windows 10 SSU does not install

Question

when i attempt to install December 2024 Windows 10 22h2 SSU KB5046823, it reports success in under a minute and prompts for reboot. Post reboot the patch is not installed

Error: 0x87D00324(-2016410844)

KB5046823 MSU was downloaded directly from MS site

Windows 10

This is in an Enterprise env where over 98% PCs have patched fine. We have about 20 PCs with this error. After it failed by MECM, we tried manually .msu file, and dism

The last CU that installed fine was May-2024

Tried:

chkdisk, SFC /checknow and dism /scanhealth are clean

Reboot

SU Reset (usual ren c:\win\SD folder, catroot2, service restarts etc.)

GPO reset

dism /online /add-package /packagepath:cabfilepath shows 5% progress and suddenly reports success under a minute and prompts for reboot. Post reboot the patch is not installed

Safe mode with NW does not allow the patch install

Crowdstrike has the latest version. We are unable to disable this by Security Team

windowsupdate.log does not contain the term "FATAL"

Event logs do not log anything useful

PFA cbs.log (with EnableLog=1)

PFA cbs.logcbs.log

Answer 1

Hello

Thank you for posting in Q&A forum.

The error code 0x87D00324 typically indicates a problem with the update process.

Here are some steps you can try:

1. Unzip the MSU File:

• Use a compression tool to unzip the MSU update package.

• Extract the .cab file from the package.

• Open Command Prompt as an administrator and run:

dism /online /add-package /packagepath:<path_to_cab_file>

2. Reset Windows Update Components:

• Open Command Prompt as an administrator and run the following commands one by one:

net stop wuauserv

net stop cryptSvc

net stop bits

net stop msiserver

ren C:\Windows\SoftwareDistribution SoftwareDistribution.old

ren C:\Windows\System32\catroot2 Catroot2.old

net start wuauserv

net start cryptSvc

net start bits

net start msiserver

3. Check for Corrupted System Files:

• Run the System File Checker tool:

sfc /scann

• Run the Deployment Imaging Service and Management Tool (DISM):

dism /online /cleanup-image /restorehealth

4. Review CBS Logs:

• Check the CBS log file located at C:\Windows\Logs\CBS\CBS.log for any specific errors that might provide more insight.

5. Use the Windows Update Troubleshooter:

• Go to Settings > Update & Security > Troubleshoot > Additional troubleshooters.

• Select Windows Update and run the troubleshooter.

I hope the information above is helpful.

If you have any questions or concerns, please feel free to let us know.

Best Regards,

Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.