patch failed after server reboot

Question

Hello All,

Sometime I have seen below error after completing 96% completed. but as soon as server reboot. It roll back the patches and patches failed on add remove program.

windows server couldn't complete updates

1) Anything I can enable before reboot the server and check what caused the issue? My understanding is particular older patch or driver create these type of issues.

2) Any verbose I can enable so that it will capture in logs what was happened after reboot the server? why patches failed.

3) Anything I can check on procmon level?

Answer 1

Hello @Anonymous

you can enable Windows Update verbose login by changing the registry parameters:

path: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Trace
Add a new DWORD key named Flags with a value of 7
Add a new DWORD key named Level with a value of 4
Then apply the change by running:

NET STOP wuauserv
NET START wuauserv

After this compile the ETW traces to txt log using the powershell cmdlet: Get-WindowsUpdateLog

After the update fails again, try to read the latest records at the bottom of the log to spot some 0x errors or other messages around the errors.

Hope this helps, and please share here your findings so we can help you further,
Best regards,

Answer 2

Hi,

cbs.log doesn't clear all the information neither its mention what is happening during post boot.

1) Any thing I can enable the logging?
2) When you say cbs.log ? are you referring anything particular?

Answer 3

Yes, i know about these logs.

What logging i can enable? so that post reboot information will be locked.

Answer 4

Thanks for the update.

My issue when I reboot the server patches are getting roll back.

error. Couldn't applied the patches.