Security Update for Windows Server 2019 for x64-based Systems (KB4535680)

TylerB1985 36

I know this update was pulled. Anyone know how to remove it from a server as a pending update?

I have looked for this file: C:\windows\winsxs\pending.xml and it's not there. I have also stopped Windows Updates and BITS and removed the C:\Windows\SoftwareDistribution folder. Still no luck.

Security Update for Windows Server 2019 for x64-based Systems (KB4535680) - Error 0x800f0922

Accepted answer

Juan Sobrado - MSFT 401 Reputation points Microsoft Employee

2021-01-30T05:16:50.557+00:00

Hello @TylerB1985

Move to an admin cmd and run:

dism /online /get-packages /format:table

look for the update, it should show as "Install Pending"

Copy the package name and type:

dism /online /remove-package /packagename:NameOfPackage

Let me know the results,

Juan S

-----------------------------

Please up vote this answer if your find it useful.
Please sign in to rate this answer.

1 person found this answer helpful.
TylerB1985 36 Reputation points

2021-01-30T19:56:13.517+00:00

Unfortunately I don't see this one listed.

Juan Sobrado - MSFT 401 Reputation points Microsoft Employee

2021-02-01T03:14:26.917+00:00

Hi @TylerB1985

Are you re-scanning for Windows Updates after you have renamed the SoftwareDistribution folder and Catroot2 ?
If yes, and you have verified was pulled from MU/WU servers, then you are getting it from an alternate source. Do you use WSUS in your environment?

You need to review the ReportingEvents.log from C:\windows\softwaredistribution folder? This file will tell you the from where the update is getting downloaded from.

Let me know the results,

Thanks,

Juan S

TylerB1985 36 Reputation points

2021-02-01T13:51:22.627+00:00

Well I'd checked my WSUS server first off, but apparently there was a disconnect between the keyboard and the chair. The first time I'd checked, I didn't find the update. This time I did. :(

Declined the update and all is well now. Thanks for the reminder.
Sign in to comment

9 additional answers

Jenny Feng 14,146 Reputation points

2021-01-26T03:22:24.33+00:00

@TylerB1985
Hi,
The Windows Update error 0x800F0922 can occur due to one of the following reasons.
App Readiness service is disabled.
Performance counters are damaged.
The System Reserved partition’s free space is less than 15 MB.

You may refer to the following link for details:
https://www.winhelponline.com/blog/error-0x800f0922-installing-windows-update-windows-10/
Please note: Information posted in the given link is hosted by a third party. Microsoft does not guarantee the accuracy and effectiveness of information.
Hope above information can help you.

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Please sign in to rate this answer.

1 person found this answer helpful.
TylerB1985 36 Reputation points

2021-01-26T13:14:13.183+00:00

Thanks for the reply but none of these resolved the issue.

Jenny Feng 14,146 Reputation points

2021-01-27T08:36:40.723+00:00

Hi,
You could check the known issues here:
https://support.microsoft.com/en-us/topic/security-update-for-secure-boot-dbx-january-12-2021-f08c6b00-a850-e595-6147-d0c32ead81e2

and check with the hardware manufacturer to confirm its supported.

TylerB1985 36 Reputation points

2021-01-27T13:38:45.683+00:00

Thanks again, but I am more wanting to remove the pending update since Microsoft pulled it.

Jenny Feng 14,146 Reputation points

2021-01-28T08:52:57.043+00:00

Try to use the following command to uninstall the KB.

wusa /uninstall /kb:xxxxxx

TylerB1985 36 Reputation points

2021-01-28T21:33:55.11+00:00

Well the update is NOT installed. It's pending.

TylerB1985 36 Reputation points

2021-01-28T22:01:04.187+00:00

See image

Marc Bajo 1 Reputation point

2021-02-02T16:56:49.96+00:00

Hi all, I do have the same problem in my company, we are having half of the machines with error in this update, can you help me where to check this update has been pulled? Is there any major issue on this KB?

Thanks in advance, waiting for more information and a way to resolve it!

Marc

TylerB1985 36 Reputation points

2021-02-02T17:06:24.763+00:00

So I found later that it wasn't pulled. I also saw it was about Secure Boot which we don't use. I reached out to the hardware vendor and they had no clue so I just excluded the update from my WSUS server and am forgetting about it.

Marc Bajo 1 Reputation point

2021-02-02T17:09:23.597+00:00

Thanks for that quick reply! I will try to reach my hardware vendor to doublecheck!
Sign in to comment
Mason Walters 6 Reputation points

2021-04-25T20:43:13.077+00:00

same issue server 2019.. classic
Please sign in to rate this answer.

1 person found this answer helpful.

0 comments No comments
Sign in to comment
Eivind 6 Reputation points

2021-05-31T15:32:08.753+00:00

Same exact issue on Windows Server 2019 Essentials.
All troubleshooting steps suggested in this forum post has been attempted without any success at getting rid of the update or getting the update to successfully install.
Please sign in to rate this answer.

1 person found this answer helpful.

0 comments No comments
Sign in to comment
Jenny Feng 14,146 Reputation points

2021-01-29T07:42:10.127+00:00

Hi,
Resetting the catroot2 folder is basically known to fix many Windows Update problems.

Catroot and catroot2 are actually the Windows operating system folders required for Windows Update.

When you run Windows Update, the folder catroot2 stores the signatures of the Windows Update package and also helps to install it. The Cryptographic Service actually uses the % windir% System32catroot2edb.log file for the update process. Updates are stored in the SoftwareDistribution folder, which is then used by Automatic Updates to perform the update.

Do not delete or rename the Catroot folder. The Catroot2 folder is recreated automatically by Windows. However, the Catroot folder is not recreated if it is renamed.
Please sign in to rate this answer.
TylerB1985 36 Reputation points

2021-01-29T13:31:48.84+00:00

Ran
Net stop Wuauserv
Net stop cryptsvc
Net stop bits

Deleted both the catroot2 and SoftwareDistribution folders.

Restarted services and still have the pending update.

Jenny Feng 14,146 Reputation points

2021-02-01T07:55:11.6+00:00

Hi,
Don't run the Update Wizard again. Instead, browse to the Microsoft Update Catalogue and search for the patch by KB number.
Download the patch for your particular Operating System. After Download completes, run the patch (by double clicking on the downloaded file) and follow the prompts.
Once the patch is installed and the server rebooted (if required), this patch will no longer need to be installed using the 'normal' method, clearing up the patch installation issue.

TylerB1985 36 Reputation points

2021-02-01T13:45:16.907+00:00

I do appreciate your persistence with this. I'd already tried this, but did it again just to make sure.

Installation Failure: Windows failed to install the following update with error 0x800F0922: Security Update for Windows (KB4535680).

Juan Sobrado - MSFT 401 Reputation points Microsoft Employee

2021-02-01T17:38:39.02+00:00

Hello @TylerB1985

Please enable a Clean boot: https://support.microsoft.com/en-us/topic/how-to-perform-a-clean-boot-in-windows-da2f9573-6eec-00ad-2f8a-a97a1807f3dd

Make sure no AV is running during the manual update install.

If problem persists, we need to collect CBS files from C:\windows\Logs\cbs and check for keywords with ", err" and ", warn".

Regards,

Juan S.

If the Answer is helpful, please click "Accept Answer" and upvote it.
Sign in to comment