One of most important and critically used feature in configuration manager 2012 is Software updates .It is always challenging and import task for any sccm administrator to achieve good patch compliance success rate within the given SLA(Service level agreement).Patch compliance success rate is depends mainly on heath of your SCCM clients and some times things may go wrong even though sccm client is healthy (able to receive applications/packages and performing inventory except patches).

• This Installation Failed To Start Because Another Update Installation Is In Progress Sccm Windows 7

Sep 21, 2008  Details: The updates are downloaded to the client and the user is notified by an icon in the system tray that updates are ready to be installed. When the user tries to install the updates, however, they get the message 'This installation failed to start because another update installation is in progress. How to deal with 'another msi installation already in progress' when all others hints didn't work: In the registry, the HKEY_LOCAL_MACHINE SOFTWARE Microsoft Windows CurrentVersion Installer InProgress will point to a file located under the C: Windows Installer directory with an IPI extension.

I have created lot of SSRS reports on software update compliance out of many,one of the widely used report is get the patch compliance status of software update group for specific collection with linked report to get the computers with unknown and required status for troubleshooting (to check when was the last hardware,last software scan,last user ,OS etc).

Coming to the subject line, I have been seeing many questions on the configuration manager forums and social networking sites on software update patching issues .couple of questions on the subject line are like

1) Client getting packages ,applications but not software updates

2) Most of the clients receiving deployed software updates but still few do not get.

3)Clients not detecting software updates

4) clients log says ,patches required but sccm reports says,updates not required( means complaint)

5) Client log says patches not required but sccm report says ,updates required.

6)Software update failing to install ,how to fix

7) I have added patches to the existing software update group/deployment and these newly added patches not deploying successful and many more ….

The solution for the most of the above issues can be identified and solved by analyzing the the client logs before we do in-depth troubleshooting.

In this blog post (SCCM 2012 Troubleshoot software update client issues),I will explain you the basic troubleshooting steps (only on client side ) which will help you to resolve issues on your own by analyzing the logs and take it further afterwards.

Before we jump into the troubleshooting,I would like to illustrate the main components which are involved in deploying software updates.

When you enable software update agent setting in client agent settings,a policy will be created with this setting and stored in SQL Database.So when client initiate machine policy,it communicate with management point which includes the software update client feature installation instructions to be installed or applied on the client. In this process, Client will create local GPO with WSUS Settings by leaving automatic updates .

If you do not disable automatic updates (Via GPO) leaving the door open for the WUA to do things on its own outside the control of ConfigMgr including installing any updates approved directly in WSUS (including new versions of the agent itself which are automatically approved) and rebooting systems which have a pending reboot. Neither of these is desirable in a ConfigMgr managed environment and thus the recommendation for disabling automatic updates. As for the rest of the Windows Update GPO settings, they are meaningless in the context of ConfigMgr so it doesn't really matter what you set those to if you disable automatic updates,more from here

If you choose to create a GPO for WUA, you must configure the Windows Update Server option to point to the active software update point server in the site or location. If there is an existing GPO that was intended to manage standalone WSUS prior to implementing Configuration Manager in your environment, the GPO could override the local GPO created by Configuration Manager, which can cause issues when the software update client tries to communicate with the software update point server.

Software update Components involved are:

1.Windows update agent (WUA)

2.Software update client agent (from SCCM)

3.Windows management instrumentation (WMI)

Note: Make sure you disable the automatic updates via GPO,further reading http://blog.configmgrftw.com/software-updates-management-and-group-policy-for-configmgr-cont/

Windows Update agent(WUA): is responsible for scheduling and initializing scan, detection, download, and install of updates on the client machine. WUA Agent is an implanted service in a Windows service (SVCHOST.exe) and is named Windows Update which you can see from services.msc.

If you disable WUA Agent, software update agent will not function correctly. So it always recommended to not disable this service.

Software update client agent (from SCCM): When you enable the software update agent,it will install 2 actions on the client 1) Software update scan cycle 2) software update deployment Evaluation Cycle

Software Update Scan Schedule :This action perform the software update scan (along with WUA) against the Microsoft update catalog, which occurs every 7 days by default.

software update Deployment evaluation:This action Initiate the software update deployment to start download and install the updates.

Note: when you create software update deployment with deadline for ex: at 4.00 PM ,the actual time that software update client start updating the installation is depends on on setting disable deadline randomization ((located in the Computer Agent client settings)

A delay of up to 2 hours will be applied with deadline time to install required software updates . This randomization prevents all software update clients from starting update installations at the same time (This setting is disabled by default). More info,read https://technet.microsoft.com/en-in/library/gg682067.aspx?f=255&MSPPError=-2147217396 . If you enable this setting,then the deployed software updates will be installed with deadline what you set i.e at 4.00PM (based on Client local time or UTC).

It is also good to know the patch compliance states which are sent as state messages by client to site server .Patch compliance is calculated based on these 4 states.

Installed :This means the software update is applicable and the client already has the update installed.

Not Required: This means the software update is not applicable to the client .

Install Logitech WingMan Formula Force GP USB driver for Windows 7 x64, or download DriverPack Solution software for automatic driver installation and update. I don't care at all about the force feedback but, if it were available, I'd be happy to take it. The target operating system is Windows 7 64-bit. EDIT: Just in case I'm not clear above: I know where the standard driver download sites are and have tried them out. The problem is that Logitech has officially. Formula™ Force GP Support. Questions about your Formula Force GP? We've got the answers, videos, downloads and information you need. Search for articles or select a topic below to get started. Register Your Product. To get the best customer care, product tips and more Getting Started. Our top tips and questions to. Logitech wingman formula force gp driver win7 64 bit. This tutorial was tested on Windows 7 Home Premium 64-bit Swedish. I have used the driver provided by Sly_North and I have modified the INF-file. Description: Logitech WingMan Formula Force GP USB Driver Installer; File Version: 8.5; File Size: 2.33M; Supported OS: Windows 10, Windows 8.1, Windows 7, Windows Vista, Windows XP.

Required: This means the software update is applicable but is not yet installed.Alternatively, it may mean that the software update was installed but the state message has not yet been sent to to the site server.

Unknown :This means either that the client system did not complete the software scan or the site server did not receive the scan status from the client system.

Enough theory , Lets have a look at client troubleshooting steps. (Note: Client logs can be found at %windir%ccmlogs ,if you have not changed the default path).

There are many logs on the client which help you to troubleshoot client issues,but we only look at important logs what is required for software updates.

1. First log to check is locationservices.log—>This log is used to check the correct software update point has been detected by the client.You can also see the management point and distribution point entries from this log.

2. 2nd log to check is wuahander.log –> when the software update scan cycle initiated, Windows update agent (windows update service) will contact WSUS (SUP) for scanning and if is successful,a state message will be sent to site server confirming that,software update scan is completed successfully which can be seen from this log. Get the report to know the software update scan results from here

For some reason,if you don’t see the successfully completed scan message,you should start troubleshooting from this log based on the error .

You can get the error description from CMTrace.exe tool. Copy the error code and use ctrl+L (Error lookup) from your cmtrace.exe ,get the error description .

If WSUS entries are not set correctly or having any issues locating the correct WSUS,you can set WSUS entry manually or script.Further troubleshooting is required .

The registry location for the WSUS entries as follows:

HKLMSOFTWAREPoliciesMicrosoftWindowsWindowsUpdate

HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsWindowsUpdateAU with UseWUSserver =1

3. 3rd log is windowsupdate.log –>If software update scan is successful from wuahandler.log ,you can ignore this log file and directly move to next log (updatesdeployment.log) .If Software update scan is not successful then,you should look at this log for more information. This log Provides information about when the Windows Update Agent connects to the WSUS server and retrieves the software updates for compliance assessment and whether there are updates to the agent components.

Using these 2 logs (wuahandler.log and windowsupdate.log) ,try to fix the errors and make sure ,you see the scanning successful from wuahandler.log

4.4th log to check is UpdatesDeployment.log—> Provides information about the deployment on the client, including software update activation, evaluation, and enforcement. Verbose logging shows additional information about the interaction with the client user interface.

This log shows the number of updates and deployments being targeted to a machine.

From above log snippet ,you see that,the total actionable updates = 0 means ,client do not require any additional updates that you targeted to this PC.For some reason,if the client says non-compliant from your sccm reports,try to refresh compliance state using https://msdn.microsoft.com/en-us/library/cc146437.aspx ,and monitor updatestore.log to see if the state messages (like Successfully raised Resync state message)has been sent to the site server (MP) or not.

you can alternatively use the below PowerShell script ,deploy to your clients monthly twice or once as per the business needs.

$SCCMUpdatesStore = New-Object -ComObject Microsoft.CCM.UpdatesStore
$SCCMUpdatesStore.RefreshServerComplianceState()
New-EventLog -LogName Application -Source SyncStateScript -ErrorAction SilentlyContinue
Write-EventLog -LogName Application -Source SyncStateScript -EventId 555 -EntryType Information -Message 'Sync State ran successfully'

updatedeployment.log also tell you that,what assignments (Update deployments) made with count of updates in each deployment. From above log, Assignment {C37C45D8-E722-4EB7-AC21-014925079560} has total CI = 6 ,means ,the assignment has total 6 patches .

How do you check the deployment name for particular assignment ? well ,you can add Deployment Unique ID column for software update deployment or use below SQL syntax .

SELECT * FROM vSMS_UpdateGroupAssignment
WHERE vSMS_UpdateGroupAssignment.Assignment_UniqueID= '{C37C45D8-E722-4EB7-AC21-014925079560}'

For some reason,if you don’t see the newly added patches installing ( issue no:7) ,you can check updatedeployment.log with particular assignment group and patch count .If the count of patches are less than what it supposed to be,then you may have to refresh the machine policy ,initiate software update scan and wait for a while before client start downloading the policies.

If you see some updates are pending for action (total actionable updates <>0) but not installing,look at CAS.log if your client is able to locate the content on the Distribution point or not.

UpdatesDeployment.log will also tell you ,if enough maintenance window (ServiceWindowManager.log) time available to install the updates.Read the following blogs to know the maintenance window calculation for software update installation.

5.5th log to check check is UpdatesStore.log—>Provides information about the compliance status for the software updates that were assessed during the compliance scan cycle (Status like Missing/Installed).

If you see all things working good, the final log to refer is RebootCoordinator.log—>Provides information about the process for coordinating system restarts on client computers after software update installations.

Below diagram shows the configuration manager Client side software update deployment flowchart captured from configuration manager software update management filed experience guide.

For troubleshooting clients, You can use tools like deployment monitoring tool,configuration manager support center etc.

I normally use the configuration manager support center to troubleshoot the client issues to check if the policy for the deployed software update group received correctly or not based on the PolicyIVersion.

Open the support center (you can download from Microsoft) ,connect to remote machine (need admin rights on remote computer) .

go to policy tab,click on requested and then Load requested policy .you will see list of wmi instances on the left.

click on settings(rootccmpolicymachinerequestedconfig) ,click on CCM_updateCIassignment ,click the policyID ,on the right side,you will see information about the software update group.

check the policy version on the client and on the site server .now you know how to take it further troubleshooting. Good luck.

Couple of common workarounds when troubleshooting software update issues :

1. Stop the windows update service,rename or delete the Software Distribution folder (%windir%softwareDistribution) and start windows update service. This approach provides a fresh start with a new Windows Update data store if the Datastore.edb file is corrupted.

2. Restart the windows update service ,trigger software update scan cycle and software update deployment evaluation cycle.follow the logs.

4.http://eskonr.com/2014/11/sccm-configmgr-2012-software-update-scan-failed-onsearchcomplete-failed-to-end-search-job-error-0xc8000222/

5.http://eskonr.com/2014/11/sccm-configmgr-2012-patch-report-ou-based-compliance-status-per-update-group/

6.http://eskonr.com/2014/10/sccm-configmgr-2012-software-update-scan-error-group-policy-settings-were-overwritten-by-a-higher-authority-error-code-0x87d00692/

7.Refer software update client issues https://technet.microsoft.com/en-in/library/bb932189.aspx

8. Software Update Management Troubleshooting in Configuration Manager https://support.microsoft.com/en-sg/help/10680/software-update-management-troubleshooting-in-configuration-manager

This post will be updating with possible solutions frequently.So keep checking this blog post.

Why I try to install any program I see 'Another installation is in progress. You must complete that installation before continuing this one.' error.

This Installation Failed To Start Because Another Update Installation Is In Progress Sccm Windows 7

Googled the web and found that solution would be to delete HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerInProgress registry key and reboot. That didn't help me unfortunately. When I open 'Services' mmc snapin it shows that 'Windows Installer' service is 'Started', but 'Start/Stop/Pause/Restart' buttons are grayed (the interesting thing is that startup type = 'Manual', so I don't really know how to explain that I already have 2 instances of msiexec.exe in memory and one instance is consuming 50Mb of memory.

Looks like there's a serious issue with my installer service - is there any way to fix it (please do mind - I can't install anything!)

Any help would be greatly appreciated.

kinokijuf

5 Answers

Go grab the Process Explorer from Sysinternals.

You should be able to see the msiexec.exe service running, and if something is in the middle of installing you should see other msiexec.exe children processes. It would be best to allow them to finish, and maybe try to squeak your install in between.

I have seen it before where the .NET Runtime Optimization Service is constantly firing off ngen.exe using the installer service to generate optimized .net assemblies and never allows the installer to use anything else. You can try stopping that service to see if it makes a difference.

GoyuixGoyuix

Have you checked for malware?

The Windows intaller service is normally set to manual and the buttons will be greyed until you change to Automatic.

Two instances of MSIEXEC running seems unusual. do you have AV software running? Is it up to date?

Anything unusual in HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionrun ?

Dave MDave M

I don't know if this will help, but for those using Windows 10, you may not be able to see the msiexec process under processes but under Details. You can navigate there and end it.

How to deal with 'another msi installation already in progress' when all others hints didn't work :

In the registry, the HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerInProgress will point to a file located under the C:WindowsInstaller directory with an IPI extension (something like f2345.ipi).Note that removing the InProgess key even with the Rollback doesn't solve anything and the key will be recreated as it was by msiexec.

Opening this file with notepad or any text editor will show a lot of binary content but at some place you'll find some readable text :..ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ3 0 8 9 9 8 1 9 - 1 9 8 8 7 3 6 7 2 0 { 6 5 C C 0 4 0 7 - 4 C C 0 - 4 A C 7 - 9 5 2 E - 3 E E F C B A 6 0 2 A } 0 [ 1 ]
C : W i n d o w s I n s t a l l e r 6 9 6 f 0 . m s i

The information which is meaningful lies in this file which is the installer for the failed installation (which blocks the other installation).

Launching this installation (double clicking on the file) will lead to some options like install, repair or remove the product.Try using one of them (repair first, as it should solve the problem, then remove) in order to properly end this aborted installation.

This could be malware, as @DaveM states.

Have you tried to look into Task Manager whenever your setup is closed? Sometimes you see still somewhere a 'setup.exe'.. Sometimes you can't get it away. This is called malware; worms; virusses; what not else.

I guess one of the only things you can do is what @DaveM said; or you're just going to reinstall Windows. If this does not even solve your problems; try thinking better; try thinking more secure; try thinking Mac.

Deniz ZoetemanDeniz Zoeteman