Windows OS System File Corruption, Could it be Caused by Misconfigured WSUS?

Hello EE,

Is there any possibility that WSUS could cause Windows File Corruption?

For the life of me I can not get Group Policy Management installed on a Windows 7 box.

Fails trying to install the tools in "Turn Windows Features on or off".

Try to install Group Policy Management Tools via GUI
Installing Group Policy Management Tools via GUI
Installing Group Policy Management Tools via GUI
Installing Group Policy Management Tools via GUI ERROR
And when I try to install via DISM fatal error 1603.

DISM install GPMC fails fatal error 1603
I run the system file checker sfc /scannow and it does find files that need repair and says it repaired some.

I reboot run the sfc /scannow and it does find files that need fixing but unable to fix them.

Rinse and repeat, and this appears to be a loop of same results.

sfc /scannow results
This is not an issue on freshly imaged computers that get freshly joined to our domain.

I can install the RSAT... BUT...

I can never enabled the features via the "Turn Windows features on or off" GUI.

I have always had to run the DISM commands to install the tools I need.

My biggest question here is could our WSUS server cause this type of file corruption pushing out Windows Update improperly?

How can I get this package installed?

Could a Group Policy be blocking this ability to install?

My next try will be:

Dism /Online /Cleanup-Image /RestoreHealth

And see if I can re-run sfc /scannow and get better results.

This does not appear to be an issue with our image we deploy as a freshly imaged and joined computer can install these packages via DISM (No GUI), but over time with the computer being on the domain and receiving updates and group polices this becomes a problem.

Note: We are using a Proxy too, could the proxy play any role in this issue?

I could really use some help as this one has been bugging me so bad that I can not pin point the root cause. :-)
CheckThe LogsAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

As for wsus: simply "no". WSUS does not push updates but clients pull and there is nothing that could go wrong pulling. Installing updates rarely ends in broken systems but is always possible.
I would try to install the system update readiness tool and if that does not help, do an inplace upgrade installation (aka repair) of windows.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
CheckThe LogsAuthor Commented:

I know it's a long shot but I am thinking this could be similar to my problem...

Will add to this more details of my issue.

Thank you for your feedback and help very much appreciated. I will try the readiness tool I think I tried that already but will re verify.

Last resort will in place upgrade and report back any updates or results.
Seth SimmonsSr. Systems AdministratorCommented:
can you post c:\windows\logs\dism\dism.log ?
IT Pros Agree: AI and Machine Learning Key

We’d all like to think our company’s data is well protected, but when you ask IT professionals they admit the data probably is not as safe as it could be.

CheckThe LogsAuthor Commented:
DISM.log uploaded. CHECKSUR.log uploaded. And another log file that I edited out personal information but provides very similar issue as link I posted:

Appreciate all your help everyone! Happy Halloween! :-)
CheckThe LogsAuthor Commented:
Forgot to add this one.
The recommendation to inplace-upgrade still stands.
Happy Halloween!
Seth SimmonsSr. Systems AdministratorCommented:
from checksur.log the recommendation from KB article 2700601 is to copy the 2 files from another system

the dism log refers to the cbs log
can you post c:\windows\logs\cbs\cbs.log ?
You may want to give Chev65's fixes a shot here,

Lots of good links to fixes.
CheckThe LogsAuthor Commented:
Seth Simmons > CBS log uploaded, needed to split into 2 files it was too large to upload as one file. Looks like I will have to track down another Windows 7 box and see if I can find these 2 files to get on this machine:

Seconds executed: 709
 Found 2 errors
  CBS MUM Corrupt Total count: 2

Unavailable repair files:

It just seems odd that these 2 files would cause me problems for installing GPMC but still worth a shot at replacing them.

Thank you for you help on this one, I more than likely will try this fix first and see if I can get past my issue with this fix.

joinaunion > Thank you for the link, I checked that one out and some of the links are dead on that forum for Chev65, but some are still working, but they appear to be a fix for reinstalling the RSAT which I already have installed. Could be an option, to remove and reinstall the RSAT and then install the tools I need via command line. I might give that a try, thank you for your help on this one.

McKnife > I am with you :-) I totally agree that an in place upgrade would probably fix this issue but I really want to use that as a last resort. This one has been driving me nuts for months and really want to narrow down the root cause to avoid this issue in the future. Thank you for the idea, it is very much appreciated.

It might take me until sometime on Monday to get more updates to this question, please bear with me and thanks again for all your help.

My gut is telling me if I delete the registry keys on this machine for the WSUS server and connect it up to an outside network and hit Windows Updates and try the command:

dism /online /enable-feature /featurename:RemoteServerAdministrationTools-Features-GP

That it would work and install, then connect back up to my network after the install.

My gut is telling me this is more proxy related than WSUS related at this point due to review of the WindowsUpdate.log which I have attached earlier named LOG.txt.

Updates to follow! Thanks again everyone @ EE!
Can you run this tool and post back results please.
CheckThe LogsAuthor Commented:
joinaunion > Ran it and found some fixes

But still failed on me when trying to get the GPMC installed via DISM...

dism /online /enable-feature /featurename:RemoteServerAdministrationTools-Features-GP

I ran Windows Updates and it found an update for System Readiness Tool but basically hung for over a half hour installing a 413kb in size update.

Reboot and try DISM oonce more, no dice.

Try applying the GPMC via Turn Windows Feature on of off, same error as before.

Uploading the latest windows update log file, this is where I think the issue lies....


I run the netsh winhttp show proxy command

But I do use a proxy which is set in the browser (IE) and appears to apply itself to other browsers such as Chrome and Firefox, not 100% sure if there is a GPO that applies proxy settings as well.

2014-11-01      17:26:17:679      1176      1e78      PT      WARNING: Cached cookie has expired or new PID is available
2014-11-01      17:26:17:679      1176      1e78      PT      Initializing simple targeting cookie, clientId = 4a5757e7-26bf-45ef-89aa-ad1c1beae24f, target group = , DNS name =
2014-11-01      17:26:17:679      1176      1e78      PT        Server URL =
2014-11-01      17:27:18:587      1176      1e78      Misc      WARNING: SendRequest failed with hr = 80072ee2. Proxy List used: <X.X.X.X:80> Bypass List used : <(null)> Auth Schemes used : <>
2014-11-01      17:27:18:588      1176      1e78      PT        + Last proxy send request failed with hr = 0x80072EE2, HTTP status code = 0
2014-11-01      17:27:18:588      1176      1e78      PT        + Caller provided proxy = No
2014-11-01      17:27:18:588      1176      1e78      PT        + Proxy list used = X.X.X.X:80
2014-11-01      17:27:18:588      1176      1e78      PT        + Bypass list used = <NULL>
2014-11-01      17:27:18:588      1176      1e78      PT        + Caller provided credentials = No
2014-11-01      17:27:18:588      1176      1e78      PT        + Impersonate flags = 0
2014-11-01      17:27:18:588      1176      1e78      PT        + Possible authorization schemes used =
2014-11-01      17:27:18:588      1176      1e78      PT      WARNING: GetAuthorizationCookie failure, error = 0x80072EE2, soap client error = 5, soap error code = 0, HTTP status code = 200
2014-11-01      17:27:18:588      1176      1e78      PT      WARNING: Failed to initialize Simple Targeting Cookie: 0x80072ee2
2014-11-01      17:27:18:588      1176      1e78      PT      WARNING: PopulateAuthCookies failed: 0x80072ee2
2014-11-01      17:27:18:588      1176      1e78      PT      WARNING: RefreshCookie failed: 0x80072ee2
2014-11-01      17:27:18:588      1176      1e78      PT      WARNING: RefreshPTState failed: 0x80072ee2
2014-11-01      17:27:18:588      1176      1e78      PT      WARNING: PTError: 0x80072ee2
2014-11-01      17:27:18:588      1176      1e78      Report      WARNING: Reporter failed to upload events with hr = 80072ee2.

I guess my next attempt will be to remove this machine from this network and delete the WSUS registry keys and try this on a network without a proxy and see if I get any better results.

Has anyone ever seen a proxy cause these kinds of issues?

Thank you for all your help on this one appreciate all the great feedback! :-)
Error 1603. Permission issue.
Have you tried this fix here?
CheckThe LogsAuthor Commented:
Seth Simmons > from checksur.log the recommendation from KB article 2700601 is to copy the 2 files from another system

I could not locate these files on other machines I have, so I could not do these steps.

joinaunion > Error 1603. Permission issue.
Have you tried this fix here?

I am running Windows 7 ENT. x64. This fix outlines for XP only. Drive is not encrypted nor substitute.

Also, I even went as far as deleting the registry keys for the WSUS, took off this network and tired to hit Windows Updates and then ran command:

dism /online /enable-feature /featurename:RemoteServerAdministrationTools-Features-GP

And got the same 1603 error as before.

So my idea did not work either. :-( Sad Panda I am :-(
Do yourself a favor and do the inplace upgrade now.
There are errors that can't be explained or found. Those are wiped away using image backups or (if you don't have one) repair installations (aka inplace upgrade). We don't HAVE to worry, unless the problem reoccurs again and again.
CheckThe LogsAuthor Commented:
McKnife > Backing up data to be safe and will be running in place upgrade ASAP. I will report back after the in place upgrade and let you all know how thing go.

Thank you for the support and feedback! :-)
Just in case you have not done it before: it is advisable to use a win7 DVD with sp1 included, so you won't need to reinstall SP1.
CheckThe LogsAuthor Commented:
McKnife > I have an SP1 DVD running upgrade now crossing fingers :-)
CheckThe LogsAuthor Commented:
Updates: I have run the in place upgrade and it has resolved the issue, I now have access to install the GPMC and did it via the Turn Features On or Off.

Thank you all for your feedback and support and thank you McKnife you had the answer right away!
CheckThe LogsAuthor Commented:
As much as I did not want to do the in place upgrade, this did resolve my issue. Granted I was not able to pin point the root cause, I was still able to fix my issues and move on.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 7

From novice to tech pro — start learning today.