Error 0x800F0920 is associated with a servicing operation taking too long, causing the servicing stack watchdog timer to assume the system has stopped responding. The official guidance in the provided documentation is limited to two supported mitigations:
- Increase system resources and ensure required updates are installed
- For Windows client devices, the mitigation for 0x800F0920 is:
- “A servicing operation is taking a long time to finish. The servicing stack watchdog timer expires and assumes that the system stopped responding. Extending the timeout value mitigates the issue. Increase the resources on the device. If it's a virtual machine, increase virtual CPU and memory to speed up operations. Make sure that the device has update KB4493473 or later installed.”
- For virtual machines, explicitly increase vCPU and memory to speed up servicing operations.
- Verify that KB4493473 or a later cumulative update is installed on affected devices.
- For Windows client devices, the mitigation for 0x800F0920 is:
- Use in-place upgrade when updates repeatedly fail with 0x800F0920
- For Windows-based computers where Windows Update continues to fail with 0x800F0920, the supported remediation is to perform an in-place upgrade of the OS:
- For Windows Server: perform an in-place upgrade as described in the in-place upgrade documentation.
- For Azure Windows VMs: use the in-place upgrade guidance for Windows virtual machines in Azure.
- For Windows-based computers where Windows Update continues to fail with 0x800F0920, the supported remediation is to perform an in-place upgrade of the OS:
- Registry-based timeout extension (TrustedInstaller) – documented workaround
The only explicit, step-based method in the context for extending a timeout related to servicing is a workaround for scenarios where updates hang and are rolled back because TrustedInstaller does not finish within the default 15‑minute timeout. This is done by changing the
BlockTimeIncrementvalue under theTrustedInstallerservice key. The article describes it as a workaround, not a general best-practice tuning knob. Steps from the documentation:- Start Registry Editor.
- Navigate to:
HKLM\System\CurrentControlSet\Services\TrustedInstaller - Right-click the TrustedInstaller key and select Permissions.
- Grant Full Control to the Administrators group.
- Change the BlockTimeIncrement value to
2a30(hexadecimal).- This sets the timeout value to three hours.
- The article notes this should be sufficient for most situations, but a larger value may be required in some environments.
- Restart the server and reapply the update/hotfix.
- Relationship to 0x800F0821 / 0x800F0920 and watchdog timeout
- The common errors article explains that 0x800F0920 (CBS_E_HANG_DETECTED) is a subsequent error logged after 0x800F0821 (CBS transaction timeout exceeded).
- For 0x800F0821, the mitigation is the same pattern:
- “A servicing operation is taking a long time to finish. The servicing stack watchdog timer expires. Extending the timeout mitigates the issue. Increase the resources on the device. If it's a virtual machine, increase virtual CPU and memory to speed up operations. Make sure that the device has installed the update in KB4493473 or later.”
- No additional registry key or Group Policy setting is documented in the provided content beyond the
TrustedInstallerworkaround above.
- Risks and best practices (from the documented workaround)
Based on the documented workaround:
- Changing
BlockTimeIncrementdirectly in the registry is a low-level servicing behavior change and should be treated as an advanced operation. - The article explicitly calls this a workaround and recommends choosing a value that is sufficient for the environment, starting with the documented three-hour setting (
2a30hex) and adjusting only if necessary. - A restart is required after changing the value.
- Because this is a registry modification under
HKLM\System\CurrentControlSet\Services\TrustedInstaller, it should be performed only by administrators and ideally tested on a subset of systems before broad deployment.
- Changing
Within the provided documentation, there is no separate Group Policy setting or alternative official knob described for globally configuring the “servicing stack watchdog timeout” beyond:
- Increasing device/VM resources and ensuring KB4493473 or later is installed.
- Using the documented
TrustedInstallerBlockTimeIncrementregistry workaround in scenarios where the TrustedInstaller timeout is the root cause. - Performing an in-place upgrade when update failures persist.
References:
- Windows Update common errors and mitigation
- Troubleshoot Windows Update error 0x800f0920
- Troubleshoot "Shutdown in Progress" Windows error 0x8007045b
- Windows Update hangs and new updates are uninstalled after a restart
- Windows Servicing, Updates and Features on Demand troubleshooting documentation for Windows clients
- Windows Servicing, Updates and Features on Demand troubleshooting documentation for Windows Server