Forum Discussion

geoperkins's avatar
geoperkins
Brass Contributor
Dec 01, 2020

Failure configuring Windows updates. Reverting changes. Do not turn off your computer.

Windows Server 2012 R1. I cannot install any more/most security updates (the previous admin gave up I guess, leaving me a mess of vulnerabilities). I am stuck because the IE11 update (KB 4492872) ref...
security
gperkins's avatar
gperkins
Copper Contributor
Dec 07, 2020

geoperkins 

Additional steps taken to fix this ugly mess:


Error "CMIADAPTER: Exiting with HRESULT code = HRESULT_FROM_WIN32(15010)"
https://www.infoworld.com/article/2841918/microsoft-endorses-a-workaround-for-botched-windows-8-server-2012-patch-kb-3000061.html
Delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{e7ef96be-969f-414f-97d7-3ddb7b558ccc}

https://social.technet.microsoft.com/Forums/en-US/90505fa7-1004-4590-8894-8e32ef01bd01/security-update-installation-fails-after-wind-2008r2-to-windows-2012-std-os-upgrade?forum=winserver8gen
Delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{8c416c79-d49b-4f01-a467-e56d3aa8234c}

https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj574225(v=ws.11)
Delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{bc2eeeec-b77a-4a52-b6a4-dffb1b1370cb}
Delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{57e0b31d-de8c-4181-bcd1-f70e880b49fc}
Delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{8c9dd1ad-e6e5-4b07-b455-684a9d879900}

https://social.technet.microsoft.com/Forums/lync/en-US/70219bcb-36a8-466e-900b-cbf390db38d2/quotfailure-configuring-windows-updates-reverting-changesquot-postreboot-status-0x800f0922?forum=winserver8gen

 

net localgroup WinRMRemoteWMIUsers__ /add mydomain.corp.com\Domain Admins
The command completed successfully.

 

Restarted.
Retried update.

===>> Success!! <<===

 

But not sure if it was adding Domain Admins to local group "WinRMRemoteWMIUsers__" or the HKLM  WINEVT\Publishers\ registry key deletions... because I did all this in one step. But all's well that ends well!

 

Why didn't Microsoft create a KB to cover this situation!?  That was in 2014, and water over the dam now, but it shouldn't be this hard guys/gals! Hopefully this community posting will help others in the future.

Resources