Windows Server 2016 security update Failed with Error 0x800736B3

Question

Hi Guys,

I recently have run in to a problem, where Latest Microsoft server 2016 security Patches installation failed.

In the Event Log , there is Error

Event 20: Installation Failure: Windows Failed to Install the following update with error 0x800736B3. Security update for windows (KB5023788).

Current Build version is windows server 2016 14393.5427

Below are the Actions Taken so far

1. sfc /scannow - No Integrity Violations Found
2. Dism.exe /online /Cleanup-Image /ScanHealth - No Component Store Corruption Detected.

Please note , our environment doesn't have internet connectivity and we install Patches Manually.

DISM Image Version: 10.0.14393.4169

Please Advise on how to fix this patch installation failure and proceed further

Thanks

Answer 1

Hello

Thank you for your question and reaching out. I can understand you are having query\issues related to Windows updates.

Please try to reset Windows update components using below steps.

1. Open Command Prompt with elevated and run below commands one-by-one then press enter

net stop wuauserv

net stop cryptSvc

net stop bits

net stop msiserver

Ren C:\Windows\SoftwareDistribution SoftwareDistribution.old

Ren C:\Windows\System32\catroot2 Catroot2.old

2. Reboot your Server.
3. . Run below DISM commands from elevated prompt.

DISM /Online /Cleanup-Image /CheckHealth

DISM /Online /Cleanup-Image /RestoreHealth

3. Disable any Antivirus program or Windows firewall you may have for temporary purpose.
4. Try apply that KB5023788 manually

--If the reply is helpful, please Upvote and Accept as answer--

Answer 2

Hello,

Thanks for your response. Does renaming software distribution and catroot2 folder cause any OS failure ?? As we cannot afford outage , given the situation of our project..hence , would like to clarify if server will still be accessible after performing these steps ? please confirm

Also, Dism.exe /online /Cleanup-Image /ScanHealth returned no component store corruption detected... Hence , would like to know if it is advisable to reset the component store. Thanks in Advance