How to fix can not update the 2025-10 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5070882).

Question

How to fix can not update the 2025-10 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5070882).

Ping Guo 0

HI team,
Host Name:TOKBZ192155019

OS Name: Microsoft Windows Server 2016 Datacenter

OS Version:10.0.14393 N/A Build 14393

OS Manufacturer:Microsoft Corporation

OS Configuration:Standalone Server

OS Build Type:Multiprocessor Free

Registered Owner: cloud

Registered Organization: IBM

Product ID: 00376-40000-00000-AA947

System Manufacturer: VMware, Inc.

System Model: VMware Virtual Platform

System Type: x64-based PC

Processor(s): 4 Processor(s) Installed.

BIOS Version: Phoenix Technologies LTD 6.00, 11/12/2020

We can not update the 2025-10 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5070882). Error code: 0X800f0922. Then we mount ISO source (we do not have the latest new ) and reinstall OS with the customer's application and configuration, but it still cannot be installed. We tried to manually install it using the following command. It doesn't work.

Command: net stop wuauserv; net stop bits net; stop cryptSvc; net stop msiserver;
ren C:\Windows\SoftwareDistribution SoftwareDistribution.old; ren C:\Windows\System32\catroot2 Catroot2.old; DISM /Online /Cleanup-Image /CheckHealtt; DISM /Online /Cleanup-Image /RestoreHealth; sfc /scannow

And we reinstall OS with the customer's application and configuration again. This time, We waited for the automatic update, but it lasted for 20 hours and got stuck in the download interface. As a result, we stop the automatic update. Simultaneously Windows Defender could not start.
Attached is the automatic update log :image (26).png WindowsUpdate.log

Please help solve the problem. (Not considering a complete OS reload system as it may result in the loss of client application files)

1 answer

Your answer

Answer 1

Quinnie Quoc 7,550 Independent Advisor

Hello Ping Guo,

Thank you for the detailed information. The error code 0x800f0922 during installation of KB5070882 typically indicates a failure in the advanced installer phase, often caused by a corrupted scheduled task or IIS configuration issues.

Here are recommended steps to resolve the issue:

Reset IIS configuration using wsusutil.exe usecustomwebsite false and verify that required IIS roles (e.g., ASP.NET, Static Content) are enabled.
Check CBS.log for entries related to Microsoft-OneCore-SecureBootEncodeUEFI-Task, which may indicate a failed scheduled task component.
Run DISM and SFC again, ensuring the ISO used matches the exact build version (14393).
Temporarily disable Windows Defender and retry the update, as Defender startup failure may be blocking update components.
If the update still fails, consider installing KB5070882 via offline servicing using DISM with the .msu file.

If this resolves the issue, feel free to click “Accept Answer” so others can benefit too. Let me know if you’d like help reviewing CBS logs or preparing an offline update package.

Best regards,

QQ

Ping Guo 0 Reputation points

2025-11-11T10:40:38.6233333+00:00

Hi team, the problem now is not the error code, but after reinstalling the application with data by mounting ISO, the automatic update has been stuck in the download. The attachment is the log

Ping Guo 0

OS: Windows Server 2016 Datacenter
Issue: Windows Update cannot update automatically, stuck at download 95%

Attempted Solutions:

Phase 1: Original Server

Manually installed the update package. After installation and reboot, the update status showed "Fail."

Executed the following commands, but they failed:

sfc /scannow

  `DISM /Online /Cleanup-Image /RestoreHealth`
  
     `DISM /Online /Cleanup-Image /RestoreHealth /Source:WIM /LimitAccess`

Phase 2: In-Place Upgrade with Data Retention Using Windows 2016 ISO

After the reinstallation, executed Windows Update automatically. The October update failed, stuck at the download process.

Manually installed the update. After installation and reboot, the server showed "Fail."

Executed the following commands successfully, then rebooted. Automatic update still failed, stuck at the download process:

sfc /scannow

  `DISM /Online /Cleanup-Image /CheckHealth`
  
     `DISM /Online /Cleanup-Image /ScanHealth`
     
        `DISM /Online /Cleanup-Image /RestoreHealth`
        
        Executed commands to reset all update-related components. After successful execution and reboot, automatic update still failed, stuck at the download process:
        
        text

net stop wuauserv  
net stop bits  
net stop cryptSvc  
net stop msiserver  
net stop appidsvc  
net stop sppsvc  
Remove-Item "C:\Windows\SoftwareDistribution" -Recurse -Force -ErrorAction SilentlyContinue  
Remove-Item "C:\Windows\System32\catroot2" -Recurse -Force -ErrorAction SilentlyContinue  
sc.exe sdset bits "D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)"  
sc.exe sdset wuauserv "D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)"  
regsvr32.exe /s atl.dll  
regsvr32.exe /s urlmon.dll  
regsvr32.exe /s mshtml.dll  
regsvr32.exe /s shdocvw.dll  
regsvr32.exe /s browseui.dll  
regsvr32.exe /s jscript.dll  
regsvr32.exe /s vbscript.dll  
regsvr32.exe /s scrrun.dll  
regsvr32.exe /s msxml.dll  
regsvr32.exe /s msxml3.dll  
regsvr32.exe /s msxml6.dll  
regsvr32.exe /s actxprxy.dll  
regsvr32.exe /s softpub.dll  
regsvr32.exe /s wintrust.dll  
regsvr32.exe /s dssenh.dll  
regsvr32.exe /s rsaenh.dll  
regsvr32.exe /s gpkcsp.dll  
regsvr32.exe /s sccbase.dll  
regsvr32.exe /s slbcsp.dll  
regsvr32.exe /s cryptdlg.dll  
regsvr32.exe /s oleaut32.dll  
regsvr32.exe /s ole32.dll  
regsvr32.exe /s shell32.dll  
regsvr32.exe /s initpki.dll  
regsvr32.exe /s wuapi.dll  
regsvr32.exe /s wuaueng.dll  
regsvr32.exe /s wuaueng1.dll  
regsvr32.exe /s wucltui.dll  
regsvr32.exe /s wups.dll  
regsvr32.exe /s wups2.dll  
regsvr32.exe /s wuweb.dll  
regsvr32.exe /s qmgr.dll  
regsvr32.exe /s qmgrprxy.dll  
regsvr32.exe /s wucltux.dll  
regsvr32.exe /s muweb.dll  
regsvr32.exe /s wuwebv.dll  
net start cryptSvc  
net start bits  
net start msiserver  
net start wuauserv  
net start appidsvc  
net start sppsvc

Canceled the last automatic update, executed the following commands, rebooted, and performed a manual update. After installation and reboot, the server showed "Fail":

text

Set-Service -Name wuauserv -StartupType Disabled  
net stop wuauserv  
net stop bits  
net stop cryptSvc  
Remove-Item "C:\Windows\SoftwareDistribution" -Recurse -Force -ErrorAction SilentlyContinue  
Remove-Item "C:\Windows\System32\catroot2" -Recurse -Force -ErrorAction SilentlyContinue

Executed the reset component commands again, along with system repair and reboot. After reboot, manually installed the update, then rebooted the server. The server showed "Fail":

text

net stop wuauserv  
net stop bits  
net stop cryptSvc  
net stop msiserver  
ren C:\Windows\SoftwareDistribution SoftwareDistribution.old  
ren C:\Windows\System32\catroot2 Catroot2.old  
DISM /Online /Cleanup-Image /CheckHealth  
DISM /Online /Cleanup-Image /RestoreHealth

Performed another in-place upgrade with data retention using the Windows 2016 ISO. Attempted automatic and manual updates again, but both failed.

Phase 3: In-Place Upgrade with Data Retention Using Windows 2019 ISO

After the upgrade and reboot, the process was stuck at 52%.

The upgrade failed. After reboot, the server remained on Windows 2016.

Executed the following steps, then attempted the upgrade again. After reboot, the process was still stuck at 52%:

In System Configuration, hid all Microsoft services and disabled them.

  Executed:
  
  text

DISM /Online /Cleanup-Image /CheckHealth  
DISM /Online /Cleanup-Image /RestoreHealth  
sfc /scannow  
chkdsk C: /f

Current Status: The machine is now back to the reinstalled Windows 2016 version, and the Windows Update for November is still stuck at download 95%.

OS: Windows Server 2016 Datacenter
Issue: Windows Update cannot update automatically, stuck at download 95%, error code: 0X800f0922

Attempted Solutions:

Phase 1: Original Server

Manually installed the update package. After installation and reboot, the update status showed "Fail."

Executed the following commands, but they failed:

sfc /scannow

  `DISM /Online /Cleanup-Image /RestoreHealth`
  
     `DISM /Online /Cleanup-Image /RestoreHealth /Source:WIM /LimitAccess`

Phase 2: In-Place Upgrade with Data Retention Using Windows 2016 ISO

After the reinstallation, executed Windows Update automatically. The October update failed, stuck at the download process.

Manually installed the update. After installation and reboot, the server showed "Fail."

Executed the following commands successfully, then rebooted. Automatic update still failed, stuck at the download process:

sfc /scannow

  `DISM /Online /Cleanup-Image /CheckHealth`
  
     `DISM /Online /Cleanup-Image /ScanHealth`
     
        `DISM /Online /Cleanup-Image /RestoreHealth`
        
        Executed  commands to reset all update-related components. After successful  execution and reboot, automatic update still failed, stuck at the  download process:
        
        text

net stop wuauserv  
net stop bits  
net stop cryptSvc  
net stop msiserver  
net stop appidsvc  
net stop sppsvc  
Remove-Item "C:\Windows\SoftwareDistribution" -Recurse -Force -ErrorAction SilentlyContinue  
Remove-Item "C:\Windows\System32\catroot2" -Recurse -Force -ErrorAction SilentlyContinue  
sc.exe sdset bits "D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)"  
sc.exe sdset wuauserv "D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)"  
regsvr32.exe /s atl.dll  
regsvr32.exe /s urlmon.dll  
regsvr32.exe /s mshtml.dll  
regsvr32.exe /s shdocvw.dll  
regsvr32.exe /s browseui.dll  
regsvr32.exe /s jscript.dll  
regsvr32.exe /s vbscript.dll  
regsvr32.exe /s scrrun.dll  
regsvr32.exe /s msxml.dll  
regsvr32.exe /s msxml3.dll  
regsvr32.exe /s msxml6.dll  
regsvr32.exe /s actxprxy.dll  
regsvr32.exe /s softpub.dll  
regsvr32.exe /s wintrust.dll  
regsvr32.exe /s dssenh.dll  
regsvr32.exe /s rsaenh.dll  
regsvr32.exe /s gpkcsp.dll  
regsvr32.exe /s sccbase.dll  
regsvr32.exe /s slbcsp.dll  
regsvr32.exe /s cryptdlg.dll  
regsvr32.exe /s oleaut32.dll  
regsvr32.exe /s ole32.dll  
regsvr32.exe /s shell32.dll  
regsvr32.exe /s initpki.dll  
regsvr32.exe /s wuapi.dll  
regsvr32.exe /s wuaueng.dll  
regsvr32.exe /s wuaueng1.dll  
regsvr32.exe /s wucltui.dll  
regsvr32.exe /s wups.dll  
regsvr32.exe /s wups2.dll  
regsvr32.exe /s wuweb.dll  
regsvr32.exe /s qmgr.dll  
regsvr32.exe /s qmgrprxy.dll  
regsvr32.exe /s wucltux.dll  
regsvr32.exe /s muweb.dll  
regsvr32.exe /s wuwebv.dll  
net start cryptSvc  
net start bits  
net start msiserver  
net start wuauserv  
net start appidsvc  
net start sppsvc

Canceled the last automatic update, executed the following commands, rebooted, and performed a manual update. After installation and reboot, the server showed "Fail":

text

Set-Service -Name wuauserv -StartupType Disabled  
net stop wuauserv  
net stop bits  
net stop cryptSvc  
Remove-Item "C:\Windows\SoftwareDistribution" -Recurse -Force -ErrorAction SilentlyContinue  
Remove-Item "C:\Windows\System32\catroot2" -Recurse -Force -ErrorAction SilentlyContinue

Executed the reset component commands again, along with system repair and reboot. After reboot, manually installed the update, then rebooted the server. The server showed "Fail":

text

net stop wuauserv  
net stop bits  
net stop cryptSvc  
net stop msiserver  
ren C:\Windows\SoftwareDistribution SoftwareDistribution.old  
ren C:\Windows\System32\catroot2 Catroot2.old  
DISM /Online /Cleanup-Image /CheckHealth  
DISM /Online /Cleanup-Image /RestoreHealth

Performed another in-place upgrade with data retention using the Windows 2016 ISO. Attempted automatic and manual updates again, but both failed.

Phase 3: In-Place Upgrade with Data Retention Using Windows 2019 ISO

After the upgrade and reboot, the process was stuck at 52%.

The upgrade failed. After reboot, the server remained on Windows 2016.

Executed the following steps, then attempted the upgrade again. After reboot, the process was still stuck at 52%:

In System Configuration, hid all Microsoft services and disabled them.

  Executed:
  
  text

DISM /Online /Cleanup-Image /CheckHealth  
DISM /Online /Cleanup-Image /RestoreHealth  
sfc /scannow  
chkdsk C: /f

Current Status: The server is now back to the reinstalled Windows 2016 version, and the Windows Update for November is still stuck at download 95%.
And the current system is not activated, and Windows Defender cannot start

Ping Guo 0 Reputation points

2025-11-20T11:14:57.91+00:00

Here is a partial cbs.log of the initial update failure
2025-11-06 23:34:22, Info CSI 00003e6e Error - Overlap: Duplicate ownership for directory \??\C:\WINDOWS\Inf\inetinfo\0409 in component Microsoft-Windows-IIS-Metabase.Resources, version 10.0.14393.0, arch amd64, culture [l:5]'en-US', nonSxS, pkt {l:8 b:31bf3856ad364e35} 2025-11-06 23:34:23, Info CSI 00003e6f@2025/11/6:14:34:23.06 Primitive installers committed for repair 2025-11-06 23:34:23, Info CSI 00003e70 Error - Overlap: Duplicate ownership for directory \??\C:\WINDOWS\Inf\W3SVC\0409 in component Microsoft-Windows-IIS-W3SVC.Resources, version 10.0.14393.0, arch amd64, culture [l:5]'en-US', nonSxS, pkt {l:8 b:31bf3856ad364e35} 2025-11-06 23:34:23, Info CSI 00003e71@2025/11/6:14:34:23.037 Primitive installers committed for repair 2025-11-06 23:34:23, Info CSI 00003e72 [DIRSD OWNER WARNING] Directory [l:59 ml:60]'\??\C:\ProgramData\Microsoft\Event Viewer\Views\ServerRoles' is not owned but specifies SDDL in component Microsoft-Windows-IIS-WebServer-Events, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} 2025-11-06 23:34:23, Info CSI 00003e73 Error - Overlap: Duplicate ownership for directory \??\C:\ProgramData\Microsoft\Event Viewer\Views\ServerRoles in component Microsoft-Windows-IIS-WebServer-Events, version 10.0.14393.0, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} 2025-11-06 23:34:23, Info CSI 00003e8b Error - Overlap: Duplicate ownership for directory \??\C:\WINDOWS\Downloaded Program Files in component Microsoft-Windows-IE-ObjectControlViewer, version 11.0.14393.2007, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} 2025-11-06 23:34:24, Info CSI 00003ea5 [DIRSD OWNER WARNING] Directory [l:22 ml:23]'\??\C:\inetpub\custerr' is not owned but specifies SDDL in component Microsoft-Windows-IIS-HttpErrorsBinaries, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} 025-11-06 23:34:28, Info CSI 00003f06 Error - Overlap: Duplicate ownership for directory \??\C:\WINDOWS\System32\IME\IMEKR\DICTS in component Microsoft-Windows-IME-Korean-Core, version 10.0.14393.0, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} 2025-11-06 23:34:28, Info CSI 00003f07 Error - Overlap: Duplicate ownership for directory \??\C:\WINDOWS\IME\IMEKR in component Microsoft-Windows-IME-Korean-Core, version 10.0.14393.0, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} 2025-11-06 23:34:28, Info CSI 00003f08 Error - Overlap: Duplicate ownership for directory \??\C:\WINDOWS\IME\IMEKR\HELP in component Microsoft-Windows-IME-Korean-Core, version 10.0.14393.0, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} 2025-11-06 23:34:28, Info CSI 00003f09 Error - Overlap: Duplicate ownership for directory \??\C:\WINDOWS\IME\IMEKR\DICTS in component Microsoft-Windows-IME-Korean-Core, version 10.0.14393.0, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35}

Share via

How to fix can not update the 2025-10 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5070882).

1 answer

Your answer