Can't update PC can't run SFC

We have 2 windows 10 PCs with very similar behavior. Both are trying to update to the latest 1709 update and they both fail right at the end of it. I am also unable to run "SFC /scannow" as it gives me the following error: "Windows resource protection could not start the repair service" I have tried to manually start  Windows Modules Installer but no luck there. Any ideas as to what this issue could be?
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

How are you updating? That makes a difference. I would mount the 1709 ISO and start setup.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
RaminTechnical AdvisorCommented:
Open an elevated Command Prompt and type the following command,

net start trustedinstaller

Hit Enter.

If the service started successfully,  then Run SFC /SCANNOW
this seems to indicate a corrupt OS
best start a fresh install; you may use the "keep my files" option
Upgrade your Question Security!

Your question, your audience. Choose who sees your identity—and your question—with question security.

Hello ThereSystem AdministratorCommented:
Open Services and check if your services aren't disabled. (this tip is from another discussion)

If net start trustedinstaller doesn't start:

Also from one discussion:

You are maybe missing the following registry key: HKLM\Software\Microsoft\Windows\CurrentVersion\Component Based Servicing\Version.

To fix it:
1. Navigate to C:\Windows\Servicing\Version and read the name of a subfolder. It will be named something like 6.1.7600.16385. That is your {TrustedInstaller ID}. Copy the name of that folder to the clipboard (and paste it in Notepad for safe keeping).

2. Find a subfolder in C:\Windows\WinSxS whose name starts with:

x86_microsoft-windows-servicingstack_31bf3856ad364e35_{TrustedInstaller ID} (32bit Windows)

amd64_microsoft-windows-servicingstack_31bf3856ad364e35_{TrustedInstaller ID} (64bit Windows)

Copy the name of that folder to the clipboard (and paste it in Notepad for safe keeping).

3. Create subkey "HKLM\Software\Microsoft\Windows\CurrentVersion\Component Based Servicing\Version". You will need to take ownership of "Component Based Servicing" then give yourself full access permissions before you can create the key.

4. In the new Version key, create an "expandable value" using the TrustedInstaller ID as its name and the complete path of the folder you identified in WinSxS as its value. Properly you should use %SystemRoot%\WinSxS\whatever instead of C:\Windows\WinSxS\whatever.

Step-by-step is described here.
Author, please help us out with feedback.
Hello ThereSystem AdministratorCommented:
All suggestions might be a possible solution.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 10

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.