Domain Controller server crash during update and constanly reboot , work on directory service restore mode

If the windows installer is stuck. you may be able to use the msi removal tool to see if you can stop it or remove it. This tool is no longer available from microsoft. You should be able to use a search engine to locate it. Also you can set the msiexec to try to remove it or to use add remove programs. There is a registry key to allow this to work is safe move.

1. Boot into Safe Mode.

2. Create the following registry key (it won't exist by default, :
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\msiserver

(If you also want it available in Safe Mode w/ Networking, add the "msiserver" key under the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ key found here as well)


3. Edit the "(Default)" value in the new "msiserver" registry key, and enter "Service" in the "Value Data" box. Click OK, and close the registry editor.

4. Reboot back into Safe Mode, and the Windows Installer service should now run and allow you to add or remove programs in Safe Mode.

Do you have other domain controllers/DNS/GCs?

Thanks

Mike

Yes I have another 2 DC/DNS  but this one was main DC with  only Global Catalog.

Thank you louisreevesI. I   have manage to stop automatic windows update from the services in save mode.
But when I start  in normal mode or any other f8 option except directory service restore mode  , OS keep rebooting. Now OS do not try to install or reinstall updates.  

This is Event 11, CAPI2  error
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.

No coment

reason for accepting your own comment as the solution.
It work