Problems Upgrading Windows Server- Solved!

As part of January’s Patch collection, Microsoft released several updates which can cause serious problems on some desktops and servers. It has been reported that KB5009557 (Windows Server 2019) and KB5009555 (Windows Server 2022) are causing failures on domain controllers after updates are applied and a reboot occurs. Virtual machine (VM) instances that run older versions of Windows Server can be upgraded in place as a framework for modernizing your infrastructure and
mitigating risks as the support lifecycle of the versions of Windows Server approaches its end of life. Microsoft has had to recall the January Windows Server cumulative updates due to the fact that they introduced bugs that forced domain controllers to reboot indefinitely, rendered Hyper-V inoperable, and rendered Re FS volumes inaccessible while displaying them as raw file systems.

The Problems

KB5009624 (Windows Server 2012 R2), KB5009557 (Windows Server 2019), and KB5009555 (Windows Server 2022) are the problematic updates. However, installing the updates at this point is not recommended. On Reddit, Windows administrators have discussed the problem, with claims that the issue affects a few third-party VPNs, including SonicWall, Cisco Meraki, and WatchGuard Firewalls.

Steps to resolve them

● Click Start and enter “services.msc” using your keyboard.
● The search results for “services.msc” ought should appear. Launch it.
● All Windows services on your system will be listed in a new window that will appear.
● look up “Windows Update”
● Stop the “Windows Update” by selecting it from the context menu.

The Windows Update temporary cache folder will now be cleaned:
● Hold down the Windows key while simultaneously pressing the “R” key.
● A little new window will show up.
● In this new box, enter percent windir percent Software Distribution Data Store, and then click OK.
● By doing this, Windows Explorer will launch in the appropriate place.
● Delete this folder’s entire contents. (Tip: To select all files and directories, use Ctrl + A.)
We’ll now restart the Windows Update Service:
● Return to the Windows Services menu.
● Search for Windows Update.
● Start by selecting it with a right-click.

By Command

To remove the latest cumulative update, administrators can run the commands below. (From a command prompt elevated). Currently, there’s a method to resolve the issue is to remove the patches using the command prompt and the following commands:
● Windows Server 2012 R2: wusa /uninstall /kb:KB5009624
● Windows Server 2019: wusa /uninstall /kb:KB5009557
● Windows Server 2022: wusa /uninstall /kb:KB5009555
● Windows 10: wusa /uninstall /kb:5009543
● Windows 11: wusa /uninstall /kb:5009566

Conclusion

As a result of this bug with the patch, Windows administrators were faced with a major dilemma as it resolved a potentially worm able issue on Windows 11. It is even possible to remotely execute arbitrary code, without interacting much with the user, by exploiting a flaw in the HTTP Protocol Stack. As a result of the reported issues, Microsoft pulled the server updates from Windows Updates, but this was a temporary solution, and the updates are now available again. It is recommended that your company wait until Microsoft releases corrective patches before deploying these updates if it uses patch management.