Windows 7 Home Premium 32bit SP1 Update is failing, error 0x800f0900

[waleslie]

Okay. Looks like it went well...

C:\Windows\system32>ICACLS C:\Windows
C:\Windows NT SERVICE\TrustedInstallerF)
NT SERVICE\TrustedInstallerCI)(IO)(F)
NT AUTHORITY\SYSTEMM)
NT AUTHORITY\SYSTEMOI)(CI)(IO)(F)
BUILTIN\AdministratorsM)
BUILTIN\AdministratorsOI)(CI)(IO)(F)
BUILTIN\UsersRX)
BUILTIN\UsersOI)(CI)(IO)(GR,GE)
CREATOR OWNEROI)(CI)(IO)(F)

Successfully processed 1 files; Failed processing 0 files

C:\Windows\system32>ICACLS C:\Windows\winsxs
C:\Windows\winsxs BUILTIN\AdministratorsOI)(CI)(F)
NT SERVICE\TrustedInstallerOI)(CI)(F)
NT AUTHORITY\SYSTEMOI)(CI)(F)
BUILTIN\UsersOI)(CI)(F)

Successfully processed 1 files; Failed processing 0 files

C:\Windows\system32>ICACLS C:\Windows\winsxs\x86_volume.inf_31bf3856ad364e35_6.1
.7600.17122_none_15cad1ba5d3abbe6
C:\Windows\winsxs\x86_volume.inf_31bf3856ad364e35_6.1.7600.17122_none_15cad1ba5d
3abbe6 BUILTIN\AdministratorsI)(OI)(CI)(F)

NT SERVICE\TrustedInstallerI)(OI)(CI)(F)

NT AUTHORITY\SYSTEMI)(OI)(CI)(F)

BUILTIN\UsersI)(OI)(CI)(F)

Successfully processed 1 files; Failed processing 0 files

C:\Windows\system32>ICACLS C:\Windows\winsxs\x86_avc.inf_31bf3856ad364e35_6.1.76
00.16385_none_ac2fa38af371acee
C:\Windows\winsxs\x86_avc.inf_31bf3856ad364e35_6.1.7600.16385_none_ac2fa38af371a
cee BUILTIN\AdministratorsI)(OI)(CI)(F)

NT SERVICE\TrustedInstallerI)(OI)(CI)(F)

NT AUTHORITY\SYSTEMI)(OI)(CI)(F)

BUILTIN\UsersI)(OI)(CI)(F)

Successfully processed 1 files; Failed processing 0 files

C:\Windows\system32>


LOL. I like that all of the ": ("s became frowny faces.

 

[NoelDP]

That's normal - it's the forums software trying to be helpful
You could almost get away with the current permissions - but we'd better reset the ownership and reduce the access a little.

Open an Elevated Command Prompt, and run the following commands.

ICACLS C:\Windows\winsxs /remove Users
ICACLS C:\Windows\winsxs /grant UsersOI)(CI)(RX)
ICACLS C:\Windows\winsxs /remove "NT AUTHORITY\SYSTEM"
ICACLS C:\Windows\winsxs /grant "NT AUTHORITY\SYSTEM"OI)(CI)(RX)
ICACLS C:\Windows\winsxs /remove Administrators
ICACLS C:\Windows\winsxs /grant AdministratorsOI)(CI)(RX)
ICACLS C:\Windows\Winsxs /setowner "NT SERVICE\TrustedInstaller" /T /C /Q
ICACLS C:\Windows\Winsxs

Post the results, and then reboot. (note that the /setowner one could take a fair while to complete!)

then run the earlier commands (from post #20) again so we can check the results.

 

[waleslie]

I watched for a bit, and the first several commands appeared successful.

The ICACLS C:\Windows\Winsxs /setowner "NT SERVICE\TrustedInstaller" /T /C /Q command failed with Access is denied errors on every file. The results of the earlier commands scrolled back too far. Here's the end of it:

C:\Windows\Winsxs\x86_xnacc.inf_31bf3856ad364e35_6.1.7600.16385_none_b381dfe1d4d
a7da9\xnacc.inf: Access is denied.
C:\Windows\Winsxs\x86_xnacc.inf_31bf3856ad364e35_6.1.7600.16385_none_b381dfe1d4d
a7da9\xnacc.sys: Access is denied.
Successfully processed 0 files; Failed processing 61605 files

C:\Windows\system32>ICACLS C:\Windows\Winsxs
C:\Windows\Winsxs NT AUTHORITY\SYSTEMOI)(CI)(RX)
BUILTIN\UsersOI)(CI)(RX)
NT SERVICE\TrustedInstallerOI)(CI)(F)

Successfully processed 1 files; Failed processing 0 files


Shall I still reboot and run the commands from post #20? Or do we need to fix what happened here first?

 

[NoelDP]

We definitely need to fix this - there's something amiss, as the winsxs folder has lost permissions for the Administrators!

Please run the following commands in an Elevated Command Prompt...

TAKEOWN /F C:\Windows\WinSXS /A
ICACLS C:\Windows\Winsxs /grant AdministratorsOI)(CI)(RX)
ICACLS C:\Windows\Winsxs /setowner "NT SERVICE\TrustedInstaller"
ICACLS C:\Windows\Winsxs

post the results before rebooting.

 

[waleslie]

Here are the results from that. Reboot now? What next?

C:\Windows\system32>TAKEOWN /F C:\Windows\WinSXS /A

SUCCESS: The file (or folder): "C:\Windows\WinSXS" now owned by the administrato
rs group.

C:\Windows\system32>ICACLS C:\Windows\Winsxs /grant AdministratorsOI)(CI)(RX)
processed file: C:\Windows\Winsxs
Successfully processed 1 files; Failed processing 0 files

C:\Windows\system32>ICACLS C:\Windows\Winsxs /setowner "NT SERVICE\TrustedInstal
ler"
C:\Windows\Winsxs: Access is denied.
Successfully processed 0 files; Failed processing 1 files

C:\Windows\system32>ICACLS C:\Windows\Winsxs
C:\Windows\Winsxs BUILTIN\AdministratorsOI)(CI)(RX)
NT AUTHORITY\SYSTEMOI)(CI)(RX)
BUILTIN\UsersOI)(CI)(RX)
NT SERVICE\TrustedInstallerOI)(CI)(F)

Successfully processed 1 files; Failed processing 0 files

 

[NoelDP]

Yep - you can reboot now

I'm not sure why the setowner command failed again - try running that one again after the reboot.

 

[waleslie]

Still comes back with Access Denied.

 

[NoelDP]

Locate the folder in Explorer and right-click on it - select Properties.

click on the Security tab then the Advanced button then the Owner tab - who is the owner now?

 

[waleslie]

The current owner of C:\Windows\winsxs is "Administrators (PCSE-Server\Administrators)"

 

[NoelDP]

Aaarrgghh!! - I just realised what the problem is - I'm restricting permissions before passing over ownership!

Let's try it this way instead....

TAKEOWN /F C:\Windows\WinSXS /A
ICACLS C:\Windows\Winsxs /grant AdministratorsOI)(CI)(F)
ICACLS C:\Windows\Winsxs /setowner "NT SERVICE\TrustedInstaller" /C /T /Q
ICACLS C:\Windows\Winsxs /grant:r AdministratorsOI)(CI)(RX)
ICACLS C:\Windows\Winsxs

post the results (assuming it doesn't scroll off the page!), then reboot, and run the following commands...

ICACLS C:\Windows\winsxs
ICACLS C:\Windows\winsxs\x86_volume.inf_31bf3856ad364e35_6.1.7600.17122_none_15cad1ba5d3abbe6
ICACLS C:\Windows\winsxs\x86_avc.inf_31bf3856ad364e35_6.1.7600.16385_none_ac2fa38af371acee


post those results, and we'll see where we are.

 

[waleslie]

The setowner command is coming back Access Denied.

 

[NoelDP]

OK try this variant then - it may be attempting to go too deep....

TAKEOWN /F C:\Windows\WinSXS /A
ICACLS C:\Windows\Winsxs /grant AdministratorsOI)(CI)(F)
ICACLS C:\Windows\Winsxs /setowner "NT SERVICE\TrustedInstaller"
ICACLS C:\Windows\Winsxs /grant:r AdministratorsOI)(CI)(RX)
ICACLS C:\Windows\Winsxs

 

[waleslie]

So far so good...

C:\Windows\system32>TAKEOWN /F C:\Windows\WinSXS /A

SUCCESS: The file (or folder): "C:\Windows\WinSXS" now owned by the administrato
rs group.

C:\Windows\system32>ICACLS C:\Windows\Winsxs /grant AdministratorsOI)(CI)(F)
processed file: C:\Windows\Winsxs
Successfully processed 1 files; Failed processing 0 files

C:\Windows\system32>ICACLS C:\Windows\Winsxs /setowner "NT SERVICE\TrustedInstal
ler"
processed file: C:\Windows\Winsxs
Successfully processed 1 files; Failed processing 0 files

C:\Windows\system32>ICACLS C:\Windows\Winsxs /grant:r AdministratorsOI)(CI)(RX
)
processed file: C:\Windows\Winsxs
Successfully processed 1 files; Failed processing 0 files

C:\Windows\system32>ICACLS C:\Windows\Winsxs
C:\Windows\Winsxs BUILTIN\AdministratorsOI)(CI)(RX)
NT AUTHORITY\SYSTEMOI)(CI)(RX)
BUILTIN\UsersOI)(CI)(RX)
NT SERVICE\TrustedInstallerOI)(CI)(F)

Successfully processed 1 files; Failed processing 0 files


Then I rebooted and ran the next list of commands you gave me in post #30:

C:\Windows\system32>ICACLS C:\Windows\winsxs
C:\Windows\winsxs BUILTIN\AdministratorsOI)(CI)(RX)
NT AUTHORITY\SYSTEMOI)(CI)(RX)
BUILTIN\UsersOI)(CI)(RX)
NT SERVICE\TrustedInstallerOI)(CI)(F)

Successfully processed 1 files; Failed processing 0 files

C:\Windows\system32>ICACLS C:\Windows\winsxs\x86_volume.inf_31bf3856ad364e35_6.1
.7600.17122_none_15cad1ba5d3abbe6
C:\Windows\winsxs\x86_volume.inf_31bf3856ad364e35_6.1.7600.17122_none_15cad1ba5d
3abbe6 NT AUTHORITY\SYSTEMI)(OI)(CI)(RX)

BUILTIN\UsersI)(OI)(CI)(RX)

NT SERVICE\TrustedInstallerI)(OI)(CI)(F)

Successfully processed 1 files; Failed processing 0 files

C:\Windows\system32>ICACLS C:\Windows\winsxs\x86_avc.inf_31bf3856ad364e35_6.1.76
00.16385_none_ac2fa38af371acee
C:\Windows\winsxs\x86_avc.inf_31bf3856ad364e35_6.1.7600.16385_none_ac2fa38af371a
cee NT AUTHORITY\SYSTEMI)(OI)(CI)(RX)

BUILTIN\UsersI)(OI)(CI)(RX)

NT SERVICE\TrustedInstallerI)(OI)(CI)(F)

Successfully processed 1 files; Failed processing 0 files


Looks like so far, so good. What next?

 

[NoelDP]

That's got all the permissions back where they should be - at last! (I think!)

Now - where were we on the real problem?

 

[waleslie]

Here are the latest log files.

sfc / scannow looks to have gone well:

C:\Windows\system32>sfc /scannow

Beginning system scan. This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection did not find any integrity violations.



Looks like CheckSUR still has a few complaints. So... what's next?

 

[NoelDP]

OK - here's the errors with CheckSUR...

Checking Package Watchlist
(f) CBS Watchlist Package Missing 0x80070002 Microsoft-Windows-EmbeddedCore-Package~31bf3856ad364e35~x86~~0.0.0.0 Package_for_KB980218~31bf3856ad364e35~x86~~6.1.1.2 Package registry presence failed, possibly an orphaned package on package watchlist
(f) CBS Watchlist Package Missing 0x80070002 Microsoft-Windows-Foundation-Package~31bf3856ad364e35~x86~~0.0.0.0 Package_for_KB980218~31bf3856ad364e35~x86~~6.1.1.2 Package registry presence failed, possibly an orphaned package on package watchlist
Checking Component Watchlist
Checking Packages
(f) CBS Registry Error 0x80070002 Package_2_for_KB977178~31bf3856ad364e35~x86~~6.1.2.0  failed to get CurrentState
(f) CBS Registry Error 0x80070002 Package_2_for_KB977178~31bf3856ad364e35~x86~~6.1.2.0  failed to get Visibility
(f) CBS Registry Error 0x80070002 Package_2_for_KB980218~31bf3856ad364e35~x86~~6.1.1.2  failed to get Visibility

I need to have a look at your COMPONENTS registry hive

Please copy the C:\Windows\System32\config\COMPONENTS file (no extension) to your desktop and then compress it - upload the compressed file to your favoured fileshare site (preferably Dropbox or SkyDrive) and post a link.

 

[waleslie]

Here it is.

 

[NoelDP]

At first glance, that file looks very small - it's only about 26MB as opposed to the more normal 40-45MB.

It'll take me a while to check through it - if you haven't heard by Friday, Shout!

 

[waleslie]

What's in that file?

 

[NoelDP]

It's one of the registry hives - the one which (roughly speaking) keeps a record of all installed Windows software variants and status.

Looking at the results above, and at your hive, it seems that you have very few updates installed - but you do have/had one hotfix installed (KB977178) which appears perhaps to be getting in the way


Please attempt uninstalling this update - then run CheckSUR and SFC again and post the new logs.