none
Win server 2012 foundation windows update not working (i tried almost everything) RRS feed

  • Question

  • Hello guys, I tried this question on WSUS forum, but they asked to post here, It used to work normally, and now its showing the error:

    and the log shows:

    I tried a LOT of solutions, txr directory clean it, including the following pwershell script:

    Write-Host "1. Stopping Windows Update Services..."

    Stop-Service -Name BITS
    Stop-Service -Name wuauserv
    Stop-Service -Name appidsvc
    Stop-Service -Name cryptsvc

    Write-Host "2. Remove QMGR Data file..."
    Remove-Item "$env:allusersprofile\Application Data\Microsoft\Network\Downloader\qmgr*.dat" -ErrorAction SilentlyContinue

    Write-Host "3. Renaming the Software Distribution and CatRoot Folder..."
    Rename-Item $env:systemroot\SoftwareDistribution SoftwareDistribution.bak -ErrorAction SilentlyContinue
    Rename-Item $env:systemroot\System32\Catroot2 catroot2.bak -ErrorAction SilentlyContinue

    Write-Host "4. Removing old Windows Update log..."
    Remove-Item $env:systemroot\WindowsUpdate.log -ErrorAction SilentlyContinue

    Write-Host "5. Resetting the Windows Update Services to defualt settings..."
    "sc.exe sdset bits D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)"
    "sc.exe sdset wuauserv D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)"

    Set-Location $env:systemroot\system32

    Write-Host "6. Registering some DLLs..."
    regsvr32.exe /s atl.dll
    regsvr32.exe /s urlmon.dll
    regsvr32.exe /s mshtml.dll
    regsvr32.exe /s shdocvw.dll
    regsvr32.exe /s browseui.dll
    regsvr32.exe /s jscript.dll
    regsvr32.exe /s vbscript.dll
    regsvr32.exe /s scrrun.dll
    regsvr32.exe /s msxml.dll
    regsvr32.exe /s msxml3.dll
    regsvr32.exe /s msxml6.dll
    regsvr32.exe /s actxprxy.dll
    regsvr32.exe /s softpub.dll
    regsvr32.exe /s wintrust.dll
    regsvr32.exe /s dssenh.dll
    regsvr32.exe /s rsaenh.dll
    regsvr32.exe /s gpkcsp.dll
    regsvr32.exe /s sccbase.dll
    regsvr32.exe /s slbcsp.dll
    regsvr32.exe /s cryptdlg.dll
    regsvr32.exe /s oleaut32.dll
    regsvr32.exe /s ole32.dll
    regsvr32.exe /s shell32.dll
    regsvr32.exe /s initpki.dll
    regsvr32.exe /s wuapi.dll
    regsvr32.exe /s wuaueng.dll
    regsvr32.exe /s wuaueng1.dll
    regsvr32.exe /s wucltui.dll
    regsvr32.exe /s wups.dll
    regsvr32.exe /s wups2.dll
    regsvr32.exe /s wuweb.dll
    regsvr32.exe /s qmgr.dll
    regsvr32.exe /s qmgrprxy.dll
    regsvr32.exe /s wucltux.dll
    regsvr32.exe /s muweb.dll
    regsvr32.exe /s wuwebv.dll

    Write-Host "7) Removing WSUS client settings..."
    REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v AccountDomainSid /f
    REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v PingID /f
    REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v SusClientId /f

    Write-Host "8) Resetting the WinSock..."
    netsh winsock reset
    netsh winhttp reset proxy

    Write-Host "9) Delete all BITS jobs..."
    Get-BitsTransfer | Remove-BitsTransfer

    Write-Host "10) Attempting to install the Windows Update Agent..."
    if($arch -eq 64){
        wusa Windows8-RT-KB2937636-x64 /quiet
    }
    else{
        wusa Windows8-RT-KB2937636-x86 /quiet
    }

    Write-Host "11) Starting Windows Update Services..."
    Start-Service -Name BITS
    Start-Service -Name wuauserv
    Start-Service -Name appidsvc
    Start-Service -Name cryptsvc

    Write-Host "12) Forcing discovery..."
    wuauclt /resetauthorization /detectnow

    I tried all those commands, (and those are the solutions that you find anywhere about this matter) ONE BY ONE and BY SCRIPT AUTOMATICALLY, nothing works, always same error.

    ON foruns out there they speak about WSUS, but we dont have wsus (this computer never had), so its nothing related, but i dont know sometimes windows is (thinking) there is wsus, if you have another try to clean on this computer anything related to wsus too i could try.

    Someone have any ideas on this specific error on log?


    Another thing is, when i run sfc /scannow, show sthe error:

    Windows Resource Protection could not start the repair service

    it shows on log:

    Failed to create CBS worker - waiting for a second and trying again [HRESULT = 0x80004002]

    What does it mean? ps: the trustedinstaller is running normally.

    Hope someone can help me, thank you.



    Monday, September 10, 2018 5:03 PM

All replies

  • This is a quick note to let you know that I am currently performing research on this issue and will get back to you as soon as possible. I appreciate your patience.


    Tuesday, September 11, 2018 12:38 PM
  • Hi,

    Have a look at this URL and run through it to see if it helps.  

    https://support.microsoft.com/en-gb/help/947821/fix-windows-update-errors-by-using-the-dism-or-system-update-readiness 

    Download the relavent version for your server and run it 

    WSUS may be running on your network and this server many be managed by that server. However the issue seems local to this server. 

    Hope this helps

    Haz


    • Edited by HazHudda Tuesday, September 11, 2018 1:04 PM
    Tuesday, September 11, 2018 1:02 PM
  • hi,
    you can run gpresult /H d:\gpresults.html [ENTER]. Here you will find
     the GPOs for WSUS settings incl. the name of the WSUS-GPO.
    you can also check if there is local policy about wsus on server 2012 foundation, then disable it or set "not configured"
    for example, you go to  local group policy editor ---computer configuration---administrative templates ----windows components---windows update
    check if the item "specify intranet Microsoft update service location" is point to wsus server.
    Wednesday, September 12, 2018 2:21 AM
  • Hi,

    Have a look at this URL and run through it to see if it helps.  

    https://support.microsoft.com/en-gb/help/947821/fix-windows-update-errors-by-using-the-dism-or-system-update-readiness 

    Download the relavent version for your server and run it 

    WSUS may be running on your network and this server many be managed by that server. However the issue seems local to this server. 

    Hope this helps

    Haz


    Hello, i followed the link, BUT the DISM command "DISM.exe /Online /Cleanup-image /Restorehealth" it apears this:

    "this application cannot be run in your pc. to locate a version to your pc, find a software distributor"

    Command cant be run. Any other ideas what is happening?

    Thanks.

    Friday, September 14, 2018 6:00 PM
  • hi,
    you can run gpresult /H d:\gpresults.html [ENTER]. Here you will find
     the GPOs for WSUS settings incl. the name of the WSUS-GPO.
    you can also check if there is local policy about wsus on server 2012 foundation, then disable it or set "not configured"
    for example, you go to  local group policy editor ---computer configuration---administrative templates ----windows components---windows update
    check if the item "specify intranet Microsoft update service location" is point to wsus server.

    Hello, on gpresults.html, there is no wsus word.

    On Windows update on windows components, specify intranet xxxxxx is not configured.

    As i said, there is no wsus pointing configuration, we dont have wsus.

    I still having the problem, any other shot?

    Thank you.


    Friday, September 14, 2018 6:07 PM
  • Try to disable your firewall before running the regsvr32.exe command. 

    Regards, Philippe

    Don't forget to mark as answer or vote as helpful to help identify good information. ( linkedin endorsement never hurt too :o) )

    Answer an interesting question ? Create a wiki article about it!

    Friday, September 14, 2018 7:35 PM
    Moderator
  • hi,
    1.enter sfc /scannow    and wait it finish to fix manifest and system file then go to step 2.
    2.Now type the following commands to stop Windows Update Services and then hit Enter after each one:
    net stop wuauserv
    net stop cryptSvc
    net stop bits
    net stop msiserver
    3.Next, type the following command to rename SoftwareDistribution Folder and then hit Enter:
    ren C:\Windows\SoftwareDistribution SoftwareDistribution.old
    ren C:\Windows\System32\catroot2 catroot2.old
    4.Finally, type the following command to start Windows Update Services and hit Enter after each one:
    net start wuauserv
    net start cryptSvc
    net start bits
    net start msiserver
    5.Reboot your server to save changes.

    If the problem still exist ,you can refer the below site then upload the cbs.log and windowupdate.log .
    windowupdate.log locate in C:\windows 
    CBS.log locate in 
    C:\Windows\Logs\CBS
    https://support.microsoft.com/en-sg/help/947821/fix-windows-update-errors-by-using-the-dism-or-system-update-readiness?wa=wsignin1.0



    Tuesday, September 18, 2018 6:58 AM