Can't apply KB835732 on various Win2k systems

From: Aaron (anonymous_at_discussions.microsoft.com)
Date: 05/05/04


Date: Wed, 5 May 2004 04:26:03 -0700

On various systems (all Win2k) the KB835732 patch does not apply other than in Safe Mode. When trying to install, technicians get the error 'lsass.exe cannot be terminated.' obviously it can't be stopped manually. The %windir%\kb835732.log is rather undecipherable, but I do notice lots of errors (I'll attach a section of one log at the bottom of this post). The System event log gives a Windows File Protection event for sp3res.dll and then auto-uninstalls the patch (see full events below). I can't find any similarities between the systems - some are SP3, some SP4. Some are one version of our standard image, some are another. Some have special software loaded, some don't.

Has anyone encountered this as well, or have any idea how to resolve it? Rebooting into Safe Mode seems to work, but it's a lot of extra work.

[from System event log]

Event Type: Information
Event Source: Windows File Protection
Event Category: None
Event ID: 64021
Date: 5/4/2004
Time: 10:36:40 AM
User: N/A
Computer: (removed)
Description:
The system file c:\winnt\system32\sp3res.dll could not be copied into the DLL cache. The specific error code is 0x00000020 [The process cannot access the file because it is being used by another process.
]. This file is necessary to maintain system stability.

Event Type: Information
Event Source: NtServicePack
Event Category: None
Event ID: 4382
Date: 5/4/2004
Time: 10:36:45 AM
User: (domain user w/ local admin access)
Computer: (removed)
Description:
Windows 2000 KB835732 was removed from your computer, and the previous Windows 2000 configuration was restored.

[from %windir%\kb835732.log - white space & "***" lines removed to save space]
================== Update.exe started at 5/ 4/2004 at 10:34:42 ==================
Service Pack started with following command line:
DoInstallation: CleanPFR failed: 0x2
SetAltOsLoaderPath: No section uses DirId 65701; done.
IncludeDirectoryIdFromInfSection: No DirId found for: DontRemoveOnUninst.DirId
FetchSourceURL: SetupOpenInfFile Failed to open file: c:\9568cc827f370578407edb7f06e5\update\update.url
DoInstallation: FetchSourceURL for c:\9568cc827f370578407edb7f06e5\update\update.inf Failed
LoadFileQueues: SetupGetSourceFileLocation for halacpi.dll failed: 0xe0000102
BuildCabinetManifest:SetupOpenInfFile failed with error INVALID_HANDLE_VALUE
AnalyzePhaseZero used 0 ticks
CreateUninstall = 1,Directory = C:\WINNT\$NtUninstallKB835732$
AnalyzePhaseOne: used 7691 ticks
AnalyzeComponents: Hotpatch analysis disabled; skipping.
AnalyzeComponents: Hotpatching is disabled.
AnalyzePhaseTwo used 100 ticks
AnalyzePhaseThree used 0 ticks
AnalyzePhaseFive used 0 ticks
AnalyzePhaseSix used 30 ticks
AnalyzeComponents used 7821 ticks
Downloading 0 files
bPatchMode = FALSE
Inventory complete: ReturnStatus=0, 7951 ticks
Num Ticks for invent : 7951
Allocation size of drive C: is 512 bytes, free space = 11345235456 bytes
LoadFileQueues: SetupGetSourceFileLocation for halacpi.dll failed: 0xe0000102
Drive C: free 10819MB req: 51MB w/uninstall 83MB
Num Ticks for download : 851
CabinetBuild complete
Num Ticks for Cabinet build : 0
Starting process: C:\WINNT\system32\secedit.exe /configure /cfg C:\WINNT\inf\hfsecper.inf /db C:\WINNT\security\templates\hfsecper.sdb /log C:\WINNT\security\logs\hfsecper.log
 Return Code = 1
LoadFileQueues: SetupGetSourceFileLocation for halacpi.dll failed: 0xe0000102
Num Ticks for Backup : 3996
Num Ticks for creating uninst inf : 2233
Registering Uninstall Program for -> KB835732, KB835732 , 0x0
LoadFileQueues: SetupGetSourceFileLocation for halacpi.dll failed: 0xe0000102
SfcTurnOff: System is not Win2k < SP2; Not turning off SFC.
SfcTurnOff: SFC was not turned off; using MakeSfcFileException.
AtomicReplaceFile: Calling HpReplaceSystemModule( C:\WINNT\system32\ADVAPI32.DLL, HFX18.tmp, _000064_.tmp, FALSE ).
AtomicReplaceFile: HpReplaceSystemModule failed; status=0xc0000003, location=684.
DoNoDelayReplace: Atomic replace support not implemented; disabling.
Copied file: C:\WINNT\system32\ADVAPI32.DLL
Message displayed to the user: The file C:\WINNT\system32\LSASS.EXE is open or in use by another application.
Close all other applications and then click Retry.
User Input: CANCEL
Message displayed to the user: Are you sure you want to cancel?
User Input: YES
DoInstllation: SetupCommitFileQueue for FileQueue failed: 0x4c7
VerifySize: Unable to verify size: Source = NULL: c:\winnt\oem12.cat
KB835732 Setup canceled.
Select 'OK' to undo the changes that have been made, or select 'Cancel' to quit. If you select 'Cancel', your system will be left in a partially updated state and may not work correctly.
Message displayed to the user: KB835732 Setup canceled.
Select 'OK' to undo the changes that have been made, or select 'Cancel' to quit. If you select 'Cancel', your system will be left in a partially updated state and may not work correctly.
User Input: OK
Starting process: C:\WINNT\$NtUninstallKB835732$\spuninst\spuninst.exe /~ -u -z
Dirty Uninstall was successful
[KB835732.log]
2004/5/4 10:42:39.669
Exe = UPDATE.EXE, Version = 5.4.1.0



Relevant Pages

  • Cant apply KB835732 on various Win2k systems
    ... >AnalyzePhaseOne: used 7691 ticks ... >AnalyzeComponents: Hotpatching is disabled. ... >User Input: CANCEL ...
    (microsoft.public.win2000.security)
  • Re: sp2 install fails
    ... I'm still investigating online, but in case you have any insight here's a ... 325.328: AnalyzeComponents: Hotpatch analysis disabled; ... 327.741: AnalyzePhaseTwo used 1662 ticks ... 1209.299: User Input: OK ...
    (microsoft.public.windowsxp.setup_deployment)
  • Re: SP1 KB891193 Error
    ... > 10.906: AnalyzePhaseZero used 0 ticks ... > 11.265: AnalyzeComponents: Hotpatching is disabled. ... The Windows Installer Service could not be accessed. ... > 836.187: User Input: OK ...
    (microsoft.public.windows.server.sbs)
  • KB891193 - Fatal error during installation
    ... 22.328: AnalyzePhaseZero used 0 ticks ... 23.016: AnalyzeComponents: Hotpatch analysis disabled; ... 875.594: Message displayed to the user: Fatal error during installation. ... 875.594: User Input: OK ...
    (microsoft.public.windows.server.sbs)
  • install SP4 failure
    ... Service Pack started with following command line: ... AnalyzePhaseZero used 0 ticks ... User Input: CANCEL ... Are you sure you want to cancel? ...
    (microsoft.public.win2000.setup_upgrade)