OS Windows Server 2008 SP2 64 bit
I have two systems running the same OS. Installing KB967723 using auto update repeatedly errors daily. On one of the servers, it eventually successfully installed. On the other, it still has not installeed

The event log shows an event id4375 Servicing
Windows Servicing failed to complete the process of setting package KB967723 (Security Update) into Installed(Installed) state

followed by event id 20 WindowsUpdateClient
Installation Failure: Windows failed to install the following update with error 0x80070490: Security Update for Windows Server 2008 x64 Edition (KB967723).

I have this exact scenario. 3 Servers, 1 installed instantly, 1 fails a few times, then installed, and the 3rd is still failing. Subscribed to replies for notifications, so if you found/find an answer please reply.

Hi,

I suggest running System File Checker to troubleshoot this issue:

1. Click Start, and then type cmd in the Start Search box.

2. In the results area, right-click cmd.exe, and then click Run as administrator. You will be prompted to type the password for an administrator account. Click Continue if you are the administrator or type the administrator password. Then, click Continue.

3. At the command prompt, type Sfc /scannow, and then press ENTER.

The scan may take some time, so be patient. Windows will repair any corrupted or missing files that it finds. If information from the installation CD is needed to repair the problem, you may be prompted to insert your Windows Vista or Windows 7 CD.

Can you install KB967723 now?

If the issue persists, please manually download and install KB967723 from the following site:

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=6e46822e-f79d-492d-ad01-ee680ad324f5

Hope it helps.

Tim Quan - MSFT

• Marked as answer by Tim QuanModerator Friday, December 11, 2009 6:09 AM
• Unmarked as answer by Tim QuanModerator Monday, December 14, 2009 3:17 AM
• Proposed as answer by late luvs beach Monday, January 11, 2010 3:52 PM

Running the download manually - just says "update does not apply to your system" ...
So then ... why was it downloaded?
Do I need it or not?
Or has it already been patched with another update?
How can I get it off the menu (short of saying hide this update)? Can it be removed safely, so the Windows Update doesn't show in the task tray?

• Proposed as answer by wz52 Sunday, January 10, 2010 7:47 PM

Hi Scott,

Please check whether KB967723 has already been installed on your computer from Control Panel\Programs and Features\View installed updates.

If so, it is probably that this update is reoffered. I suggest referring to the following article to hide this update:

http://www.tech-recipes.com/rx/2046/vista_update_how_to_hide_update/

The above article is written for Windows Vista. But it should also apply to Windows Server 2008.

Tim Quan - MSFT

• Marked as answer by Tim QuanModerator Thursday, December 17, 2009 1:25 AM

Error 80070490 when installing update KB967723

Everytime I tried to install the KB967723 update through Windows Update on my Windows Server 2008 installation, I received a 80070490 error, and the update presented itself for installation again and again.

Well, after some investigation, looks like the solution is as simple as manually downloading and installing the single update package.

Get it from http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=35c1d5a9-a953-4fc6-90c0-d2358c7b89e6 for Windows 2008 (and Vista I guess) x86. Download the file, launch it, and et voilà.

Works even without booting in safe mode. Yu-hu!

• Proposed as answer by George Perkins Thursday, March 18, 2010 3:22 PM

provided link is for server 2008x64 version.
I used KB967723 for 2008 (more general I guess) and it worked

I had the same issue as well. I downloaded the KB manually and installed successfully! looks like that was the fix thanks MS

what do you mean by "reoffered"? why? This update shows as installed on my 2008 server in control panel, programs and features, but windows update still says it's needed and fails to install every time?

1. why is this happening?

2. how do I fix? not hide.

thanks!

I was encountering this problem and this was my solution. The OS is Windows Server 2008 Sp2 x86, this is a new clean install. I think there is a packaging error in the Windows Update site for KB967723. Microsoft should fix this to benefit others - a manual install should not be necessary!

1. Windows Update selected KB967723 as applicable, system tray icon "balloon message" indicating ready for install.
2. Windows Update reported KB967723 as failed during install.
3. Restart.
4. Steps 1-3 repeated with no automatic resolution. Windows Update is broken.
3. Manually downloaded fix from http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=35c1d5a9-a953-4fc6-90c0-d2358c7b89e6 and installed.
4. Restarted.
5. Windows Update no longer reports need to install KB967723, reports it as installed. All is well again.

Messages from System Log below. Some messages (many redundant messages!) omitted for brevity:

Log Name:      System
Source:        Microsoft-Windows-WindowsUpdateClient
Date:          3/18/2010 10:19:31 AM
Event ID:      20
Task Category: Windows Update Agent
Level:         Error
Keywords:      Failure,Installation
User:          SYSTEM
Computer:      DFS02-VM.meriter.com
Description:
Installation Failure: Windows failed to install the following update with error 0x80070490: Security Update for Windows Server 2008 (KB967723).

Log Name:      System
Source:        Microsoft-Windows-Servicing
Date:          3/18/2010 10:20:47 AM
Event ID:      4374
Task Category: None
Level:         Warning
Keywords:      Classic
User:          DFS02-VM\Administrator
Computer:      DFS02-VM.meriter.com
Description:
Windows Servicing identified that package KB967723(Security Update) is not applicable for this system

Log Name:      System
Source:        Microsoft-Windows-Servicing
Date:          3/18/2010 10:20:45 AM
Event ID:      4371
Task Category: None
Level:         Information
Keywords:      Classic
User:          DFS02-VM\Administrator
Computer:      DFS02-VM.meriter.com
Description:
Windows Servicing started a process of changing package KB967723(Security Update) state from Installed(Installed) to Installed(Installed)

Log Name:      System
Source:        Microsoft-Windows-Servicing
Date:          3/18/2010 10:20:45 AM
Event ID:      4371
Task Category: None
Level:         Information
Keywords:      Classic
User:          DFS02-VM\Administrator
Computer:      DFS02-VM.meriter.com
Description:
Windows Servicing started a process of changing package KB967723(Security Update) state from Absent(Absent) to Installed(Installed)

Log Name:      System
Source:        Microsoft-Windows-Servicing
Date:          3/18/2010 10:20:47 AM
Event ID:      4372
Task Category: None
Level:         Information
Keywords:      Classic
User:          DFS02-VM\Administrator
Computer:      DFS02-VM.meriter.com
Description:
Windows Servicing is setting package KB967723(Security Update) state to Resolving(Resolving)

Log Name:      System
Source:        Microsoft-Windows-Servicing
Date:          3/18/2010 10:20:47 AM
Event ID:      4383
Task Category: None
Level:         Information
Keywords:      Classic
User:          DFS02-VM\Administrator
Computer:      DFS02-VM.meriter.com
Description:
Windows Servicing completed the process of changing update 967723-771_neutral_LDR from package KB967723 (Security Update) into Resolving(Resolving) state

Log Name:      System
Source:        Microsoft-Windows-Servicing
Date:          3/18/2010 10:20:47 AM
Event ID:      4383
Task Category: None
Level:         Information
Keywords:      Classic
User:          DFS02-VM\Administrator
Computer:      DFS02-VM.meriter.com
Description:
Windows Servicing completed the process of changing update 967723-772_neutral_LDR from package KB967723 (Security Update) into Resolving(Resolving) state

Log Name:      System
Source:        Microsoft-Windows-Servicing
Date:          3/18/2010 10:20:47 AM
Event ID:      4383
Task Category: None
Level:         Information
Keywords:      Classic
User:          DFS02-VM\Administrator
Computer:      DFS02-VM.meriter.com
Description:
Windows Servicing completed the process of changing update 967723-773_neutral_GDR from package KB967723 (Security Update) into Resolving(Resolving) state

Log Name:      System
Source:        Microsoft-Windows-Servicing
Date:          3/18/2010 10:20:47 AM
Event ID:      4372
Task Category: None
Level:         Information
Keywords:      Classic
User:          DFS02-VM\Administrator
Computer:      DFS02-VM.meriter.com
Description:
Windows Servicing is setting package KB967723(Security Update) state to Installed(Installed)

Log Name:      System
Source:        Microsoft-Windows-Servicing
Date:          3/18/2010 10:20:47 AM
Event ID:      4372
Task Category: None
Level:         Information
Keywords:      Classic
User:          DFS02-VM\Administrator
Computer:      DFS02-VM.meriter.com
Description:
Windows Servicing is setting package KB967723(Security Update) state to Staging(Staging)

Log Name:      System
Source:        Microsoft-Windows-Servicing
Date:          3/18/2010 10:20:47 AM
Event ID:      4383
Task Category: None
Level:         Information
Keywords:      Classic
User:          DFS02-VM\Administrator
Computer:      DFS02-VM.meriter.com
Description:
Windows Servicing completed the process of changing update 967723-771_neutral_LDR from package KB967723 (Security Update) into Staging(Staging) state

Log Name:      System
Source:        Microsoft-Windows-Servicing
Date:          3/18/2010 10:20:47 AM
Event ID:      4383
Task Category: None
Level:         Information
Keywords:      Classic
User:          DFS02-VM\Administrator
Computer:      DFS02-VM.meriter.com
Description:
Windows Servicing completed the process of changing update 967723-772_neutral_LDR from package KB967723 (Security Update) into Staging(Staging) state

Log Name:      System
Source:        Microsoft-Windows-Servicing
Date:          3/18/2010 10:20:47 AM
Event ID:      4383
Task Category: None
Level:         Information
Keywords:      Classic
User:          DFS02-VM\Administrator
Computer:      DFS02-VM.meriter.com
Description:
Windows Servicing completed the process of changing update 967723-773_neutral_GDR from package KB967723 (Security Update) into Staging(Staging) state

Log Name:      System
Source:        Microsoft-Windows-Servicing
Date:          3/18/2010 10:20:47 AM
Event ID:      4372
Task Category: None
Level:         Information
Keywords:      Classic
User:          DFS02-VM\Administrator
Computer:      DFS02-VM.meriter.com
Description:
Windows Servicing is setting package KB967723(Security Update) state to Staging(Staging)

Log Name:      System
Source:        Microsoft-Windows-Servicing
Date:          3/18/2010 10:20:47 AM
Event ID:      4372
Task Category: None
Level:         Information
Keywords:      Classic
User:          DFS02-VM\Administrator
Computer:      DFS02-VM.meriter.com
Description:
Windows Servicing is setting package KB967723(Security Update) state to Installed(Installed)

Log Name:      System
Source:        Microsoft-Windows-Servicing
Date:          3/18/2010 10:20:47 AM
Event ID:      4372
Task Category: None
Level:         Information
Keywords:      Classic
User:          DFS02-VM\Administrator
Computer:      DFS02-VM.meriter.com
Description:
Windows Servicing is setting package KB967723(Security Update) state to Install Requested(Install Requested)

Log Name:      System
Source:        Microsoft-Windows-Servicing
Date:          3/18/2010 10:20:47 AM
Event ID:      4371
Task Category: None
Level:         Information
Keywords:      Classic
User:          DFS02-VM\Administrator
Computer:      DFS02-VM.meriter.com
Description:
Windows Servicing started a process of changing package KB967723(Security Update) state from Install Requested(Install Requested) to Installed(Installed)

Log Name:      System
Source:        Microsoft-Windows-Servicing
Date:          3/18/2010 10:20:48 AM
Event ID:      4373
Task Category: None
Level:         Information
Keywords:      Classic
User:          DFS02-VM\Administrator
Computer:      DFS02-VM.meriter.com
Description:
Windows Servicing successfully set package KB967723(Security Update) state to Installed(Installed)

Log Name:      System
Source:        Microsoft-Windows-Servicing
Date:          3/18/2010 10:20:48 AM
Event ID:      4383
Task Category: None
Level:         Information
Keywords:      Classic
User:          DFS02-VM\Administrator
Computer:      DFS02-VM.meriter.com
Description:
Windows Servicing completed the process of changing update 967723-1492_neutral_PACKAGE from package KB967723 (Security Update) into Installed(Installed) state

Log Name:      System
Source:        Microsoft-Windows-Servicing
Date:          3/18/2010 10:20:48 AM
Event ID:      4383
Task Category: None
Level:         Information
Keywords:      Classic
User:          DFS02-VM\Administrator
Computer:      DFS02-VM.meriter.com
Description:
Windows Servicing completed the process of changing update 967723-1493_neutral_PACKAGE from package KB967723 (Security Update) into Installed(Installed) state

Log Name:      System
Source:        Microsoft-Windows-Servicing
Date:          3/18/2010 10:20:48 AM
Event ID:      4383
Task Category: None
Level:         Information
Keywords:      Classic
User:          DFS02-VM\Administrator
Computer:      DFS02-VM.meriter.com
Description:
Windows Servicing completed the process of changing update 967723-1495_neutral_PACKAGE from package KB967723 (Security Update) into Installed(Installed) state

Log Name:      System
Source:        Microsoft-Windows-Servicing
Date:          3/18/2010 10:20:48 AM
Event ID:      4383
Task Category: None
Level:         Information
Keywords:      Classic
User:          DFS02-VM\Administrator
Computer:      DFS02-VM.meriter.com
Description:
Windows Servicing completed the process of changing update 967723-1496_neutral_PACKAGE from package KB967723 (Security Update) into Installed(Installed) state

Log Name:      System
Source:        Microsoft-Windows-Servicing
Date:          3/18/2010 10:20:48 AM
Event ID:      4373
Task Category: None
Level:         Information
Keywords:      Classic
User:          DFS02-VM\Administrator
Computer:      DFS02-VM.meriter.com
Description:
Windows Servicing successfully set package KB967723(Security Update) state to Installed(Installed)

messages omitted

Log Name:      System
Source:        Microsoft-Windows-Servicing
Date:          3/18/2010 10:20:48 AM
Event ID:      4383
Task Category: None
Level:         Information
Keywords:      Classic
User:          DFS02-VM\Administrator
Computer:      DFS02-VM.meriter.com
Description:
Windows Servicing completed the process of changing update 967723-459_neutral_PACKAGE from package KB967723 (Security Update) into Installed(Installed) state

Log Name:      System
Source:        Microsoft-Windows-Servicing
Date:          3/18/2010 10:20:48 AM
Event ID:      4373
Task Category: None
Level:         Information
Keywords:      Classic
User:          DFS02-VM\Administrator
Computer:      DFS02-VM.meriter.com
Description:
Windows Servicing successfully set package KB967723(Security Update) state to Installed(Installed)

Log Name:      System
Source:        Microsoft-Windows-Servicing
Date:          3/18/2010 10:20:48 AM
Event ID:      4383
Task Category: None
Level:         Information
Keywords:      Classic
User:          DFS02-VM\Administrator
Computer:      DFS02-VM.meriter.com
Description:
Windows Servicing completed the process of changing update 967723-971_neutral_PACKAGE from package KB967723 (Security Update) into Installed(Installed) state

Here is how I solved it for Windows Server 2008:

1. Open Control Panel.

2. Double-click Programs and Features.

3. Click the View installed updates task.

4. Enter KB967723 into the Search text box.

5. If the update is found, select it, then click Uninstall, then click Yes.

6. Reboot the server. This seems to be REQUIRED.

7. Download and install the package from this location: http://www.microsoft.com/downloads/en/details.aspx?displaylang=en&FamilyID=6e46822e-f79d-492d-ad01-ee680ad324f5

8. Open Windows Update.

9. Click Check for updates.

10. Notice that it no longer shows up.

I agree with the previous poster that the current package that is downloaded using Windows Update is probably bad. And if you manually download the update and try to install it and it is already installed, you get the "update does not apply" dialog. So uninstalling avoids the dialog, and downloading manually and installing avoids the bad package.

Hope this helps someone. This was driving me crazy! This solution was figured out because of the information posted in this thread so I absolutely thank those who have contributed!

-Corey

• Proposed as answer by Peng Jin Thursday, October 20, 2011 7:40 AM

yes, MS's issue, they need to fix it. There are many *automated* systems out there relying on WU/WSUS and if a problem like this is introduced it's really bad. *Manually* doing anything in these cases is just not OK. Better QC checks need to be done by the relevant team at MS for this kind of thing.

I have been having the same issue however I have tried the suggested fix and still cannot seem to apply this patch successfully. I tried  running the sfc /scannow and rebooting after it found issues. I also checked for for previous installations (which do not appear to be present unless they were under a different kbnumber )

Downloaded the package from http://www.microsoft.com/downloads/en/details.aspx?displaylang=en&FamilyID=6e46822e-f79d-492d-ad01-ee680ad324f5 and ran it manually It seems to be the correct version as it is for server 2008 x64

The system Log shows:

event ID:20 Installation Failure: Windows failed to install the following update with error 0x80070020: Security Update for Windows (KB967723).

20 instances within the same time frams show:

EventID:4375 Windows Servicing failed to complete the process of setting package KB967723 (Security Update) into Resolved(Resolved) state

EventID:4374 Windows Servicing identified that package KB967723(Security Update) is not applicable for this system

------------

I decided to rerun the sfc /scannow command

There are many entries in the CBS log which appear similar to the following:

2011-02-19 17:24:06, Info                  CSI    00002ce3 [SR] Cannot repair member file [l:36{18}]"rmConfigHelper.dll" of rmConfigHelper, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_MSIL (8), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-02-19 17:24:06, Info                  CSI    00002ce4 [SR] This component was referenced by [l:242{121}]"Microsoft-Windows-Server-Features-Package~31bf3856ad364e35~amd64~~6.0.6001.18000.Microsoft-Windows-Server-Features-Update"
2011-02-19 17:24:06, Info                  CSI    00002ce5 [SR] Cannot repair member file [l:20{10}]"TLBREF.DLL" of NetFx-TLBREF_DLL, Version = 6.0.6001.18111, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope neutral, PublicKeyToken = {l:8 b:b03f5f7f11d50a3a}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-02-19 17:24:06, Info                  CSI    00002ce6 [SR] This component was referenced by [l:166{83}]"Package_6_for_KB948609~31bf3856ad364e35~amd64~~6.0.6001.3053.948609-678_neutral_GDR"
2011-02-19 17:24:06, Info                  CSI    00002ce7 [SR] Cannot repair member file [l:36{18}]"System.Drawing.dll" of System.Drawing, Version = 6.0.6001.18111, pA = PROCESSOR_ARCHITECTURE_MSIL (8), Culture neutral, VersionScope neutral, PublicKeyToken = {l:8 b:b03f5f7f11d50a3a}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-02-19 17:24:06, Info                  CSI    00002ce8 [SR] This component was referenced by [l:166{83}]"Package_6_for_KB948609~31bf3856ad364e35~amd64~~6.0.6001.3053.948609-989_neutral_GDR"
2011-02-19 17:24:06, Info                  CSI    00002ce9 Hashes for file member \??\C:\Windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll do not match actual file [l:36{18}]"System.Drawing.dll" :
  Found: {l:20 b:4sETjoFwUzYt9IUDpxXaqHQvylU=} Expected: {l:20 b:mY898kdgEnfSst86lErx+qGugfA=}
  Found: {l:32 b:4bC5rLyzryL/t2Z6JYl5D0d+3hgB+Iza5ApI6PBYA4M=} Expected: {l:32 b:4vwpyVwxnof7e8Pn0liZtpDa9nz3rIDLdiyfQk9BcwQ=}
2011-02-19 17:24:06, Info                  CSI    00002cea [SR] Could not reproject corrupted file [ml:520{260},l:98{49}]"\??\C:\Windows\Microsoft.NET\Framework\v2.0.50727"\[l:36{18}]"System.Drawing.dll"; source file in store is also corrupted
2011-02-19 17:24:06, Info                  CSI    00002ceb [SR] Cannot repair member file [l:24{12}]"tsuserex.dll" of Microsoft-Windows-TerminalServices-UserExtension, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing

 

This is because the x86 edition is pushed to a x64 machine
Here is the correct link!!!!!!!!!!!!!!

http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=24751

• Proposed as answer by SmirRage Sunday, February 19, 2012 8:36 PM

Worked for me, many thanks!

1: Rename the schema.dat file from C:\windows\system32\SMI\Store\Machine. Reboot the server, ensure we do not have any Pending.xml file (C:\Windows\winsxs) and try to install the update.
(Have a copy of CBS.log if it fails again before going to Step 2)   2: The "Windows Module Installer" service is set to Automatic even after the reboot and we do not have an option to stop the service as well. This service by default is set to Manual and when the update installation is initiated it sets itself to Automatic so that it can configure the patches during the next restart. After the patch is configured this service has to be set back to Manual which does not seem to be happening.
  Check if this is controlled by Group Policy and ensure that it is set to Manual and try installing the update.   3: We need to confirm if the issue is specific to these two updates or with all updates as we were not able test another update due to Pending restart. Try installing any other hotfix and see if that installs.
Try the NTFS update http://support.microsoft.com/kb/2698155 and see the behavior.

Coordor answer worked for me but for the server 2008 edition 32 bit you have to download this package :

http://www.microsoft.com/en-us/download/details.aspx?id=20809

• Edited by EFA-Info 7 minutes ago