Symptom – Unable to install latest updates on multiple Windows Server 2016 machines

 

Symptom – Unable to install latest updates on multiple Windows Server 2016 machines

 

Cause – Machines affected with known issue for KB4601392

 

Reference Article –

https://support.microsoft.com/en-us/topic/february-9-2021-kb4601318-os-build-14393-4225-c5e3de6c-e3e6-ffb5-6197-48b9ce16446e

 

One behavior we observed due to above KB on these machines are that Windows Update Service gets stuck in stopping state and fails to install any updates.

 

Solution – Issue is resolved with new SSU KB5001078

 

There are additional steps we need to take in order to be able to install KB5001078 –

 

1. As the Windows Update Service is stuck in stopping state, we will not be able to install KB5001078 directly

2. To stop the service, we will either need to restart the server or kill task for Windows Update Service (wuauserv)

3. Once the task is killed, it is recommended to change the startup type for Windows Update Service to Disabled so that it doesn’t starts automatically as we need it to be stopped to perform next steps

4. Next step is to rename C:\Windows\SoftwareDistribution folder to SoftwareDistribution.old

5. Additionally we can also run commands in following link to reset Windows Update Components –

https://docs.microsoft.com/en-us/windows/deployment/update/windows-update-resources#reset-windows-update-components-manually

6. Then restart the machine

7. Once the machine is up, change startup type for Windows Update Service to Manual and restart the service

8. Install KB5001078 manually or through DISM, we noticed that double click installation for .msu is very slow due to the issue but DISM is superfast.

9. Steps to install an update through DISM –

Download KB5001078

Create a temp folder

Expand the update using command ->  Expand -F:* <file.msu> <temp_folder>

In the Temp Folder there will be 4 files expanded from .MSU file. A package whose extension will be .cab and will be largest in size, we will need location of that package for next command

Install it using command ->  DISM.exe /Online /Add-Package /PackagePath:<temp_folder\package.cab>

10. Restart the server if KB5001078 is successfully installed

11. After restart, proceed with installation of rest of the updates

 

 

 

Sharing command line which can be used to automate the process –

 

1. Kill Windows Update Service Task –

taskkill /f /fi "SERVICES eq wuauserv"

 

2. Change startup Type for Windows Update Service to Disabled –

sc config wuauserv start=disabled

 

3. Stop Windows Update and other services –

net stop bits

net stop wuauserv

net stop cryptsvc

 

4. Rename Software Distribution folder –

Del %Systemroot%\SoftwareDistribution.old

Ren %Systemroot%\SoftwareDistribution SoftwareDistribution.old

 

5. Additionally you can even add commands in below link in order for better results –

https://docs.microsoft.com/en-us/windows/deployment/update/windows-update-resources#reset-windows-update-components-manually

 

6. Restart the server –

Shutdown /r /t 0

 

7. Change startup type for Windows Update Service to Manual –

sc config wuauserv start=demand

 

8. Start all the Windows Update Services –

net start bits

net start wuauserv  

net start cryptsvc

 

Then proceed with installation of KB5001078.

 

 

Recent status of case –

 

We have installed the fix update KB5001078 and are installing new cumulative update to verify the fix.

Update is being installed and may take time to complete.