Facing the error while updating windows server 2022 core using ansible win_updates

Question

Failed to install all updates - see updates for more information\r
At line:980 char:9\r

•     throw "Failed to install all updates - see updates for more i ...\r  
  

•     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\r  
  

  • CategoryInfo : OperationStopped: (Failed to insta...ore information:String) []%!(PACKER_COMMA) RuntimeException\r
  • FullyQualifiedErrorId : Failed to install all updates - see updates for more information\r
    \r
    \r
    \r
    at <ScriptBlock>%!(PACKER_COMMA) <No file>: line 980
    fatal: [default]: FAILED! => {
    "changed": true%!(PACKER_COMMA)
    "failed_update_count": 1%!(PACKER_COMMA)
    "filtered_updates": {
    "315f8b24-c165-420b-a374-c59e59a90cf4": {
    "categories": [
    "Definition Updates"%!(PACKER_COMMA)
    "Microsoft Defender Antivirus"
    ]%!(PACKER_COMMA)
    "downloaded": false%!(PACKER_COMMA)
    "filtered_reason": "category_names"%!(PACKER_COMMA)
    "filtered_reasons": [
    "category_names"
    ]%!(PACKER_COMMA)
    "id": "315f8b24-c165-420b-a374-c59e59a90cf4"%!(PACKER_COMMA)
    "installed": false%!(PACKER_COMMA)
    "kb": [
    "2267602"
    ]%!(PACKER_COMMA)
    "title": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.405.308.0) - Current Channel (Broad)"
    }
    }%!(PACKER_COMMA)
    "found_update_count": 1%!(PACKER_COMMA)
    "installed_update_count": 0%!(PACKER_COMMA)
    "invocation": {
    "module_args": {
    "accept_list": null%!(PACKER_COMMA)
    "category_names": [
    "CriticalUpdates"%!(PACKER_COMMA)
    "SecurityUpdates"%!(PACKER_COMMA)
    "UpdateRollups"%!(PACKER_COMMA)
    "Updates"
    ]%!(PACKER_COMMA)
    "log_path": null%!(PACKER_COMMA)
    "reboot": false%!(PACKER_COMMA)
    "reboot_timeout": 1200%!(PACKER_COMMA)
    "reject_list": [
    "4561600"%!(PACKER_COMMA)
    "890830"
    ]%!(PACKER_COMMA)
    "server_selection": "default"%!(PACKER_COMMA)
    "skip_optional": false%!(PACKER_COMMA)
    "state": "installed"%!(PACKER_COMMA)
    "use_scheduled_task": false
    }
    }%!(PACKER_COMMA)
    "msg": "Failed to install all updates - see updates for more information"%!(PACKER_COMMA)
    "reboot_required": false%!(PACKER_COMMA)
    "rebooted": false%!(PACKER_COMMA)
    "updates": {
    "a8a2d6e3-c6dc-4eb8-bcfb-8c8c7d947899": {
    "categories": [
    "Microsoft Server operating system-21H2"%!(PACKER_COMMA)
    "Security Updates"
    ]%!(PACKER_COMMA)
    "downloaded": true%!(PACKER_COMMA)
    "failure_hresult_code": 2147944003%!(PACKER_COMMA)
    "failure_msg": "Unknown WUA HRESULT 2147944003 (UNKNOWN 80070643)"%!(PACKER_COMMA)
    "id": "a8a2d6e3-c6dc-4eb8-bcfb-8c8c7d947899"%!(PACKER_COMMA)
    "installed": false%!(PACKER_COMMA)
    "kb": [
    "5034439"
    ]%!(PACKER_COMMA)
    "title": "2024-01 Security Update for Microsoft server operating system version 21H2 for x64-based Systems (KB5034439)"

Answer 1

Hey Ram,

We've identified the reason for the error. It seems that there's a disparity in updates when comparing direct GUI Windows updates versus using the Windows Update API (WUA) via Ansible. WUA doesn't seem to have access to beta version updates from Windows, which is causing the error "Unknown WUA HRESULT 2147944003 (UNKNOWN 80070643)." Unfortunately, we haven't found a solution yet. For now, we've opted to skip the particular update KB "5034439" using the reject list. I'll keep you posted if we find a solution, and if you come across one, please share it here.

Thanks,
Vignesh

Answer 2

Sure, Thank you for the quick reply.

Thanks,

Ram