Windows Server 2016 security update Failed with Error 0x800736B3

Pruthvi Divi 0 Reputation points

Hi Guys,

I recently have run in to a problem, where Latest Microsoft server 2016 security Patches installation failed.

In the Event Log , there is Error

Event 20: Installation Failure: Windows Failed to Install the following update with error 0x800736B3. Security update for windows (KB5023788).

Current Build version is windows server 2016 14393.5427

Below are the Actions Taken so far

  1. sfc /scannow - No Integrity Violations Found
  2. Dism.exe /online /Cleanup-Image /ScanHealth - No Component Store Corruption Detected.

Please note , our environment doesn't have internet connectivity and we install Patches Manually.

DISM Image Version: 10.0.14393.4169

Please Advise on how to fix this patch installation failure and proceed further


Windows Server 2016
Windows Server 2016
A Microsoft server operating system that supports enterprise-level management updated to data storage.
2,152 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Limitless Technology 42,306 Reputation points


    Thank you for your question and reaching out. I can understand you are having query\issues related to Windows updates.

    Please try to reset Windows update components using below steps.

    1. Open Command Prompt with elevated and run below commands one-by-one then press enter

    net stop wuauserv

    net stop cryptSvc

    net stop bits

    net stop msiserver

    Ren C:\Windows\SoftwareDistribution SoftwareDistribution.old

    Ren C:\Windows\System32\catroot2 Catroot2.old

    1. Reboot your Server.
    2. . Run below DISM commands from elevated prompt.

    DISM /Online /Cleanup-Image /CheckHealth

    DISM /Online /Cleanup-Image /RestoreHealth

    1. Disable any Antivirus program or Windows firewall you may have for temporary purpose.
    2. Try apply that KB5023788 manually

    --If the reply is helpful, please Upvote and Accept as answer--

    0 comments No comments

  2. Pruthvi Divi 0 Reputation points


    Thanks for your response. Does renaming software distribution and catroot2 folder cause any OS failure ?? As we cannot afford outage , given the situation of our project..hence , would like to clarify if server will still be accessible after performing these steps ? please confirm

    Also, Dism.exe /online /Cleanup-Image /ScanHealth returned no component store corruption detected... Hence , would like to know if it is advisable to reset the component store. Thanks in Advance

    0 comments No comments