Server 2003 R2 (32-bit). Windows update basically isn’t able to install any updates. For a few months now it has been wanting to install various updates for all of the .NET versions we have, and on trying it has always failed, but other updates installed OK. Then from a month or so ago, other updates would still install, but very, very slowly. It would take maybe two hours to install an update, and I would get a ‘Not Responding’ message a few times. On clicking Retry, it would carry on and eventually install whatever the update was. Now, it will not install any updates. When it started misbehaving, I tried replacing the Windows Installer as advised in the KB somewhere, but it made no difference. I have tried removing the downloaded files as per KB958055 as I got error 0x8007064C but that did not work. I tried also manually installing and got “patch package open failed”, that is Error ID 1033, status 1635. I got 0x82046007, update database corrupted, and tried KB958042, which also gave no useful result. Incidentally, there is no catroot2 folder to rename on our system. There is a catroot folder but I haven’t touched that, not knowing what is what with those folders. I can give you an example current error message. For this update: Microsoft .NET Framework 3.5 Service Pack 1 and .NET Framework 3.5 Family Update for .NET versions 2.0 through 3.5 (KB951847) x86 Update downloads OK, initializes OK, then fails after a few seconds of trying to install with 0x80070643. Event Viewer (Applications): Event Type: Error Event Source: HotFixInstaller Event Category: None Event ID: 5000 Date: 19/09/2011 Time: 15:21:53 User: N/A Computer: WAREHOUSE-SERV Description: EventType visualstudio8setup, P1 microsoft .net framework 2.0-kb958481, P2 1033, P3 1612, P4 msi, P5 f, P6 9.0.31211.0, P7 install, P8 x86, P9 w2k3, P10 0. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 76 00 69 00 73 00 75 00 v.i.s.u. 0008: 61 00 6c 00 73 00 74 00 a.l.s.t. 0010: 75 00 64 00 69 00 6f 00 u.d.i.o. 0018: 38 00 73 00 65 00 74 00 8.s.e.t. 0020: 75 00 70 00 2c 00 20 00 u.p.,. . 0028: 6d 00 69 00 63 00 72 00 m.i.c.r. 0030: 6f 00 73 00 6f 00 66 00 o.s.o.f. 0038: 74 00 20 00 2e 00 6e 00 t. ...n. 0040: 65 00 74 00 20 00 66 00 e.t. .f. 0048: 72 00 61 00 6d 00 65 00 r.a.m.e. 0050: 77 00 6f 00 72 00 6b 00 w.o.r.k. 0058: 20 00 32 00 2e 00 30 00 .2...0. 0060: 2d 00 6b 00 62 00 39 00 -.k.b.9. 0068: 35 00 38 00 34 00 38 00 5.8.4.8. 0070: 31 00 2c 00 20 00 31 00 1.,. .1. 0078: 30 00 33 00 33 00 2c 00 0.3.3.,. 0080: 20 00 31 00 36 00 31 00 .1.6.1. 0088: 32 00 2c 00 20 00 6d 00 2.,. .m. 0090: 73 00 69 00 2c 00 20 00 s.i.,. . 0098: 66 00 2c 00 20 00 39 00 f.,. .9. 00a0: 2e 00 30 00 2e 00 33 00 ..0...3. 00a8: 31 00 32 00 31 00 31 00 1.2.1.1. 00b0: 2e 00 30 00 2c 00 20 00 ..0.,. . 00b8: 69 00 6e 00 73 00 74 00 i.n.s.t. 00c0: 61 00 6c 00 6c 00 2c 00 a.l.l.,. 00c8: 20 00 78 00 38 00 36 00 .x.8.6. 00d0: 2c 00 20 00 77 00 32 00 ,. .w.2. 00d8: 6b 00 33 00 20 00 30 00 k.3. .0. 00e0: 0d 00 0a 00 .... Also: Event Type: Information Event Source: MsiInstaller Event Category: None Event ID: 1042 Date: 19/09/2011 Time: 15:21:52 User: NT AUTHORITY\SYSTEM Computer: WAREHOUSE-SERV Description: The description for Event ID ( 1042 ) in Source ( MsiInstaller ) cannot be found. And a similar one with ID 1040. For this one: Security Update for Windows Server 2003 (KB2570947) (Already downloaded) Failed with error 0x80246007. Event Log (System): Event Type: Error Event Source: Windows Update Agent Event Category: Installation Event ID: 20 Date: 19/09/2011 Time: 15:49:31 User: N/A Computer: WAREHOUSE-SERV Description: Installation Failure: Windows failed to install the following update with error 0x80246007: Security Update for Windows Server 2003 (KB2570947). For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 57 69 6e 33 32 48 52 65 Win32HRe 0008: 73 75 6c 74 3d 30 78 38 sult=0x8 0010: 30 32 34 36 30 30 37 20 0246007 0018: 55 70 64 61 74 65 49 44 UpdateID 0020: 3d 7b 41 33 34 31 42 31 ={A341B1 0028: 41 39 2d 43 37 42 36 2d A9-C7B6- 0030: 34 30 31 35 2d 38 42 30 4015-8B0 0038: 41 2d 30 34 42 44 32 45 A-04BD2E 0040: 46 31 33 36 31 36 7d 20 F13616} 0048: 52 65 76 69 73 69 6f 6e Revision 0050: 4e 75 6d 62 65 72 3d 31 Number=1 0058: 30 31 20 00 01 . Any ideas? Alphatucana http://www.alphatucana.co.uk/ http://www.websitetavern.com/

Looks like you've done most everything I'd have sugested. Might ask them here. http://answers.microsoft.com/en-us/windows/forum/windows_other-windows_update/what-information-to-post-in-the-windows-update/1467f44b-ee27-4f7d-98d7-f1c4b35b3395 http://answers.microsoft.com/en-us/windows/forum/windows_update Regards, Dave Patrick .... Microsoft Certified Professional Microsoft MVP [Windows]

OK, thanks; will ask there as well. I'll leave this thread open too though... just in case. MartinAlphatucana http://www.alphatucana.co.uk/ http://www.websitetavern.com/

Ok, sounds good. Regards, Dave Patrick .... Microsoft Certified Professional Microsoft MVP [Windows]

Perhaps I should also repost this query in the Windows Server or Windows Server Security forum? MartinAlphatucana http://www.alphatucana.co.uk/ http://www.websitetavern.com/

Windows Answers couldn't help. Perhaps I should also repost this query in the Windows Server Security forum? Is it OK to do that? Martin Alphatucana http://www.alphatucana.co.uk/ http://www.websitetavern.com/

I thought that group was for Windows Update no matter the OS. No matter, support for security updates is always free so if you limit your topic to KB2570947 No-charge phone support is available by calling 1-866-PCSAFETY in the United States and Canada or by contacting your local Microsoft subsidiary http://support.microsoft.com/kb/2570947 Regards, Dave Patrick .... Microsoft Certified Professional Microsoft MVP [Windows]

OK... well, I may try that, although it is an international phone number so it will be far from free... and a very long call, I suspect. Also, as we are a company, the support may not be free (going by what it says for 'enterprise' users (although we are a small company). Meanwhile... if anyone here has any ideas, I would be glad to hear. In the meantime, is it likely that system file checker might fix something relating to this? I plan to reboot the server shortly anyway, and run chkdsk and sfc /scanonce. Martin Alphatucana http://www.alphatucana.co.uk/ http://www.websitetavern.com/

Hi, You may refer to the following thread for how to troubleshoot the .Net Framework 3.5 installation issue: server 2008 cant install .net 3.5 http://social.technet.microsoft.com/Forums/en-AU/winservergen/thread/09f0b491-d750-4f3e-a274-eca8bc44be82 Generally, we can perform the following troubleshooting suggestions to troubleshoot the Windows Update issue: Suggestion 1: Temporarily disable firewall and antivirus program to test the issue. Suggestion 2: Disable Windows Update service, rename the folder %windir%\SoftwareDistribution and restart the Windows Update service. Suggestion 3: Run the System Update Readiness tool (Checksur.exe) to scan and repair the system files. If some files cannot be repaired automatically, you may replace them manually. For more information, please refer to the following Microsoft KB and TechNet articles: Description of the System Update Readiness Tool for Windows Vista, for Windows Server 2008, for Windows 7, and for Windows Server 2008 R2 http://support.microsoft.com/kb/947821 Advanced guidelines for diagnosing and fixing servicing corruption http://technet.microsoft.com/en-us/library/ee619779(WS.10).aspx Suggestion 4: Run SFC /Scannow to scan and repair the system files. If some corrupted files cannot be repaired, you may manually replace them. For more information, please read the following Microsoft KB article: How to use the System File Checker tool to troubleshoot missing or corrupted system files on Windows Vista or on Windows 7 http://support.microsoft.com/kb/929833 Suggestion 5: Perform an In-Place upgrade to repair the whole system. Regards, Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

OK, thanks: this is going to take some time to do before I can get back to you... I am a bit nervous about uninstalling all the dot Net framework stuff as at the moment no updates are installing, and I tried to install one update manually and that failed too... as this is the production server I don't want it out of action for an unknown period of time! I will do what I can and report back either way, however. I plan to run sfc tonight but it seems the System Update Readiness Tool is not suitable for Server 2003 R2, which we are running - which is a shame as it seems to be just the sort of tool we need! Martin Alphatucana http://www.alphatucana.co.uk/ http://www.websitetavern.com/

No matter the support venue support for security updates should be free. If you're out of US then you may need to go though local support channels. Windows Update logging or extended logging may turn up something as well. How to read the Windowsupdate.log file http://support.microsoft.com/kb/902093 Might also look for dotnet framework log files. http://blogs.msdn.com/b/astebner/archive/2006/10/30/net-framework-3-0-setup-log-files.aspx http://blogs.msdn.com/b/varungupta/archive/2010/06/22/troubleshooting-net-framework-4-install-failures.aspx Regards, Dave Patrick .... Microsoft Certified Professional Microsoft MVP [Windows]

Update: sfc /scanonce did replace the odd file, and it was necessary to re-install one printer too for some reason, but updates are still failing, 0x8007064C, 0x80246007. A definition update for Windows Defender installed OK from another source (update history says) but all 30 automatic updates failed. A copy of the WindowsUpdate.log is here: https://skydrive.live.com/redir.aspx?cid=b8085e83e25a4751&resid=B8085E83E25A4751!104 MartinAlphatucana http://www.alphatucana.co.uk/ http://www.websitetavern.com/

Update: sfc /scanonce did replace the odd file, and it was necessary to re-install one printer too for some reason, but updates are still failing, 0x8007064C, 0x80246007. A definition update for Windows Defender installed OK from another source (update history says) but all 30 automatic updates failed. A copy of the WindowsUpdate.log is here: https://skydrive.live.com/redir.aspx?cid=b8085e83e25a4751&resid=B8085E83E25A4751!104 I have also tried re-registering the WU dll's as per http://support.microsoft.com/kb/956708 as the first error in the log as far as I can decypher it is "AU found no suitable session to launch client in". Didn't reboot the server; update still fails. Could it be permissions? Which account and which permission? Firewall/antivirus disable: same result. Martin Alphatucana http://www.alphatucana.co.uk/ http://www.websitetavern.com/

Hi, Based on the current situation, please refer to the following Microsoft KB article for how to reset Windows Update components. How do I reset Windows Update components? http://support.microsoft.com/kb/971058 If the issue persists, you may consider to perform a repair install to repair the system. For the detailed steps, please refer to the section “How to Repair Your Installation of Windows” of the following Microsoft KB article: How to troubleshoot startup problems in Windows Server 2003 http://support.microsoft.com/kb/325375 Regards, Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

FYI, to everyone involved in this thread, the current errors may be related to the AD replication errors occuring with the DCs, as indicated in this related thread: Cannot delete Computer from Active Directory and PC cannot join domain http://social.technet.microsoft.com/Forums/en-US/winserverDS/thread/a035fe04-f857-4d27-ad8d-84b7f67c347b/Ace Fekay MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007 & Exchange 2010, Exchange 2010 Enterprise Administrator, MCSE & MCSA 2003/2000, MCSA Messaging 2003 Microsoft Certified Trainer Microsoft MVP - Directory Services Complete List of Technical Blogs: http://www.delawarecountycomputerconsulting.com/technicalblogs.php This posting is provided AS-IS with no warranties or guarantees and confers no rights.

Hi, thanks Arthur_li for the links; plan to try the aggressive fix method tonight. And I second what Ace Fekay says: this machine has lots of problems at the moment, so it could just be related. Not sure that there are replication errors though... but AD does have problems. MartinAlphatucana http://www.alphatucana.co.uk/ http://www.websitetavern.com/

Actually, based on the dcdiags, there are SYSVOL "Latency" errors, which ARE replication errors. Please see my response in your other thread.Ace Fekay MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007 & Exchange 2010, Exchange 2010 Enterprise Administrator, MCSE & MCSA 2003/2000, MCSA Messaging 2003 Microsoft Certified Trainer Microsoft MVP - Directory Services Complete List of Technical Blogs: http://www.delawarecountycomputerconsulting.com/technicalblogs.php This posting is provided AS-IS with no warranties or guarantees and confers no rights.

Ah... OK. Replication errors need fixing too then. Accepted. I ran the aggressive 'Fixit' - it took about 6 hours and multiple hits of 'Retry' as after half and hour to an hour each time it claimed the installer was not responding, but from previous experience I know that if I 'Retry' enough times, it gets there in the end. So, I rebooted the server at about 2.45am... Today it spent 4 hours downloading the latest updates after I told it to go ahead (the server is set to notify only). I got it to try the update for .Net framework again, and that failed. I tried a general security update for Windows Server 2003, and that succeeded. Whew! So it seems to be partially fixed, at least. New Windowsupdatelog2011-09-27.log file with the last portion only, here: https://skydrive.live.com/redir.aspx?cid=b8085e83e25a4751&resid=B8085E83E25A4751!104 I suppose the next thing to try is removing all the .net frameworks, and re-installing them one by one. But I would like the msiinstaller to be fixed first or it could take days and I don't know which applications or functions depend on them (if any). I have already tried replacing-installing the installer package, and run sfc /scanonce, to no effect. So... how do I fix that? **** UPDATE **** - an update on the updates! I notice that a) .NET updates don't install at all (get "failed" message after a few seconds); b) MS Office updates install, but very, very slowly (3 to 8 hours); c) Server 2003 security updates install more or less normally - a few minutes each. Alphatucana http://www.alphatucana.co.uk/ http://www.websitetavern.com/