Windows Server 2012R2, December 2016 security patch won't install "We couldn't complete the updates"

Question

I have a Windows Server 2012R2 on which the December 2016 update kb3205401 won't install.

I've tried it several times through Windows Update, which always gives the 'We couldn't complete the updates. Undoing Changes. Don't turn off your computer.' error at the reboot, and I've tried once installing manually (download the .msu patch file from the Windows Update Catalog, install it, reboot) and that too 'couldn't complete' and rolls back.

SFC /SCANNOW returns:

"Windows Resource Protection found corrupt files but was unable to fix some

of them. Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For

example C:\Windows\Logs\CBS\CBS.log. Note that logging is currently not

supported in offline servicing scenarios.

The system file repair changes will take effect after the next reboot."

.. but after restarting, retrying the patch produces the same error.

I ran "DISM.exe /Online /Cleanup-Image /RestoreHealth"; I got this disconcerting error:

"Deployment Image Servicing and Management tool

Version: 6.3.9600.17031

Image Version: 6.3.9600.17031

[==========================100.0%==========================]

Error: 3017

The requested operation failed. A system reboot is required to roll back changes made.

The DISM log file can be found at C:\Windows\Logs\DISM\dism.log"

Waiting a moment before panicking :) I hid the errant update, rebooted to let the rollback complete, and re-ran the DISM command.

This time it said it completed successfully and repaired something.

I tried the update again ... failed again, just as before.

This article suggested disabling Secure Boot on the server and trying again, but this is a really old system which doesn't have UEFI BIOS, so it can't have Secure Boot, and that article seems to relate to VMs, whereas this is a physical server (Dell Precision T3400).

Any ideas how to get the December 2016 security roll-up patch to install on this Windows Server 2012R2?

thanks,

-Jay

Answer 1

Thank you ZigZag.

I've reposted here: https://social.technet.microsoft.com/Forums/en-US/cf33c724-1fc9-4258-aa58-d9a4da200bf4/windows-server-2012r2-december-2016-security-patch-wont-install-we-couldnt-complete-the-updates?forum=winserversecurity

I always find it confusing, trying to find the right Microsoft forums. Searching for "Microsoft Partner Technical Community" got me this place, which turns out to not have Server support, even though Partners do work with Servers...

Answer 2

This question is outside the scope of this site (for consumers) and to be sure you get the best answer it should be asked either on Technet (for IT Pro's) or MSDN (for developers)

Technet

https://social.technet.microsoft.com/forums/en-us/home

MSDN

https://social.msdn.microsoft.com/Forums/en-US/home

If you give us a link to the new thread we can point some resources to it