Problems with installing CU on only one server in the domain

C

cservs

Hi All! There is a problem with updates of one server from an array of similar ones, the details are below.
Forest\Domain-2016 level. All 2016 servers are distributed from one template, and work over vmware esx hypervisor.
Except for RWDC and RODC there are also servers on which the role of RODC is combined with other roles.
These are two servers. First - is RODC + NPAS. Second - is RODC + DNS + File Server (DFS,FSRM) + Print Server.
Second server (1607 LTSB) winver:
OS Name: Microsoft Windows Server 2016 Standard
OS Version: 10.0.14393.1944
This server, one of all, after installing the CU KB4053579, completes the installation of any CU with a "reboot request" with an error and rollback when it reaches 98%.
Any other updates, not Cumulative Update or Monthly rollup are installed with the normal state.
sfc/scannow, DISM, disk space - all Ok, no problem.

Windows SYSTEM event log -

Event 20, Windows Update Agent - Installation Failure: Windows failed to install the following update with error 0x800F0922: Security Update for Windows (KB******).

CBS.log -

Installer name: 'Group Trustee Online Installer'
2018-04-28 21:24:22, Error CSI 000004d7@2018/4/28:18:24:22.920 (F) onecore\base\wcp\plugins\grouptrusteeai\grouptrusteeai.cpp(402): Error STATUS_NOT_SUPPORTED originated in function Windows::WCP::WCF::GroupTrusteeInstaller::AddTrustee expression: SamCreateAliasInDomain( domainHandle, &newTrustee->TrusteeName, 0x0010 | 0x0001 | 0x0002 | 0x0008, &trusteeHandle, &trusteeRid)
[gle=0x80004005]

CSI 000004da Performing 1 operations as follows:
(0) LockComponentPath: flags: 0 comp: {l:16 b:61c6fe211edfd3014003000000063806} pathid: {l:16 b:61c6fe211edfd3014103000000063806} path: [l:115]'\SystemRoot\WinSxS\x86_microsoft.windows.s..ation.badcomponents_31bf3856ad364e35_10.0.14393.0_none_09e78f632173f4c5' pid: 600 starttime: 131694134276270017
2018-04-28 21:24:23, Error [0x018064] CSI 000004db (F) Failed execution of queue item Installer: Group Trustee Online Installer ({118ca598-79a0-4297-953d-e82183960fd2}) with HRESULT HRESULT_FROM_WIN32(50). Failure will not be ignored: A rollback will be initiated after all the operations in the installer queue are completed; installer is reliable[gle=0x80004005]

My investigation failed, I did not find similar cases.
Any help welcome.

Update.

I find this post - http://www.deskdr.com/dr/server-2012-not-r2-rodc-fails-to-install-windows-updates.html (Server 2012 (not R2) RODC fails to install Windows Updates)

The situation is very similar, but speech about windows server 2012, and bug was described in this article- http://support2.microsoft.com/kb/3021910

I use windows server 2016, and find nothing any about this themes.

Continue reading...
 
Back
Top Bottom