Windows update error code 80070BC9 and 9C59

[Specialist123]

Second machine that I am having issues getting to update. I keep running into error code 80070BC9 and 9C59. I know 9C59 is IE11 fail to install but anything I try won't let me get past it even the standalone installer and trying to remove IE9. I ran SURT and sfc there was no change. CBS log attached. Any help on this headache would be greatly appreciated!

 

[NoelDP]

There are no problems in either SFC or CheckSUR - but the background CBS data shows that a number of updates are in a pending state, and access to the registry is apparently being blocked.
From the look of the Filters.log you have both Symantec and Bit9 security programs running - it may be that this combination is blocking the updates.
I know nothing about Bit9 beyond what a quick look at their home page tells me, but a combination of Symantec with almost anything else in the form of an AV is pretty much guaranteed to cause problems.

What versions of which security programs are currently installed? what others have been installed ?

 

[Specialist123]

Bit9 version 7.2 and Symantec Endpoint Protection version 12.0 are installed on this machine. I'll attempt to disable Endpoint temporarily while I install updates and see if that does the trick. If Bit9 was blocking the install it would have flagged unapproved, so my hunch is if anything is blocking it would be Endpoint.

 

[NoelDP]

Where Symantec is involved - particularly if it's Norton-branded - it's usually my first choice of culprit.
I know absolutely nothing about Bit9 - I never even heard of it until this thread, so there's no way I can comment on that.

 

[Chetan Savade]

Hi,

I am Chetan Savade from Symantec Technical Support team.

SEP 12.0 is end of life, however could you confirm the exact SEP version? Also, let me know if you disabled/remove SEP does it get updated?

If possible share the screenshot.

Best Regards,
Chetan

 

[Specialist123]

Noel,
Still getting blocked by something any ideas?

 

[NoelDP]

Try this...

This is the command to run when booted offline at a recovery command
prompt


dism.exe /image:C:\ /cleanup-image /revertpendingactions


This is supposed to revert all pended updates, however if System Restore is
not working, then there may be other issues as well

(note - you may have to change the drive letter to the one appropriate for your machine - which could be C: D: E: or F: )