Failed installng 2021-06 cumulative update for windows server 2016( KB5003638)

Question

Failed installng 2021-06 cumulative update for windows server 2016( KB5003638)

Jose Puga 26

Hi,
my server failed trying to install the update KB5003638 after the installation process I got an screen

WE COULDN'T COMPLETE THE UPDATES UNDOING CHANGES DON'T TURN OFF YOUR COMPUTER

when it finished I am able to login back to the server but it is on SAFE MODE

I reviewed the event log and this is what I got:

INSTALLATION FAILURE : WINDOWS FAILED TO INSTALL THE FOLLOWING UPDATE WITH ERROR 0X800F0923: SECURITY UPDATE FOR WINDOWS (KB5003638)

Jenny Feng 14,246 Reputation points

2021-06-15T02:18:28.833+00:00

@Jose Puga
Hi,

Just checking in to see if the information provided was helpful.

If the reply helped you, please remember to accept as answer.
If no, please reply and tell us the current situation in order to provide further help.
Raphael 16 Reputation points

2021-06-21T15:28:03.59+00:00

I am also getting the error 2021-06 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5003638) - Error 0x80070002.
Have been trying for 3 days now.
Adrian 1 Reputation point

2021-06-22T08:10:20.937+00:00

same issue here :-(
Jose Puga 26 Reputation points

2021-06-22T12:57:26.027+00:00

I have tried the solution provided and nothing has changed
Robert D805 1 Reputation point

2021-06-22T14:20:05.573+00:00

Yes, same here. I wish Microsoft would escalate this issue now that multiple people are reporting this issue.
Daniel Madrid 1 Reputation point

2021-07-08T15:29:38.917+00:00

Hello All: I had the same issue that update KB5003638 would not install. After repeated attempts to use posted solutions, The only error message in the log files is error 0x000005b4, which is access denied. I shut off Windows Defender, and then the upgrade did install successfully. Good Luck!

5 answers

Your answer

Jenny Feng 14,246 Reputation points

2021-06-15T02:18:28.833+00:00

@Jose Puga
Hi,

Just checking in to see if the information provided was helpful.

If the reply helped you, please remember to accept as answer.
If no, please reply and tell us the current situation in order to provide further help.
Raphael 16 Reputation points

2021-06-21T15:28:03.59+00:00

I am also getting the error 2021-06 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5003638) - Error 0x80070002.
Have been trying for 3 days now.
Adrian 1 Reputation point

2021-06-22T08:10:20.937+00:00

same issue here :-(
Jose Puga 26 Reputation points

2021-06-22T12:57:26.027+00:00

I have tried the solution provided and nothing has changed
Robert D805 1 Reputation point

2021-06-22T14:20:05.573+00:00

Yes, same here. I wish Microsoft would escalate this issue now that multiple people are reporting this issue.
Daniel Madrid 1 Reputation point

2021-07-08T15:29:38.917+00:00

Hello All: I had the same issue that update KB5003638 would not install. After repeated attempts to use posted solutions, The only error message in the log files is error 0x000005b4, which is access denied. I shut off Windows Defender, and then the upgrade did install successfully. Good Luck!

Answer 1

Levi Rogers 6

We are experiencing the same issue on Server Core 2019 version 2004. 10.0.19041.0

I have tried all the normal windows update tricks, sfc, dism, all of the windows update cleanups and nothing works. I even ran DISM with the image loaded from the ISO I used to install the OS and no joy. SFC find nothing and DISM says nothign needs repaired.

Today I tried installing the SSU separately and that did not work.

I am going to open a support case regarding this if no one can come up with anything.

Answer 2

@Jose Puga
Hi,

Right click on Windows Start > Windows Powershell (Admin)
Type following (or copy and paste following) one by one and Enter

net stop wuauserv
net stop cryptSvc
net stop bits
net stop msiserver
Ren C:\Windows\SoftwareDistribution SoftwareDistribution.old
Ren C:\Windows\System32\catroot2 Catroot2.old
net start wuauserv
net start cryptSvc
net start bits
net start msiserver

2.You can download the updates from Microsoft Catalog and update manually. Search for relevant KB in the Catalog.
Microsoft Catalog - https://www.catalog.update.microsoft.com/Home.aspx

For more troubleshooting methods, please refer to the following article:
https://www.pcerror-fix.com/fix-windows-10-upgrade-error-code-0x800f0923
Please note: Information posted in the given link is hosted by a third party. Microsoft does not guarantee the accuracy and effectiveness of information.
Hope above information can help you.

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread

Robert D805 1 Reputation point

2021-06-10T22:34:49.087+00:00

I have the exact same issue. We have multiple Windows 2016 Servers and one had this issue. We tried installing from the catalog, the Windows Update Troubleshooter and the Windows Update Manual Reset methodology (which includes solution #1 above in a more thorough fashion). Nothing worked so far. Came here wondering if someone else had this problem too and it's right at the top.

Answer 3

Jose Puga 26

JennyFeng
Thanks for your help, I have followed all the steps I run all the commands, after that I downloaded the update and it was installed manually,
when it finished, i got the screen
GETTING WINDOWS READY
DON'T TURN OFF YOUR COMPUTER

after few minutes

I got the following screen again

WE COULDN'T COMPLETE THE UPDATES UNDOING CHANGES DON'T TURN OFF YOUR COMPUTER

after the computer reboot , it came back as SAFE MODE and reviewing the event log
i got the following error message

Your help is greatly appreciated

Thanks ...!!!!!

Jenny Feng 14,246 Reputation points

2021-06-11T08:20:07.88+00:00

These 10016 events are recorded when Microsoft components try to access DCOM components without the required permissions. These events can be safely ignored because they don't adversely affect functionality and are by design.
If the conventional method does not work, you could repair install by running setup.exe from the root of install media
or also by pouring over the \dism.log, \windowsupdate.log, \cbs.log looking for and replacing the missing files from another server.
nelson hernandez 1 Reputation point

2021-06-18T23:44:49.253+00:00

Any news about this potential issue? I was about to install the update on one of our servers and then I saw this thread.
David Volz 1 Reputation point

2021-06-20T20:02:27.157+00:00

Afternoon! Were you able to resolve the issue? I'm preparing to apply the same update.
nelson hernandez 1 Reputation point

2021-06-26T23:25:38.07+00:00

I have installed the update on our virtual machines without any issues. Had to take some precautions before installing it but everything went smoothly.

Answer 4

"Ren C:\Windows\System32\catroot2 Catroot2.old"

Not sure if this works anymore, I'm having the same issue with 2021-06 but for Windows 10 (KB5003637).

I tried these steps you have listed here earlier but when trying to rename catroot2 I cannot do this.

Due to files in use by cryptsvc, even if I set cryptsvc to disabled, when I try to rename cartroot2 it just re-enables cryptsvc and starts the service up again.

I did get SoftwareDistribution renamed and a fresh one going, but not a fix the same issue persists.

And my issue is the exact same with the thread creator, after installing and going to pending restart status, a reboot just forces a second reboot after the install leading to:

"WE COULDN'T COMPLETE THE UPDATES UNDOING CHANGES DON'T TURN OFF YOUR COMPUTER"

Really annoying cause I'm stuck in a constant cycle of updates downloading in the background and then my computer wanting to reboot to every 15 minutes so it can install an update that it will rollback on boot, then repeat.

Answer 5

Naveen Anand 1

Guys, try to look into windows temp folder and it would worth to delete everything and give a try again. You may see the log file C:\Windows\Logs\CBS and which might says something like this error "C:\Windows\system32\wbem\NetTCPIP.mof (1): error SYNTAX 0X8004402f: Error creating temporary file"

Try to delete everything C:\windows\temp and give a try again and let me know if this works for you.

Nicholas Page 6 Reputation points

2021-06-29T14:16:58.997+00:00

"Try to delete everything C:\windows\temp and give a try again and let me know if this works for you."

This did not work.
Naveen Anand 1 Reputation point

2021-06-29T15:33:19.887+00:00

do you have enough disk space to the respective drive? and also check what is the size of temp folder once it failed to update the windows.
Nicholas Page 6 Reputation points

2021-06-29T17:10:43.49+00:00

Plenty of free space, no errors creating temporary files. Hard to detect change of the size of them temp folder, as soon as I clear it (what will allow me to delete) it starts coming back before the update even completes.
Naveen Anand 1 Reputation point

2021-07-02T11:21:30.127+00:00

can you attach the log file C:\Windows\Logs\CBS ?
Nicholas Page 6 Reputation points

2021-07-02T12:45:42.027+00:00

II actually got this resolved by doing an in-place upgrade for 21H1. I had already spent a lot of time trying to resolve it and after running sfc scan it said some error were found and corrected, but then I ran again and it said the same thing immediately afterward. Upon checking logs I found sfc was failing and not making corrections so, I just did an in-place upgrade via media creation tool for 21H1 and then afterward Windows Update starting working again.

Share via

Failed installng 2021-06 cumulative update for windows server 2016( KB5003638)

5 answers

Your answer