OS Windows Server 2008 SP2 64 bitI have two systems running the same OS. Installing KB967723 using auto update repeatedly errors daily. On one of the servers, it eventually successfully installed. On the other, it still has not installeedThe event log shows an event id4375 ServicingWindows Servicing failed to complete the process of setting package KB967723 (Security Update) into Installed(Installed) statefollowed by event id 20 WindowsUpdateClientInstallation Failure: Windows failed to install the following update with error 0x80070490: Security Update for Windows Server 2008 x64 Edition (KB967723).

I have this exact scenario. 3 Servers, 1 installed instantly, 1 fails a few times, then installed, and the 3rd is still failing. Subscribed to replies for notifications, so if you found/find an answer please reply.

Hi, I suggest running System File Checker to troubleshoot this issue: 1. Click Start, and then type cmd in the Start Search box. 2. In the results area, right-click cmd.exe, and then click Run as administrator. You will be prompted to type the password for an administrator account. Click Continue if you are the administrator or type the administrator password. Then, click Continue. 3. At the command prompt, type Sfc /scannow, and then press ENTER. The scan may take some time, so be patient. Windows will repair any corrupted or missing files that it finds. If information from the installation CD is needed to repair the problem, you may be prompted to insert your Windows Vista or Windows 7 CD. Can you install KB967723 now?If the issue persists, please manually download and install KB967723 from the following site: http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=6e46822e-f79d-492d-ad01-ee680ad324f5 Hope it helps. Tim Quan - MSFT

Running the download manually - just says "update does not apply to your system" ... So then ... why was it downloaded? Do I need it or not? Or has it already been patched with another update? How can I get it off the menu (short of saying hide this update)? Can it be removed safely, so the Windows Update doesn't show in the task tray?

Hi Scott, Please check whether KB967723 has already been installed on your computer from Control Panel\Programs and Features\View installed updates. If so, it is probably that this update is reoffered. I suggest referring to the following article to hide this update: http://www.tech-recipes.com/rx/2046/vista_update_how_to_hide_update/ The above article is written for Windows Vista. But it should also apply to Windows Server 2008. Tim Quan - MSFT

Error 80070490 when installing update KB967723 Everytime I tried to install the KB967723 update through Windows Update on my Windows Server 2008 installation, I received a 80070490 error, and the update presented itself for installation again and again. Well, after some investigation, looks like the solution is as simple as manually downloading and installing the single update package. Get it from http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=35c1d5a9-a953-4fc6-90c0-d2358c7b89e6 for Windows 2008 (and Vista I guess) x86. Download the file, launch it, and et voilà. Works even without booting in safe mode. Yu-hu!

provided link is for server 2008x64 version. I used KB967723 for 2008 (more general I guess) and it worked

I had the same issue as well. I downloaded the KB manually and installed successfully! looks like that was the fix thanks MS

what do you mean by "reoffered"? why? This update shows as installed on my 2008 server in control panel, programs and features, but windows update still says it's needed and fails to install every time? 1. why is this happening? 2. how do I fix? not hide. thanks!

I was encountering this problem and this was my solution. The OS is Windows Server 2008 Sp2 x86, this is a new clean install. I think there is a packaging error in the Windows Update site for KB967723. Microsoft should fix this to benefit others - a manual install should not be necessary!1. Windows Update selected KB967723 as applicable, system tray icon "balloon message" indicating ready for install.2. Windows Update reported KB967723 as failed during install.3. Restart.4. Steps 1-3 repeated with no automatic resolution. Windows Update is broken.3. Manually downloaded fix from http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=35c1d5a9-a953-4fc6-90c0-d2358c7b89e6 and installed.4. Restarted.5. Windows Update no longer reports need to install KB967723, reports it as installed. All is well again.Messages from System Log below. Some messages (many redundant messages!) omitted for brevity:Log Name: SystemSource: Microsoft-Windows-WindowsUpdateClientDate: 3/18/2010 10:19:31 AMEvent ID: 20Task Category: Windows Update AgentLevel: ErrorKeywords: Failure,InstallationUser: SYSTEMComputer: DFS02-VM.meriter.comDescription:Installation Failure: Windows failed to install the following update with error 0x80070490: Security Update for Windows Server 2008 (KB967723).Log Name: SystemSource: Microsoft-Windows-ServicingDate: 3/18/2010 10:20:47 AMEvent ID: 4374Task Category: NoneLevel: WarningKeywords: ClassicUser: DFS02-VM\AdministratorComputer: DFS02-VM.meriter.comDescription:Windows Servicing identified that package KB967723(Security Update) is not applicable for this systemLog Name: SystemSource: Microsoft-Windows-ServicingDate: 3/18/2010 10:20:45 AMEvent ID: 4371Task Category: NoneLevel: InformationKeywords: ClassicUser: DFS02-VM\AdministratorComputer: DFS02-VM.meriter.comDescription:Windows Servicing started a process of changing package KB967723(Security Update) state from Installed(Installed) to Installed(Installed)Log Name: SystemSource: Microsoft-Windows-ServicingDate: 3/18/2010 10:20:45 AMEvent ID: 4371Task Category: NoneLevel: InformationKeywords: ClassicUser: DFS02-VM\AdministratorComputer: DFS02-VM.meriter.comDescription:Windows Servicing started a process of changing package KB967723(Security Update) state from Absent(Absent) to Installed(Installed)Log Name: SystemSource: Microsoft-Windows-ServicingDate: 3/18/2010 10:20:47 AMEvent ID: 4372Task Category: NoneLevel: InformationKeywords: ClassicUser: DFS02-VM\AdministratorComputer: DFS02-VM.meriter.comDescription:Windows Servicing is setting package KB967723(Security Update) state to Resolving(Resolving)Log Name: SystemSource: Microsoft-Windows-ServicingDate: 3/18/2010 10:20:47 AMEvent ID: 4383Task Category: NoneLevel: InformationKeywords: ClassicUser: DFS02-VM\AdministratorComputer: DFS02-VM.meriter.comDescription:Windows Servicing completed the process of changing update 967723-771_neutral_LDR from package KB967723 (Security Update) into Resolving(Resolving) stateLog Name: SystemSource: Microsoft-Windows-ServicingDate: 3/18/2010 10:20:47 AMEvent ID: 4383Task Category: NoneLevel: InformationKeywords: ClassicUser: DFS02-VM\AdministratorComputer: DFS02-VM.meriter.comDescription:Windows Servicing completed the process of changing update 967723-772_neutral_LDR from package KB967723 (Security Update) into Resolving(Resolving) stateLog Name: SystemSource: Microsoft-Windows-ServicingDate: 3/18/2010 10:20:47 AMEvent ID: 4383Task Category: NoneLevel: InformationKeywords: ClassicUser: DFS02-VM\AdministratorComputer: DFS02-VM.meriter.comDescription:Windows Servicing completed the process of changing update 967723-773_neutral_GDR from package KB967723 (Security Update) into Resolving(Resolving) stateLog Name: SystemSource: Microsoft-Windows-ServicingDate: 3/18/2010 10:20:47 AMEvent ID: 4372Task Category: NoneLevel: InformationKeywords: ClassicUser: DFS02-VM\AdministratorComputer: DFS02-VM.meriter.comDescription:Windows Servicing is setting package KB967723(Security Update) state to Installed(Installed)Log Name: SystemSource: Microsoft-Windows-ServicingDate: 3/18/2010 10:20:47 AMEvent ID: 4372Task Category: NoneLevel: InformationKeywords: ClassicUser: DFS02-VM\AdministratorComputer: DFS02-VM.meriter.comDescription:Windows Servicing is setting package KB967723(Security Update) state to Staging(Staging)Log Name: SystemSource: Microsoft-Windows-ServicingDate: 3/18/2010 10:20:47 AMEvent ID: 4383Task Category: NoneLevel: InformationKeywords: ClassicUser: DFS02-VM\AdministratorComputer: DFS02-VM.meriter.comDescription:Windows Servicing completed the process of changing update 967723-771_neutral_LDR from package KB967723 (Security Update) into Staging(Staging) stateLog Name: SystemSource: Microsoft-Windows-ServicingDate: 3/18/2010 10:20:47 AMEvent ID: 4383Task Category: NoneLevel: InformationKeywords: ClassicUser: DFS02-VM\AdministratorComputer: DFS02-VM.meriter.comDescription:Windows Servicing completed the process of changing update 967723-772_neutral_LDR from package KB967723 (Security Update) into Staging(Staging) stateLog Name: SystemSource: Microsoft-Windows-ServicingDate: 3/18/2010 10:20:47 AMEvent ID: 4383Task Category: NoneLevel: InformationKeywords: ClassicUser: DFS02-VM\AdministratorComputer: DFS02-VM.meriter.comDescription:Windows Servicing completed the process of changing update 967723-773_neutral_GDR from package KB967723 (Security Update) into Staging(Staging) stateLog Name: SystemSource: Microsoft-Windows-ServicingDate: 3/18/2010 10:20:47 AMEvent ID: 4372Task Category: NoneLevel: InformationKeywords: ClassicUser: DFS02-VM\AdministratorComputer: DFS02-VM.meriter.comDescription:Windows Servicing is setting package KB967723(Security Update) state to Staging(Staging)Log Name: SystemSource: Microsoft-Windows-ServicingDate: 3/18/2010 10:20:47 AMEvent ID: 4372Task Category: NoneLevel: InformationKeywords: ClassicUser: DFS02-VM\AdministratorComputer: DFS02-VM.meriter.comDescription:Windows Servicing is setting package KB967723(Security Update) state to Installed(Installed)Log Name: SystemSource: Microsoft-Windows-ServicingDate: 3/18/2010 10:20:47 AMEvent ID: 4372Task Category: NoneLevel: InformationKeywords: ClassicUser: DFS02-VM\AdministratorComputer: DFS02-VM.meriter.comDescription:Windows Servicing is setting package KB967723(Security Update) state to Install Requested(Install Requested)Log Name: SystemSource: Microsoft-Windows-ServicingDate: 3/18/2010 10:20:47 AMEvent ID: 4371Task Category: NoneLevel: InformationKeywords: ClassicUser: DFS02-VM\AdministratorComputer: DFS02-VM.meriter.comDescription:Windows Servicing started a process of changing package KB967723(Security Update) state from Install Requested(Install Requested) to Installed(Installed)Log Name: SystemSource: Microsoft-Windows-ServicingDate: 3/18/2010 10:20:48 AMEvent ID: 4373Task Category: NoneLevel: InformationKeywords: ClassicUser: DFS02-VM\AdministratorComputer: DFS02-VM.meriter.comDescription:Windows Servicing successfully set package KB967723(Security Update) state to Installed(Installed)Log Name: SystemSource: Microsoft-Windows-ServicingDate: 3/18/2010 10:20:48 AMEvent ID: 4383Task Category: NoneLevel: InformationKeywords: ClassicUser: DFS02-VM\AdministratorComputer: DFS02-VM.meriter.comDescription:Windows Servicing completed the process of changing update 967723-1492_neutral_PACKAGE from package KB967723 (Security Update) into Installed(Installed) stateLog Name: SystemSource: Microsoft-Windows-ServicingDate: 3/18/2010 10:20:48 AMEvent ID: 4383Task Category: NoneLevel: InformationKeywords: ClassicUser: DFS02-VM\AdministratorComputer: DFS02-VM.meriter.comDescription:Windows Servicing completed the process of changing update 967723-1493_neutral_PACKAGE from package KB967723 (Security Update) into Installed(Installed) stateLog Name: SystemSource: Microsoft-Windows-ServicingDate: 3/18/2010 10:20:48 AMEvent ID: 4383Task Category: NoneLevel: InformationKeywords: ClassicUser: DFS02-VM\AdministratorComputer: DFS02-VM.meriter.comDescription:Windows Servicing completed the process of changing update 967723-1495_neutral_PACKAGE from package KB967723 (Security Update) into Installed(Installed) stateLog Name: SystemSource: Microsoft-Windows-ServicingDate: 3/18/2010 10:20:48 AMEvent ID: 4383Task Category: NoneLevel: InformationKeywords: ClassicUser: DFS02-VM\AdministratorComputer: DFS02-VM.meriter.comDescription:Windows Servicing completed the process of changing update 967723-1496_neutral_PACKAGE from package KB967723 (Security Update) into Installed(Installed) stateLog Name: SystemSource: Microsoft-Windows-ServicingDate: 3/18/2010 10:20:48 AMEvent ID: 4373Task Category: NoneLevel: InformationKeywords: ClassicUser: DFS02-VM\AdministratorComputer: DFS02-VM.meriter.comDescription:Windows Servicing successfully set package KB967723(Security Update) state to Installed(Installed)messages omittedLog Name: SystemSource: Microsoft-Windows-ServicingDate: 3/18/2010 10:20:48 AMEvent ID: 4383Task Category: NoneLevel: InformationKeywords: ClassicUser: DFS02-VM\AdministratorComputer: DFS02-VM.meriter.comDescription:Windows Servicing completed the process of changing update 967723-459_neutral_PACKAGE from package KB967723 (Security Update) into Installed(Installed) stateLog Name: SystemSource: Microsoft-Windows-ServicingDate: 3/18/2010 10:20:48 AMEvent ID: 4373Task Category: NoneLevel: InformationKeywords: ClassicUser: DFS02-VM\AdministratorComputer: DFS02-VM.meriter.comDescription:Windows Servicing successfully set package KB967723(Security Update) state to Installed(Installed)Log Name: SystemSource: Microsoft-Windows-ServicingDate: 3/18/2010 10:20:48 AMEvent ID: 4383Task Category: NoneLevel: InformationKeywords: ClassicUser: DFS02-VM\AdministratorComputer: DFS02-VM.meriter.comDescription:Windows Servicing completed the process of changing update 967723-971_neutral_PACKAGE from package KB967723 (Security Update) into Installed(Installed) state

Here is how I solved it for Windows Server 2008: 1. Open Control Panel. 2. Double-click Programs and Features. 3. Click the View installed updates task. 4. Enter KB967723 into the Search text box. 5. If the update is found, select it, then click Uninstall, then click Yes. 6. Reboot the server. This seems to be REQUIRED. 7. Download and install the package from this location: http://www.microsoft.com/downloads/en/details.aspx?displaylang=en&FamilyID=6e46822e-f79d-492d-ad01-ee680ad324f5 8. Open Windows Update. 9. Click Check for updates. 10. Notice that it no longer shows up. I agree with the previous poster that the current package that is downloaded using Windows Update is probably bad. And if you manually download the update and try to install it and it is already installed, you get the "update does not apply" dialog. So uninstalling avoids the dialog, and downloading manually and installing avoids the bad package. Hope this helps someone. This was driving me crazy! This solution was figured out because of the information posted in this thread so I absolutely thank those who have contributed! -Corey

yes, MS's issue, they need to fix it. There are many *automated* systems out there relying on WU/WSUS and if a problem like this is introduced it's really bad. *Manually* doing anything in these cases is just not OK. Better QC checks need to be done by the relevant team at MS for this kind of thing.

I have been having the same issue however I have tried the suggested fix and still cannot seem to apply this patch successfully. I tried running the sfc /scannow and rebooting after it found issues. I also checked for for previous installations (which do not appear to be present unless they were under a different kbnumber ) Downloaded the package from http://www.microsoft.com/downloads/en/details.aspx?displaylang=en&FamilyID=6e46822e-f79d-492d-ad01-ee680ad324f5 and ran it manually It seems to be the correct version as it is for server 2008 x64 The system Log shows: event ID:20 Installation Failure: Windows failed to install the following update with error 0x80070020: Security Update for Windows (KB967723). 20 instances within the same time frams show: EventID:4375 Windows Servicing failed to complete the process of setting package KB967723 (Security Update) into Resolved(Resolved) state EventID:4374 Windows Servicing identified that package KB967723(Security Update) is not applicable for this system ------------ I decided to rerun the sfc /scannow command There are many entries in the CBS log which appear similar to the following: 2011-02-19 17:24:06, Info CSI 00002ce3 [SR] Cannot repair member file [l:36{18}]"rmConfigHelper.dll" of rmConfigHelper, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_MSIL (8), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing 2011-02-19 17:24:06, Info CSI 00002ce4 [SR] This component was referenced by [l:242{121}]"Microsoft-Windows-Server-Features-Package~31bf3856ad364e35~amd64~~6.0.6001.18000.Microsoft-Windows-Server-Features-Update" 2011-02-19 17:24:06, Info CSI 00002ce5 [SR] Cannot repair member file [l:20{10}]"TLBREF.DLL" of NetFx-TLBREF_DLL, Version = 6.0.6001.18111, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope neutral, PublicKeyToken = {l:8 b:b03f5f7f11d50a3a}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing 2011-02-19 17:24:06, Info CSI 00002ce6 [SR] This component was referenced by [l:166{83}]"Package_6_for_KB948609~31bf3856ad364e35~amd64~~6.0.6001.3053.948609-678_neutral_GDR" 2011-02-19 17:24:06, Info CSI 00002ce7 [SR] Cannot repair member file [l:36{18}]"System.Drawing.dll" of System.Drawing, Version = 6.0.6001.18111, pA = PROCESSOR_ARCHITECTURE_MSIL (8), Culture neutral, VersionScope neutral, PublicKeyToken = {l:8 b:b03f5f7f11d50a3a}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing 2011-02-19 17:24:06, Info CSI 00002ce8 [SR] This component was referenced by [l:166{83}]"Package_6_for_KB948609~31bf3856ad364e35~amd64~~6.0.6001.3053.948609-989_neutral_GDR" 2011-02-19 17:24:06, Info CSI 00002ce9 Hashes for file member \??\C:\Windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll do not match actual file [l:36{18}]"System.Drawing.dll" : Found: {l:20 b:4sETjoFwUzYt9IUDpxXaqHQvylU=} Expected: {l:20 b:mY898kdgEnfSst86lErx+qGugfA=} Found: {l:32 b:4bC5rLyzryL/t2Z6JYl5D0d+3hgB+Iza5ApI6PBYA4M=} Expected: {l:32 b:4vwpyVwxnof7e8Pn0liZtpDa9nz3rIDLdiyfQk9BcwQ=} 2011-02-19 17:24:06, Info CSI 00002cea [SR] Could not reproject corrupted file [ml:520{260},l:98{49}]"\??\C:\Windows\Microsoft.NET\Framework\v2.0.50727"\[l:36{18}]"System.Drawing.dll"; source file in store is also corrupted 2011-02-19 17:24:06, Info CSI 00002ceb [SR] Cannot repair member file [l:24{12}]"tsuserex.dll" of Microsoft-Windows-TerminalServices-UserExtension, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing