question

SeekingTruth-2322 avatar image
0 Votes"
SeekingTruth-2322 asked AnshulKumarMINDTREELIMITED-5501 commented

CBS registry key missing after failed update - Windows 2016 Server

I had a failed Windows update on a Windows 2016 Server. Now every time I run the Windows update it say there are no update.

After doing some research I found that a number of registry keys are missing from "Component Based Servicing". These are the keys available on the server at the moment.

112973-image.png


Comparing this to another server which is working I can see the the keys ComponentDetect, Notifications, PackageDetect, UpdateDetect and Version are missing.

112962-image.png

This explains why the server can not display and Roles or Features as well as not finding any updates.

I would like to add these reg keys by importing from a operational server which is at the same patch level and install software as this faulty one. Unfortunately it doesn't let me as I don't have the correct permissions. It will not even allow me to change the permission for the administrator.

Can anyone assist? I really don't want to rebuild the server which is a DC.

Thanks




windows-serverwindows-active-directorywindows-server-2016
image.png (21.0 KiB)
image.png (29.2 KiB)
· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi,

I would like to check if the reply could be of help? If yes, please help accept answer, so that others meet a similar issue can find useful information quickly. If you have any other concerns or questions, please feel free to feedback.

Best Regards,
Joan

0 Votes 0 ·

Hi,

I would like to check if you have made any progress in your issue and what is the result of your test? If the reply could be of help, please help accept answer, so that others meet a similar issue can find useful information quickly. If you have any other concerns or questions, please feel free to feedback.

Best Regards,
Joan

0 Votes 0 ·

Hi, if the posted answer resolves your question, please mark it as the answer by clicking the check mark. Doing so helps others find answers to their questions.

0 Votes 0 ·
DSPatrick avatar image
0 Votes"
DSPatrick answered

The simplest and much safer solution is to stand up a new one for replacement.

I'd use dcdiag / repadmin tools to verify health correcting all errors found before starting any operations. Then stand up the new one, patch it fully, license it, join existing domain, add active directory domain services, promote it also making it a GC (recommended), transfer FSMO roles over (optional), transfer pdc emulator role (optional), use dcdiag / repadmin tools to again verify health, when all is good you can decommission / demote old one.


--please don't forget to upvote and Accept as answer if the reply is helpful--





5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

AJTek-Adam-J-Marshall avatar image
0 Votes"
AJTek-Adam-J-Marshall answered

First: Try repairing the CBS:

 DISM /Online /Cleanup-Image /RestoreHealth
 SFC /scannow

Alternatively, (something to try that may or may not work)

Take a backup of this key first via an export of the registry.

Take ownership of the key root [Component Based Servicing] and replace ownership to inherited items. Then go back into the permissions and give authenticated users full rights to this key. Then take a backup of this key by exporting it from the registry.

Then delete the key from the system

Then run


 DISM /Online /Cleanup-Image /RestoreHealth
 SFC /scannow
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

SeekingTruth-2322 avatar image
0 Votes"
SeekingTruth-2322 answered

Thanks AJTek-Adam-J-Marshall.

I have run "DISM /Online /Cleanup-Image /ScanHealth" and it tells me that the component store is repairable.

The /RestoreHealth failed and suggested that I use the SOURCE option.

I just need to create a ISO from the provided Microsoft download that contains multiple editions of Windows 2016 server. Managed to extract the one I wanted as a WIM file. Trying to see how to create the ISO from this if possible.

Any thoughts?



5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

AJTek-Adam-J-Marshall avatar image
0 Votes"
AJTek-Adam-J-Marshall answered
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DSPatrick avatar image
0 Votes"
DSPatrick answered

Just checking if there's any progress or updates?

--please don't forget to upvote and Accept as answer if the reply is helpful--



5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

SeekingTruth-2322 avatar image
0 Votes"
SeekingTruth-2322 answered

Sorry for the delay in getting back.
So far I have had no success in fixing this problem. I believe it is to far gone and I may need to rebuild it. It looks as though the issue arose from a failed update; server restarted during update process while the updates were being applied. That is only part of the update process ran. Not a clever thing to do.

I am in several minds as to ..

  1. Attempt to restore the server from a backup and allow it to resync with the other DC or

  2. Rebuild the server as @DSPatrick suggested

  3. System Recovery from the console.


Cheers








5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.