We couldn't complete the updates. Undoing changes. Don't turn off your computer

Question

I have windows server 2016 (domain controller) when I try to install the update (KB5015808) display We couldn't complete the updates. Undoing changes. Don't turn off your computer.

Answer 1

Some things to try

• sfc /scannow
• dism /online /cleanup-image /restorehealth
• additional resources for Windows Update - Windows Client | Microsoft Learn (manual steps)
• a repair install by running setup.exe from the root of install media

but a much simpler / safer method is to stand up a new one for replacement.

I'd use dcdiag / repadmin tools to verify health correcting all errors found before starting any operations. Then stand up the new 2016, patch it fully, license it, join existing domain, add active directory domain services, promote it also making it a GC (recommended), transfer FSMO roles over (optional), transfer pdc emulator role (optional), use dcdiag / repadmin tools to again verify health, when all is good you can decommission / demote old one.

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 2

Some possible option here.
https://learn.microsoft.com/en-us/windows-hardware/manufacture/desktop/configure-a-windows-repair-source?view=windows-11

but the much simpler / safer method is to stand up a new one for replacement.

I'd use dcdiag / repadmin tools to verify health correcting all errors found before starting any operations. Then stand up the new 2016, patch it fully, license it, join existing domain, add active directory domain services, promote it also making it a GC (recommended), transfer FSMO roles over (optional), transfer pdc emulator role (optional), use dcdiag / repadmin tools to again verify health, when all is good you can decommission / demote old one.

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 3

Thank you for your information.
Can you give me the best practice to create two new servers, transfer FSMO to one of them, and cancel the old one?

Answer 4

I wouldn't do anything until health is confirm 100% (dcdiag / repadmin tools, event logs clear of errors) then if you wanted to use the same names and ip addresses then you could transfer roles off one, demote / decommission it. Then stand up the new 2016, patch it fully, license it, join existing domain, add active directory domain services, promote it also making it a GC (recommended), transfer FSMO roles over, transfer pdc emulator role, use dcdiag / repadmin tools to again verify health, when all is good you can move on to next one.

--please don't forget to upvote and Accept as answer if the reply is helpful--