Server 2022 - 21H2 - 0x80070643

[Alastairb25]

Hi,

 

What workarounds have people used for this?

 

This seems plausible, our RE is Disabled

https://www.checkyourlogs.net/fix-kb5034439-failed-to-install-0x80070643-january-2024-cve-2024-20666/

 

Having to do this on a number of production VM would be very time consuming along with risky in terms of having workable backups to hand

Wondering if any other fixes?

 

Thanks,

Alastair

[Steve21]

Option 1, manual fix

Option 2, Script it if you're feeling confident (Examples from MS: https://support.microsoft.com/en-gb/topic/kb5025175-updating-the-winre-partition-on-deployed-devices-to-address-security-vulnerabilities-in-cve-2022-41099-ba6621fa-5a9f-48f1-9ca3-e13eb56fb589)

Option 3, disable it

 

Basically that's MS's response to it

 

Steve

[Alastairb25]

Sadly I suspected this might be the answer

 

A while ago I started building servers with the C drive as just the OS

The original idea being worst case, say with Home folders on a File server we could build a new box

Attach the storage volume

Recreate shares

[Steve21]

Yep, where possible we always try to keep anything large on a separate drive/s

 

Only things we normally install to C as basic OS and maybe if it's a simple sync tool VM etc (Also helps with any issues like storage maxing out won't take out the VM )

 

Steve

[mavhc]

There's no problem if you don't have a RE, or bitlocker, just ignore it