[Solved] Same Windows Update successfully installs again and again

I had a server on which cumulative updates were successfully installing again and again.

I thought that maybe the cumulative update of the next month would fix the issue, but unfortunately, this didn’t happen. The next cumulative update was successfully installing again and again.

After installing updates one by one and restarting after each installation, I discovered that the blocking one was the Security Monthly Quality Rollup.

In the event log, the update was each time successfully changed to the Installed state.

The package was successfully changed to the Installed state

And in the update history, the update was also listed as successfully installed several times.

Windows update history

Oddly, when I wanted to uninstall the update, I got an error message saying that the update is not installed.

The update is not installed on this server

To investigate further with Windows Update problems, we can have a look at the following log files:

  • C:\Windows\WindowsUpdate.log
  • Files in C:\windows\Logs\CBS

And here are some interesting keywords:

  • fatal
  • failed
  • error
  • warning
  • rollback
  • Rolling back

For example, when you search for the error keyword

Select-String -Pattern 'error' -Path C:\windows\Logs\CBS\*

When you want to have a look at the lines before and after the matching line, you can use the Context parameter to the Select-String cmdlet.
For example, if you want to see the ten previous and the ten following lines:

Select-String -Pattern 'error' -Path C:\windows\Logs\CBS\* -Context 10

In my case, the Rolling back keyword could be found in a CBS log file and was very helpful.
Windows Update rolling back
When I watched the lines after and before the rollback lines, I discovered that the culprit was, in fact, a disk driver which I had to reinstall.

More about

How to parse log files with PowerShell

Leave a Reply

Please log in using one of these methods to post your comment:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s