Windows Server 2012 R2 Update (KB2919355) never installs

Hi fellas,

I have a Server 2012 R2 machine that consistently fails to install KB2919355, also called Windows Server 2012 R2 Update.  I've tried via Microsoft Update and manually.  The update shows up in Microsoft Update.  It downloads and appears to install.  Then on the reboot it says it failed to install the update, rolls back, and reboots.  I tried applying the patch manually, following the instructions regarding installation order here:
 
http://www.microsoft.com/en-us/download/details.aspx?id=42335

No difference.

KB2919442 is installed.  

Also tried:
Dism /Online /Cleanup-Image /RestoreHealth
And the fixit here:
https://support.microsoft.com/kb/971058?wa=wsignin1.0
And this:
Net stop wuauserv
rd /s %windir%\softwaredistribution\
Net start wuauserv

No luck.

I've linked below to an excerpt of the machine's WindowsUpdate.log file, which includes the last attempt to download and install updates.

https://onedrive.live.com/redir?resid=E33D98BA21C630C5!4178&authkey=!ABd0kRfvXcD8mXk&ithint=file%2clog

Installed server roles include IIS, File Services, and WSUS.
imtt321Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Thomas GrassiSystems AdministratorCommented:
Did you see this?

To confirm the exact version of Windows Server 2012 R2 that is installed on a computer, run Msinfo32.exe. If Windows Server 2012 R2 Update is installed, the value reported for Hardware Abstraction Layer will be 6.3.9600.17031.

from this

http://technet.microsoft.com/en-us/library/dn645472.aspx

failing possibly because it is already implemented
0
imtt321Author Commented:
Hardware Abstraction Layer version in MSINFO32 reports as 6.3.9600.16500
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

imtt321Author Commented:
The answers forum points me to troubleshooting steps already attempted, such as manually installing, for which I very meticulously followed the installation instructions, and running Dism /Online /Cleanup-Image /RestoreHealth, which didn't work either.  I ran the dism command twice, once using Windows Update as the source and once using a Server 2012 R2 Datacenter install disc as the source.

The Technet forum link points to the problem being with the antivirus.  We're running Symantec Endpoint Protection 12.1.5.  Installation of the update fails whether it is enabled or disabled.

I did find this link:

http://www.thewindowsclub.com/windows-8-1-update-fails-to-install

Following these directions presently.
0
Thomas GrassiSystems AdministratorCommented:
I would completely uninstall the Sysmantec product.

I have seen many times in the past where AV products get in the way even when you turn them off. They really are not turned off.
0
imtt321Author Commented:
Okay, Symantec has been uninstalled completely.  Still no luck.

I also followed the instructions in the above windowsclub link, which entailed:

Running Dism /Online /Get-Packages to see if KB2919355 shows up.  It does, but it shows as staged, not installed.

Used DISM /online /remove-package /packagename:Package_for_KB2919355~31bf3856ad364e35~amd64~~6.3.1.14 to get rid of the staged update.

Then ran:
DISM /online /cleanup-image /startcomponentcleanup
and
DISM /online /cleanup-Image /restorehealth /source:[path to install.wim]
Then rebooted.  Tried installing from Windows Update.

Same result.
0
serialbandCommented:
How about trying the install in safe mode?
0
imtt321Author Commented:
Safe Mode:

Booted into safe mode using msconfig > Safe mode > Network option.  Once in safe mode, windows update service was disabled and not alterable from services.msc.  Ran these two commands:

REG ADD "HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\wuauserv" /VE /T REG_SZ /F /D "Service"

net start wuauserv

This enabled me to manually install the updates.  I didn't reboot until the final update in the list was complete.

But the result was still the same.  The server tried to install the updates, failed, and rebooted to roll them back.
0
imtt321Author Commented:
I wonder if I've found something.  I've been nosing around the CBS.log file found in c:\windows\logs\cbs\cbs.log and found several suspicious errors:

"Extraction of file: update.ses failed because it is not present in the container."

"Not able to add file to extract: update.ses [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]"

Googling isn't yielding much yet.

Further, after the failure of the manual install, cbs.log throws this error as well:

Failed installing driver updates [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]
0
imtt321Author Commented:
This is resolved.  Turns out to have been a result of a USB Restriction GPO which locked down permissions to USBSTOR.sys, which KB2919355 has to update, and fails if it can't.  Once we remediated the policy on the machine and restored the correct permissions to the file, the update went through just fine.

Sorry to waste you guys' time.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
imtt321Author Commented:
We isolated the issue to the failure of USBSTOR.sys to update as part of the KB2919355 installation, as reported in CBS.log.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2012

From novice to tech pro — start learning today.