question

Chotudin-9437 avatar image
0 Votes"
Chotudin-9437 asked RitaHu-MSFT edited

patch failed after server reboot

Hello All,

Sometime I have seen below error after completing 96% completed. but as soon as server reboot. It roll back the patches and patches failed on add remove program.

windows server couldn't complete updates

1) Anything I can enable before reboot the server and check what caused the issue? My understanding is particular older patch or driver create these type of issues.

2) Any verbose I can enable so that it will capture in logs what was happened after reboot the server? why patches failed.

3) Anything I can check on procmon level?



windows-serverwindows-server-2012windows-sysinternals-procmonwindows-sysinternals-procexp
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@dineshnegi-9437
Thanks for your posting on Q&A.

There is only one server encounter this issue. Am I right? Where did the server get the updates from? Windows Server Update Services or Microsoft Update from Internet.

Is there any error tips after reboot the server?

Perhaps we could review the CBS.log to get more messages.
132211-14.png

Regards,
Rita

0 Votes 0 ·
14.png (8.8 KiB)
Chotudin-9437 avatar image
0 Votes"
Chotudin-9437 answered RitaHu-MSFT commented

Hi,

cbs.log doesn't clear all the information neither its mention what is happening during post boot.

1) Any thing I can enable the logging?
2) When you say cbs.log ? are you referring anything particular?

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

In my experience, the reson why the updates will roll back will be written into the CBS.log. Also we could review the windowsupdate.log to get more information.

In windows 10(server 2016/2019), we could open PowerShell as an administrator and print get-windowsupdatelog to get the windows update log. Please ignore it if you have already known. Reference the below picture to get the windows update log in windows server 2012/2012R2:
132246-17.png

In fact, the updates roll back due to many reasons. It is difficult to troubleshoot without any error information. Perhaps we could review the two log files to get more information.

Regards,
Rita

0 Votes 0 ·
17.png (51.1 KiB)
Chotudin-9437 avatar image
0 Votes"
Chotudin-9437 answered

Yes, i know about these logs.

What logging i can enable? so that post reboot information will be locked.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

LimitlessTechnology-2700 avatar image
1 Vote"
LimitlessTechnology-2700 answered LimitlessTechnology-2700 edited

Hello @Chotudin-9437

you can enable Windows Update verbose login by changing the registry parameters:

path: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Trace
Add a new DWORD key named Flags with a value of 7
Add a new DWORD key named Level with a value of 4
Then apply the change by running:

NET STOP wuauserv
NET START wuauserv

After this compile the ETW traces to txt log using the powershell cmdlet: Get-WindowsUpdateLog

After the update fails again, try to read the latest records at the bottom of the log to spot some 0x errors or other messages around the errors.

Hope this helps, and please share here your findings so we can help you further,
Best regards,

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Chotudin-9437 avatar image
0 Votes"
Chotudin-9437 answered

Thanks for the update.

My issue when I reboot the server patches are getting roll back.

error. Couldn't applied the patches.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.