387 was no longer needed.

Hope that helps.

Friday, August 7, 2015 10:48 AM
0

Sign in to vote

I have a 2012 server with plenty of keys located where you found e7ef96be-969f-414f-97d7-3ddb7b558ccc, but I don't have it. I have e75... and e7a... but no e7e.... Any other suggestions?

One observation I made is that the sppsvc.exe process is utilizing about 50% CPU during the updates process.

Tuesday, September 29, 2015 4:51 AM
0

Sign in to vote

I have two 2012 servers fully patched except for KB2975331. I have tried the reg key export/delete suggestion and still can not install the update. Is there any new suggestions?

Tuesday, November 17, 2015 4:38 PM
0

Sign in to vote
I installed VM on Hyper-V with latest .iso of 2012 R2 (with update). I then tried to patch it up from Microsoft Update, before sysprep and multiplying it for Hyper-V template use. It pulled around 150 patches, and during reboot I got "Failure configuring Windows updates. Reverting changes". Reverting process takes for ages, I cannot access the system anymore. Any ideas, what patch causes this? How to troubleshot?

This was done during this week, done this twice, and got myself in same situation.
- Edited by Pavel yannara Mirochnitchenko Tuesday, December 8, 2015 9:07 AM
Tuesday, December 8, 2015 9:06 AM
0

Sign in to vote
I know this is it old post but is it still relevant? I have the same issue and have the above in the registry. I have Windows 2012 server and the boot is incredibly slow because it ges to 35% and after 25 minutes then reboots, it does eventually come backup but takes 35 minutes. Please help!!

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{e7ef96be-969f-414f-97d7-3ddb7b558ccc}
- Edited by NoelM1972 Sunday, September 4, 2016 12:54 AM
Sunday, September 4, 2016 12:50 AM
0

Sign in to vote
This key removal work like a charm for me!!! i just cannot believe, this update was being a real pain, it was also blocking me from receiving newer updates in SCCM/Wsus

Thanks Joscon!!!!
- Edited by Miguel Rosales Tuesday, September 27, 2016 11:11 PM
Tuesday, September 27, 2016 10:59 PM
1

Sign in to vote

Just an update that the key removal of {8c416c79-d49b-4f01-a467-e56d3aa8234c} as mentioned in above posts worked for also me on Windows Update problems with Windows Server 2016 with reverting changes following error 0x800f0922. In addition I also manually updated .NET with KB4346877.

I've tried several possible solutions offered in the various threads and planned to summarize them here. But then I found this write-up which already has summarized most of them:

https://windowsreport.com/windows-update-error-0x800f0922/

Sunday, August 5, 2018 5:28 PM

Products

Resources

Solutions

Updates

Trials

Related Sites

Training

Certifications

Other resources

Support options

More support

Not an IT pro?

Asked by:

"Failure configuring Windows updates. Reverting changes" - Post-reboot status 0x800f0922

Question

All replies