News, tips, advice, support for Windows, Office, PCs & more. Tech help. No bull. We're community supported by donations from our Plus Members, and proud of it
Home icon Home icon Home icon Email icon RSS icon
  • Your device is missing important security and quality fixes (in red on WU)

    Home Forums AskWoody support Windows Windows 10 Windows 10 version 1909 – November 2019 Update Your device is missing important security and quality fixes (in red on WU)

    Viewing 27 reply threads
    • Author
      Posts
      • #2275683 Reply
        PFC
        AskWoody Plus

        Helping non technical friends remotely using TeamViewer(free)

        windows 10 1909 os build 18363.720

        Cumulative updates fail with 0x800706be all retries fail.
        running sfc /scannow results in msg; windows resource protection could not start the repair.
        Troubleshooter just finds Pending Restarts. Chkdsk yielded no errors.

        Attached are a couple of snips of the only (visual) affects of the problem.

        Also:

        I created a windows.iso file on the problem computer, started the upgrade using “mount” option and also specified option to save apps and data.
        The upgrade ran to the first 30% Complete then suddenly stopped and reverted to desktop, no indication of any errors whatsoever.

        Also ran ResetWUeng and also cleared Windows Update cache before attemting a 2nd Upgrade that just stopped.

        Would like to avoid clean install if possible.

        Your help is requested in solving this problem.

        Attachments:
      • #2275689 Reply
        PKCano
        Da Boss

        Try this.
        You need to be logged in with an Administrator account, not Standard.
        + If the User has used any third-party Windows Update blocker in the past, verify that it is off/settings removed.
        + Deactivate (temoprarly if you can) any third-party AV program(s).
        + Verify there is no active Pause or Deferral set and Metered connections are turned OFF.
        + Turn OFF Fast Startup (Control Panel\Power options).
        + Restart (not shutdown/turn on) the computer.

        In an elevated command prompt, run these commands: (note any errors)
        dism /online /Cleanup-Image /RevertPendingActions
        dism /online /cleanup-image /restorehealth
        sfc /scannow
        Restart the computer.

        After the computer has finished startup
        In an elevated command prompt, run these commands: (note any errors)
        net stop wuauserv
        net stop cryptSvc
        net stop bits
        net stop msiserver
        Ren C:\Windows\SoftwareDistribution SoftwareDistribution.2006
        net start wuauserv
        net start cryptSvc
        net start bits
        net start msiserver
        Restart the computer

        Use wushowhide.diagcab to show available updates. Hide any updates you don’t want to install.
        If you had no errors, at this point, you can wait for Windows Update to scan for updates on its own and try to update again
        Or
        Download the current SSU and CU from the MS Catalog and try a manual install (SSU first, reboot, CU)
        OR
        If the ISO is a later Build than is installed, disconnect from the Interned (so you don’t get v2004 in the update it will try to do) and try mounting the ISO in the current system and run setup.exe

         

        2 users thanked author for this post.
      • #2275703 Reply
        PFC
        AskWoody Plus

        Do I go right through or stop and report errors?

      • #2275716 Reply
        PFC
        AskWoody Plus

        Fast Startup was turned off before 1st restart

        Dism and sfc messages attached.

        restarted and did down to start msiserver (which was not running)  2 other attchmnts

        ToWoody1

        ToWoody2

        ToWoody2b

        Attachments:
      • #2275724 Reply
        PKCano
        Da Boss

        It seems that msiserver started (it was stopped before)
        Does this folder exist?
        C:\Windows\SoftwareDistribution.2006? IF it does….

        Try running this again
        dism /online /Cleanup-Image /RevertPendingActions

        If it is successful, run
        dism /online /cleanup-image /restorehealth
        sfc /scannow

        Either way, let me know.

      • #2275726 Reply
        PFC
        AskWoody Plus

        the Folder is there, att is Dism

        ToWoody3

        Attachments:
      • #2275730 Reply
        PKCano
        Da Boss

        Since DISM won’t run, I believe your image is damaged and recommend an “in-place upgrade.” (not Refresh your PC and not Reset your PC).
        Make a backup of the User’s data and a full disk image first.
        Be sure you have sufficient free disk space before you start.
        Follow the instructions here.
        Be sure you have the correct bittage (probably 64-bit), and language.
        In Step 9, do NOT do any updates in the process and do not allow it anywhere else you are asked to update. (you will get v2004). You can even disconnect from the Internet to be sure.
        Choose to save your Apps and your data – it tells you what you may lose.
        When you finish, go through the settings and change any you find necessary (especially Windows Update settings).
        Then you can connect to the Internet and do any updates necessary.

      • #2275735 Reply
        PFC
        AskWoody Plus

        my problem is I’m running remotely to the problem computer, disconnecting and/or restarts cut me out.

         

      • #2275741 Reply
        PFC
        AskWoody Plus

        Do I have to recreate the iso file (the one done was created June 24)?

        In my first post 1 mentioned running upgrade from it twice that stopped on 30% complete,

        will I be doing anything different, the only thing I didn’t do is Disable Secure Boot.

        I’ll watch the video and double check backups.

        • #2275748 Reply
          PKCano
          Da Boss

          June 24th ISO made from the Media Creation Tool will install v2004, not v1909.
          Check the free disk space.
          The procedure on TenForums (linked above) will explain – read it through.
          And be sure you have a full disk image and a separate data backup BEFORE you start.

          You need a v1909 ISO to reinstall v1909. You can download the “MS Windows and Office Download Tool” from Heidoc.net and run it on your PC. Download the v1909 ISO (I think Build 18383.592) and use that.

      • #2275752 Reply
        Sueska
        AskWoody Plus

        Just fyi – not sure if applies to your case – I had the same windows update error message and was unable to obtain May’s update for 1909 PRO. In my case I was a few months behind on updates and had to disable the GP business windows updates for feature and monthly security updates even though it was set to 0 days for both. I remember tinkering with this setting when the gui settings disappeared. Once I disabled the setting and rebooted the error message went away and I was able to obtain May’s update.

        • #2275757 Reply
          PKCano
          Da Boss

          I assumed he read #2275689 but always good to double check.

          + Verify there is no active Pause or Deferral set and Metered connections are turned OFF.

          • #2275758 Reply
            Sueska
            AskWoody Plus

            Thank you PKCano, I only mentioned because when I saw my settings to 0 days, I assumed that was the same as being off. Not sure if others may have the wrong idea as I did.

            • #2275761 Reply
              PKCano
              Da Boss

              WU is so crazy. And MS wobbling is even worse. Their reasoning doesn’t make sense. I just think they do whatever they want to do and try to think up some bafflegab to go along.

              One thing in the past, I recommended leaving all but the one setting in GP (“2” notify) not configured. Saved a lot of bacon.

              3 users thanked author for this post.
      • #2275762 Reply
        PFC
        AskWoody Plus

        how do I make full disk image?

        the metered connection if OFF, where I check; no active Pause or Deferral set?

        what free space? drive C or what?

         

        • #2275770 Reply
          PKCano
          Da Boss

          how do I make full disk image?

          You will need an external USB drive for backing up the computer.
          Use backup software to make a full disk image. Some good free ones are Macrium Reflect Free, EaseUS Todo Backup Free and Aomei Backupper Free. (There are also paid versions of each). Making a full disk backup allows you to restore OS, programs, and data in case you have a major problem, so you don’t have to reinstall everything one at a time from scratch.

          the metered connection if OFF, where I check; no active Pause or Deferral set?

          If you have the Home Edition, Pause is set in the User interface (GUI) in Windows Update and also under the Advanced options link there.
          If you have the Pro Edition, Pause is set in the same place as Home PLUS deferral pulldowns under Advanced options, and in Group Policy (gpedit.msc). For Group Policy see the screenshots at the bottom of AKB2000016.

          what free space? drive C or what?

          Free space on the drive the OS is install on. Read through the TenForums procedure. It will tell you the MINIMUM space you need. Better to have more.

      • #2275763 Reply
        PFC
        AskWoody Plus

        somebody hijacking?

         

        • #2275772 Reply
          PKCano
          Da Boss

          Nope. Somebody giving you more information to clarify things.

          2 users thanked author for this post.
      • #2275987 Reply
        PFC
        AskWoody Plus

        Have put media creation tool for 1909(Nov) on the desktop, as well downloaded 1909 .iso.

        Attempted to create Boot USB for this level, (in case) while connected to the internet

        and windows immediately asks to download latest version. Is the only option to get offline

        and run it? I may be able to talk them through that but other things required offline are not so easy; ie Disable secure boot and the actual in place upgrade. Our covid travel restrictions only come off Jul 3 and I’m considering making a trip (5 hrs) to do those. Other things are pretty much in place, data backups and system image copy. Your thoughts.

        • #2275991 Reply
          PKCano
          Da Boss

          Any use of the Media Creation Tool (even if it “says” 1909) now to create an ISO will give you v2004 because that is what is online at MS to download.
          If you want v1909, you will have to download the ISO from Heidoc.net labeled v1909 on their site.
          The only way, then, is to use the ISO disconnected from you network/Internet so you are not upgraded to v2004 in the process of installation. Do not connect to the Internet after installation until you have gone through the Settings and at least changed WU to protect you from surprise upgrade.

          To do the in-place upgrade repair from bootable media (DVD/USB), you do NOT boot from the bootable media (DVD/USB). You insert the media in the running computer, and run setup.exe from the media using File Explorer or the command line specifying the drive letter of the media. You do not have to disable Secure Boot b/c you are not booting from the media. But you can mount the ISO on the running computer instead, and run setup.exe, thus  eliminating the need for making bootable media.
          If you boot from DVD/USB media, it will do a clean install.

      • #2275989 Reply
        Paul T
        AskWoody MVP

        To create a bootable USB/DVD download Rufus and select the ISO as the source.

        cheers, Paul

      • #2276001 Reply
        PFC
        AskWoody Plus

        was unable to run 1909 Media Creation even after Disabling network.

        instead of get latest version, now it says there was a problem, make sure you’re connected to internet and try again. can we get around this somehow? Got this ver from Heidoc.net and selected the Nov 2019.  The file version in Properties Details is: 10.0.18362.418

         

      • #2276002 Reply
        PFC
        AskWoody Plus

        To create a bootable USB/DVD download Rufus and select the ISO as the source.

        cheers, Paul

        you’re ahead of me, thanks

         

      • #2276059 Reply
        PFC
        AskWoody Plus

        Please read #2275991.

        The Media Creation Tool downloads from MS to create the ISO on the PC. You cannot use the Media Creation Tool disconnected from the Internet.

        Heidoc.net provides the ISO directly. There should be a later one than the one you downloaded. It should say v1909 Build 18363.592. It is dated somewhere between Feb and maybe Apr 2020. It is better to use this one.

        It is the INSTALL that needs to be done offline.

        the latest iso is 2004, the one before that is the one I downloaded, would they have removed the 18363.592 or am I not searching correctly?

        • #2276062 Reply
          PKCano
          Da Boss

          I have not look myself, but I have seen a screenshot within the last couple of weeks with that Build in the list above the one you downloaded.

          See #2266834.

          My bad, that is v2004. I guess yours IS the latest.

          • This reply was modified 5 days, 8 hours ago by PKCano.
      • #2276080 Reply
        PFC
        AskWoody Plus

        I guess we’ll just have more updates to eventually apply.

        I did a test run of Rufus with the iso I have so I guess the results are what to go with.

        There was a warning message at the end saying Disable Secure boot was necessary but I’d like to believe your theory, that since it won’t be booting, Secure boot is ok.

        I’m also assuming that a copy of Macrium Reflect should also be put on the backup with the image copy, in case a restore is necessary (hope not though).

        • #2276083 Reply
          PKCano
          Da Boss

          I think the only thing on the install media is the Win10 installer. I think you will have to make a Macrium Rescue Disk/USB as a separate thing. There may be a download on the website to create the Rescue disk (I use Acronis paid and EaseUS Todo Free, so I’m not familiar) or you will have to install Reflect on the PC and create the Rescue Disk through the program. There should be instructions in a manual or within the program.

        • #2276194 Reply
          Paul T
          AskWoody MVP

          Macrium rescue USB is created from within Macrium (Other Tasks > Create rescue media).

          cheers, Paul

          1 user thanked author for this post.
          PFC
      • #2276595 Reply
        PFC
        AskWoody Plus

        Macrium rescue USB is created from within Macrium (Other Tasks > Create rescue media).

        cheers, Paul

        Ran on problem machine, Windows RE: shows Release 1903 64 bit should I not see 1909 64 bit, which is current level?

        Another question, is there a way to verify this rescue media, ie exit before actually doing recovery?

        Thanks

         

        • #2276602 Reply
          PKCano
          Da Boss

          Booting from the Macrium Rescue media should take you to the Macrium program running off the Rescue media. In the program you should have the option to backup or restore. Providing your backup is good (you should verify the backup when you make it), if tyou can boot from the Rescue disk you should be good.
          Windows will not be active.

          Win10 v1903 and v1909 have the same core. The difference is only in v1909 the Feature update is turned ON (not a different core). If you downloaded the ISO from Heidoc labled v1909, you should be good.

          Caution: If you do the install connected to the Internet, it will upgrade you to v2004 in the process. Don’t allow it to update during the install – there will be more than one request.

          1 user thanked author for this post.
      • #2276806 Reply
        Paul T
        AskWoody MVP

        Windows Recovery Environment (WinRE) is a subset of Windows designed to run enough of the hardware to allow you to recover from disaster. The version is irrelevant.

        cheers, Paul

      • #2277155 Reply
        PFC
        Guest

        Spend much time ensuring system images and user data were backed up.

        Took Canada day off.

        Today started V1909 .iso mount Upgrade as per TenForums guide and got exactly same results as I posted when I got here. Kicked out at first 30% complete and thrown back to desktop. Frustrating to say the least.

        What are my options.

        • #2277208 Reply
          PKCano
          Da Boss

          You have a full disk backup and a separate data backup, right?

          Go through this list again:
          + If the User has used any third-party Windows Update blocker in the past, verify that it is off/settings removed. That includes something like GWX Control Panel (puts an upgrade block in the Registry) if it was an upgrade from Win7.
          + Deactivate or uninstall (temporarily if you can) any third-party AV program(s).
          + Verify there is no active Pause or Deferral set (or the upgrade is blocked) in Group Policy if Pro, and Metered connections are turned OFF.
          + Turn OFF Fast Startup (Control Panel\Power options).
          + (New) Look in Device Manager and see if you have any problem hardware. If so, resolve the problem. (In the screenshot, it shows MS replaced a driver – what was it and when?)

          Search the Internet (if you haven’t already) with the make and model to see if anyone is having problems upgrading that particular PC.

          Back up the drivers. I also like to run Belarc Advisor (free) so I have a list of the hardware and software in case I have to go hunting.

          You could try the upgrade using “keep User data ONLY.” You will have to reinstall all the third-party software, a real PITA. That should be done OFFLINE until the install is complete and you have gone through all the Settings (particularly WU).

          The other option is a Clean Install. You have the image to go back to if you have problems and the data backup to restore if it succeeds.

      • #2277213 Reply
        PFC
        AskWoody Plus

        thanks, I’ll follow that trail.

        This problem system is owned by elderly people and  nothing has been altered since

        they got it as a Windows 8/8.1 machine some 5 years ago. It’s as vanila as they come,

        a few photo handling things and the likes. Wouldn’t even know about changing settings.

        I have the identical machine purchased about a month after them.

        On another note, if you notice my profile picture in previous post, I may not have logged

        in, shows me as Guest. No biggy now.

        • This reply was modified 1 day, 9 hours ago by PFC.
        • #2277219 Reply
          PKCano
          Da Boss

          When you don’t log in, sometimes we put your ID under the picture, but we can’t make it your actual ID so it shows “Guest”

          1 user thanked author for this post.
          PFC
      • #2277260 Reply
        PFC
        AskWoody Plus

        Not finished your new shopping list yet but a couple of questions in the meantime.

        1. would there be anything in log files that an experienced person might be able to look at and determine what upgrade was doing and where he failed?
        2.  attached is a Partition snip from Macrium, might there be an area not big enough?
        3. why can’t windows resource protection start the repair service in sfc /scannow?
        • This reply was modified 1 day, 7 hours ago by PFC.
        Attachments:
        • #2277264 Reply
          PKCano
          Da Boss

          Can you go into Control Panel\Administrative Tools\Computer Management\Disk Management and make a screenshot of the disk?
          Maybe that would give a better idea of what the partitions were.

        • #2277390 Reply
          Ascaris
          AskWoody_MVP

          The C: volume (partition) has over a terabyte of room left, way more than Windows would ever need for an update, and that’s the one that would need space to perform the update.  All of the other partitions combined only take up about 10 GB, which is pretty small compared to the 1.81 TB size of the C: volume.

          I would say that whatever is causing the update to fail is probably related to why sfc /scannow does not work.  I’ve not got much experience with Windows 10, so I am not really sure what that might be.

          Were you able to use Reflect to make the system image? At least having that ensures that if something goes wrong (worse than it already has), you can get back to the starting point.  As PKCano wrote, you can boot the rescue USB drive to make sure it works, and you can even perform the backup from there if needed. Most of the space on the drive is empty, so the image should be small.

           

          Group "L" (KDE Neon User Edition 5.19.2).

          1 user thanked author for this post.
          PFC
      • #2277280 Reply
        PFC
        AskWoody Plus

        attached:

        Attachments:
      • #2277392 Reply
        Paul T
        AskWoody MVP

        My W8.1 machine wouldn’t repair using DISM/SFC recently and the only fix was a full re-install. I used an ISO and mounted it in Explorer, then ran setup.exe.

        The painful bit was restoring the data and installing /setting up programs.

        cheers, Paul

        1 user thanked author for this post.
        PFC
      • #2277420 Reply
        PFC
        AskWoody Plus

        You have a full disk backup and a separate data backup, right?

        Go through this list again:
        + If the User has used any third-party Windows Update blocker in the past, verify that it is off/settings removed. That includes something like GWX Control Panel (puts an upgrade block in the Registry) if it was an upgrade from Win7.
        + Deactivate or uninstall (temporarily if you can) any third-party AV program(s).
        + Verify there is no active Pause or Deferral set (or the upgrade is blocked) in Group Policy if Pro, and Metered connections are turned OFF.
        + Turn OFF Fast Startup (Control Panel\Power options).
        + (New) Look in Device Manager and see if you have any problem hardware. If so, resolve the problem. (In the screenshot, it shows MS replaced a driver – what was it and when?)

        Search the Internet (if you haven’t already) with the make and model to see if anyone is having problems upgrading that particular PC.

        Back up the drivers. I also like to run Belarc Advisor (free) so I have a list of the hardware and software in case I have to go hunting.

        You could try the upgrade using “keep User data ONLY.” You will have to reinstall all the third-party software, a real PITA. That should be done OFFLINE until the install is complete and you have gone through all the Settings (particularly WU).

        The other option is a Clean Install. You have the image to go back to if you have problems and the data backup to restore if it succeeds.

        yes I have my backups.

        Re-doing the old list found nothing again. I had turned off Fast Startup, metered connection was OFF, nothing else applied.

        On the show/hide of updates. On restarts, there are 4 KB’s that keep failing and retries always seemed to do them out of chronological order. I tried hiding 3 and doing the oldest only, thinking maybe there were dependencies, no such luck.

        In the new list, Device Manager showed no problems. Not sure what screenshot or driver you were referring to.

        Dell Community has lots of XPS 2720 related issues, most seemed related to upgrading hardware. Other searches were fruitless.

        I will try the upgrade using “keep User data ONLY.”  (hopefully today). You should have referred to it as “pita” because I’m sure the Clean Install is “PITA”. This covid life is preventing me from physically getting to the computer. Remote assistance only goes so far.

         

        • #2277423 Reply
          PKCano
          Da Boss

          I suspect that keeping only the User data may be easier. You can try that first. Otherwise, the instructions below for a clean install.
          If you can update drivers (from your research), do so first. If you have the Service Code for the PC, Dell is really good about having a list of whatever drivers. I have had mostly Dells and it has come in handy.

          The Clean Install may be impossible in your situation, but would probably give the best long-term results.

        • #2277441 Reply
          PKCano
          Da Boss

          In the new list, Device Manager showed no problems. Not sure what screenshot or driver you were referring to.

          The Update History 1 screenshot in your original post, at the bottom, shows WU installed 1 driver.

          1 user thanked author for this post.
          PFC
      • #2277422 Reply
        PKCano
        Da Boss

        Sorry, I got tied up last night as the only gatekeeper here.

        I agree. Neither DISM or sfc will run. The multiple recovery partitions are probably the result of the Win8/Win8.1 ->Win10 upgrade and the Win10 upgrade attempts. All things considered, I think it best to go ahead with the Clean install. Even it’s a pain now, you will have less trouble in the long run.

        What you need before you start:
        + A printout (or .PDF, etc) of the system h/w and s/w (Belarc Advisor, Speccy, or other) in case you need drivers, s/w information.
        + The bootable Macrium Rescue CD/USB – in case you have to restore the image. Verify you can boot from it.
        + The verified full disk image on an external drive.
        + The data backup on an external drive.
        + A bootable Windows Rescue CD/USB – verify you can boot from it. Control Panel\Troubleshooting\Recovery (lower left corner) Create a Recovery drive.
        + The bootable install media.

        + Disconnect from the Internet/network – don’t reconnect until the install is complete and you have gone through all the settings, particularly Windows Update.
        + Boot from the install media. If it asks, keep nothing.
        + When you have taken care of the settings, connect to the internet and let it update v1909. You should probably run wushowhide first and hide any updates you don’t want.

         

      • #2277484 Reply
        PFC
        AskWoody Plus

        well folks, plan B “keep User data ONLY.” has worked, my pita schedule has started.

        First thing I was able to do was get Teamviewer going,  pc owners are happy.

        More to follow.

        1 user thanked author for this post.
        • #2277486 Reply
          PKCano
          Da Boss

          Great!
          At least you won’t have to wrestle with the User data too!

    Viewing 27 reply threads

    Please follow the -Lounge Rules- no personal attacks, no swearing, and politics/religion are relegated to the Rants forum.

    Reply To: Your device is missing important security and quality fixes (in red on WU)

    You can use BBCodes to format your content.
    Your account can't use Advanced BBCodes, they will be stripped before saving.