Canberra, ACT, Australia
To be provided
Use Contact to message

Windows Server 2019 Failing to install Cumulative Updates

Harmik Batth Tech's Blog

Windows Server 2019 Failing to install Cumulative Updates

So it was normal patching routine after installing fresh Windows Server 2019 and trying to build a SOE image.

Windows Server 2019 built alright with all software’s required and time to try out latest Updates. All updates installed fine except latest Cumulative pack for 2020-02 or 03.

Errors:

——————

Installation Failure: Windows failed to install the following update with error 0x800F0922: 2020-02 Cumulative Update for Windows Server 2019 for x64-based Systems (KB4532691).

Installation Failure: Windows failed to install the following update with error 0x800F0922: 2020-03 Cumulative Update for Windows Server 2019 for x64-based Systems (KB4538461).

I began researching on search engines but did not find much of a clue. Some people were suggesting rebuilding WMI, Software Repository, chkdsk etc. I tried all those in desperation but nothing worked.

Then I found something about Language packs with Asain languages. Although I did not had any Asain language packs, but I uninstalled any language packs but it did not work as well.

Then I found something regarding System Reserved disk too small. I built with 350 MB, then with 550 MB and even shared system and active partition with C Drive. But nothing worked.

Then I decided to build a Vanilla Windows Server 2019 and apply update, and this time it worked without issue. So that suggests me that it is not Windows OS.

I built one more VM with SCCM but not joined to Domain, that worked as well. that to me, proves that it is something related to Domain, either one of the Group Policy or a proxy server.

Firstly I tried Blocking inheritance and tried installing, and it worked straight away. So I know it is one of the Group Policy settings which is causing this behaviour. Now it is time to find the culprit…

Finally, One of the Group Policy setting the App Readiness Service to disabled, once I disable the Group Policy with the particular setting – all servers took the updates.

Alternatively Make sure that this Service is set to Enabled or at least set to Manual, so it can be started when required.

 

Comments: 2

  1. Rich Malton says:

    I am having the same issue with KB4538461 on MS Server 2019 . Which group policy did you disable to install the update?

    • harmikbatth says:

      Hi Rich

      You need to make sure that “App Readiness” Service is set to Enabled or at least set to Manual, so it can be started when required.
      You can do so manually on a standalone server and test.

      If you require this service to be Started on all Servers, utilise Group Policy to do.
      You can follow the below steps to use Group Policy

      Open the GPO in Group Policy Editor (GPE) or create a new GPO (gpedit.msc).
      In the treeview pane, expand Computer Configuration, Windows Settings, Security Settings, System Services.
      Right-click the service you want to change–for example the “App Readiness” service–and click Properties. A dialog box that’s similar to the one at Figure is displayed.
      Check “Define this policy setting” and set the startup mode. For example, set the mode to Automatic if you want the service to start when the computer starts.
      Click Edit Security.
      You can now control which users and groups can access the service and stop or start it. Click OK after you’ve made your selections. It’s very important that you don’t change the Administrators group and SYSTEM permissions; their permissions should always be Full Control.
      Click OK to all dialog boxes to apply the change. You’ll need to refresh the GPO for the change to take effect.

Add your comment