question

TylerB1985 avatar image
2 Votes"
TylerB1985 asked Bobby-2982 published

Security Update for Windows Server 2019 for x64-based Systems (KB4535680)

I know this update was pulled. Anyone know how to remove it from a server as a pending update?

I have looked for this file: C:\windows\winsxs\pending.xml and it's not there. I have also stopped Windows Updates and BITS and removed the C:\Windows\SoftwareDistribution folder. Still no luck.

Security Update for Windows Server 2019 for x64-based Systems (KB4535680) - Error 0x800f0922

windows-serverwindows-server-2019
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

JuanSobrado-3258 avatar image
1 Vote"
JuanSobrado-3258 answered TylerB1985 commented

Hello @TylerB1985

Move to an admin cmd and run:

dism /online /get-packages /format:table

look for the update, it should show as "Install Pending"

Copy the package name and type:

dism /online /remove-package /packagename:NameOfPackage

Let me know the results,

Juan S


Please up vote this answer if your find it useful.

· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

62138-capture.jpg




Unfortunately I don't see this one listed.

1 Vote 1 ·
capture.jpg (214.7 KiB)

Hi @TylerB1985

Are you re-scanning for Windows Updates after you have renamed the SoftwareDistribution folder and Catroot2 ?
If yes, and you have verified was pulled from MU/WU servers, then you are getting it from an alternate source. Do you use WSUS in your environment?

You need to review the ReportingEvents.log from C:\windows\softwaredistribution folder? This file will tell you the from where the update is getting downloaded from.

Let me know the results,

Thanks,

Juan S

1 Vote 1 ·

Well I'd checked my WSUS server first off, but apparently there was a disconnect between the keyboard and the chair. The first time I'd checked, I didn't find the update. This time I did. :(

Declined the update and all is well now. Thanks for the reminder.

1 Vote 1 ·
JennyFeng-MSFT avatar image
2 Votes"
JennyFeng-MSFT answered MarcBajo-6508 commented

@TylerB1985
Hi,
The Windows Update error 0x800F0922 can occur due to one of the following reasons.
App Readiness service is disabled.
Performance counters are damaged.
The System Reserved partition’s free space is less than 15 MB.

You may refer to the following link for details:
https://www.winhelponline.com/blog/error-0x800f0922-installing-windows-update-windows-10/
Please note: Information posted in the given link is hosted by a third party. Microsoft does not guarantee the accuracy and effectiveness of information.
Hope above information can help you.

============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

· 9
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thanks for the reply but none of these resolved the issue.

1 Vote 1 ·

Hi,
You could check the known issues here:
https://support.microsoft.com/en-us/topic/security-update-for-secure-boot-dbx-january-12-2021-f08c6b00-a850-e595-6147-d0c32ead81e2

and check with the hardware manufacturer to confirm its supported.

1 Vote 1 ·

Thanks again, but I am more wanting to remove the pending update since Microsoft pulled it.

1 Vote 1 ·
Show more comments

61528-capture.jpg


See image

1 Vote 1 ·
capture.jpg (34.5 KiB)
JennyFeng-MSFT avatar image
1 Vote"
JennyFeng-MSFT answered JuanSobrado-3258 commented

Hi,
Resetting the catroot2 folder is basically known to fix many Windows Update problems.

Catroot and catroot2 are actually the Windows operating system folders required for Windows Update.

When you run Windows Update, the folder catroot2 stores the signatures of the Windows Update package and also helps to install it. The Cryptographic Service actually uses the % windir% System32catroot2edb.log file for the update process. Updates are stored in the SoftwareDistribution folder, which is then used by Automatic Updates to perform the update.

Do not delete or rename the Catroot folder. The Catroot2 folder is recreated automatically by Windows. However, the Catroot folder is not recreated if it is renamed.

· 4
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Ran
Net stop Wuauserv
Net stop cryptsvc
Net stop bits

Deleted both the catroot2 and SoftwareDistribution folders.

Restarted services and still have the pending update.

1 Vote 1 ·

Hi,
Don't run the Update Wizard again. Instead, browse to the Microsoft Update Catalogue and search for the patch by KB number.
Download the patch for your particular Operating System. After Download completes, run the patch (by double clicking on the downloaded file) and follow the prompts.
Once the patch is installed and the server rebooted (if required), this patch will no longer need to be installed using the 'normal' method, clearing up the patch installation issue.

0 Votes 0 ·

I do appreciate your persistence with this. I'd already tried this, but did it again just to make sure.

Installation Failure: Windows failed to install the following update with error 0x800F0922: Security Update for Windows (KB4535680).

62546-capture.jpg


0 Votes 0 ·
capture.jpg (69.0 KiB)
Show more comments
BenTaratoot-4275 avatar image
0 Votes"
BenTaratoot-4275 answered

Hi @TylerB1985
I am having this same issue on Server 2016. Where did you find that this update has been pulled? I cannot find anything about it.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

marcolopes avatar image
0 Votes"
marcolopes answered marcolopes edited

SAME problem here!

"Installation Failure: Windows failed to install the following update with error 0x800F0922: Security Update for Windows 10 Version 1909 for x64-based Systems (KB4535680)."

Tried many solutions at no avail...

OTHER TOPICS with same problem

https://answers.microsoft.com/en-us/windows/forum/all/windows-update-failing-error-0x800f0922-security/ff160e2e-b4e5-4154-b9fb-ac8b9f590b6d

https://docs.microsoft.com/en-us/answers/questions/262543/1909-windows-update-keeps-failing-to-install-kb453.html?childToView=327457#answer-327457

HERE is the LOG!

  2021/03/24 13:58:01.2521904 19664 9720  Handler         CBS called Terminate
  2021/03/24 13:58:01.2613142 19664 13180 Handler         Completed install of CBS update with type=0, requiresReboot=0, installerError=1, hr=0x800f0922
  2021/03/24 13:58:01.2644155 19664 13180 Handler         * END *   CBS Install
  2021/03/24 13:58:01.2650142 19452 9956  Agent           ***FAILED* [8024200B] Method failed [CAgentUpdateManager::InstallUpdate:11561]**
  2021/03/24 13:58:01.2661031 19452 9956  Handler         Loaded state: cCompleteIterations: 1, pt: SelfContainedNoExpressPayload, nNextRequestID: 1




5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

kentrustnovusca-7733 avatar image
0 Votes"
kentrustnovusca-7733 answered kentrustnovusca-7733 published

I am seeing the exact same problem with a brand new fresh install of Server 2019

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

MasonWalters-0241 avatar image
1 Vote"
MasonWalters-0241 answered

same issue server 2019.. classic

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Eivind-8511 avatar image
1 Vote"
Eivind-8511 answered

Same exact issue on Windows Server 2019 Essentials.
All troubleshooting steps suggested in this forum post has been attempted without any success at getting rid of the update or getting the update to successfully install.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

marcolopes avatar image
0 Votes"
marcolopes answered

For everyone still having this problem:

1) I tried, without success (still having the same error) the SCRIPT used here: https://www.dell.com/community/PowerEdge-Hardware-General/Windows-Update-KB-KB4535680-failed-to-install-to-Server-2016/td-p/7806198/highlight/true/page/3

2) I DISABLED the update, so that OHTER updates could be installed without being reverted by this update (i was having a lot of troubles trying to install other updates except this one!). I used a m$ tool that is no longer available: https://web.archive.org/web/20210101181956/http://download.microsoft.com/download/F/2/2/F22D5FDB-59CD-4275-8C95-1BE17BF70B21/wushowhide.diagcab

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Bobby-2982 avatar image
0 Votes"
Bobby-2982 answered Bobby-2982 published

Its probably because of Secure Boot. There are other XCP-NG virtualization articles saying Secure Boot has to be enabled in the Bios for this update to take.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.