Unable to install Security Update for Windows Server 2025 (KB5082063)

Hi Angel Oclarit,

Microsoft has already acknowledged this problem and released an emergency Out-of-Band update designated as KB5091157 to safely replace the faulty patch. To resolve your current situation, you need to manually apply this corrected update. Simply navigate to the official Microsoft Update Catalog website and search for KB5091157. Download the standalone MSU installer file that corresponds to your server architecture and save it to a local directory, such as your C:\Packages folder.

Once downloaded, you can install the package directly by double-clicking the MSU file or by opening an elevated Command Prompt and running the Deployment Image Servicing and Management tool using the command DISM /Online /Add-Package /PackagePath:C:\Packages\Windows11.0-KB5091157-x64.msu. Using this command bypasses the stuck Windows Update graphical interface and injects the corrected system files directly into your operating system. After the installation completes and you restart your server, the new update will supersede the original failing KB5082063, completely removing it from your pending update queue.

Hope this answer brought you some useful information. If it did, please hit “accept answer”. Should you have any questions, feel free to leave a comment.

Domic

Godfrey Oclarit,

The appearance of error codes 0x80070570 and 1392 during your installation attempts indicates a local corruption issue on your server, rather than a problem with the downloaded update file. Since you verified the file sizes are identical across different servers, the payload itself is intact. These specific errors mean that the temporary staging area Windows uses to extract the update package, or the underlying file system where it's trying to write the files, is corrupted and unreadable.

To resolve this, you must repair any hidden file system anomalies on your system drive. Open an elevated Command Prompt and execute the command chkdsk C: /f to fix logical disk errors. The system will prompt you to schedule the scan for the next restart, so you must press Y and then reboot your Windows Server to allow the disk check utility to scan and repair the NTFS file system structure.

Once the server reboots, you should bypass the default Windows temporary folders entirely during the installation process to avoid any lingering corruption. Create a brand new, empty folder directly on your root drive, such as C:\DISMTemp. Then, open an elevated Command Prompt and run your previous DISM command with an added parameter to force the extraction into this clean environment using the command DISM /Online /Add-Package /PackagePath:C:\Packages\Windows11.0-KB5091157-x64.msu /ScratchDir:C:\DISMTemp. This will allow the system to process the uncorrupted update file in a fresh directory and apply it successfully.

Domic V.

Hi Angel Oclarit,

Has your issue been resolved yet? If it has, please consider accepting the answer as it helps others sharing the same problem benefit too. Thank you :)

Domic V.