Impossible to reinstall Defender on Win 2016 - bug

I

ISP Services

As I was frustrated with updating an Exchange 2016 CU5 server to CU6, I decided to remove Windows Defender totally, as it caused the upgrade process to hang forever. And since there is no option to turn off real-time scanning, removing it is the only way.

After I removed Windows Defender with this command, it simply won't install again:
Dism /online /Disable-Feature /FeatureName:Windows-Defender /Remove /NoRestart /quiet

I know this remove the payload, so I tried to enable it with an offline image (install.wim):
DISM.exe /Online /Enable-Feature /FeatureName:Windows-Defender /source:e:\temp\install.wim:4

It complains that it cannot find the sources, even if I know the same command works if I try to add/remove other Windows features. For example Windows Backup works fine, RAS remote tools works fine - with the same command and source!

the dism.log gives this:

Error in operation: source for package or file not found, ResolveSource() unsuccessful. (CBS HRESULT=0x800f081f)

And that's not true, as the same command works for Windows Backup as mentioned above.
Looking at the CBS.log, it turns out that something is wrong with the Windows Defender package itself:
Payload size invalid or too small, was not delta-compressed for file: \\?\C:\Windows\CbsTemp\30608115_2253743623\amd64_windows-defender-service-cloudclean

That's the first entry in the CBS.log where something goes wrong.

My suspection:
There is a bug in the Windows Defender package, that don't allow you to re-install it if you remove the payload. Or maybe by design, what do I know. But all the other Windows Features are supposed to support to re-install if you remove the payload.

I also tried the same with the more newer PS command Enable-WindowsOptionalFeature, but it also fails with same error.


Anyone else have this problem?

Continue reading...
 
Back
Top Bottom