Preliminary troubleshooting steps include.
- Check for any GPO.
- Check for WSUS or SCCM entries on the Registry HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate
- Ensure the Internet connectivity.
- Try to install the SSU manually.
- Check the TLS settings, disable it and enable using IISCrypto.exe.
- Execute DISM Scan.
- Try Resetting Windows Update components manually using the link here.
If the above troubleshooting doesn’t fix the issue then proceed with the below steps.
Analyse the DISM log saved at the location “C:\Windows\Logs” and check for the below error or similar to the below error.
CGetFeaturesCommandObject internal execution failed – DismGetFeaturesExInternal(hr:0x800f0805)
If you found such an error in the DISM log, that means DISM service on the impacted server is facing operational constraints related to tasks such as updating, listing, and verifying Windows updates.
It has been determined that the root cause of this issue may be a missing “Component Based Servicing” registry value.
Kindly compare the registry value at the registry location “HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ComponentBasedServicing\” of the problematic server with a working Windows 2016 server.
Image from an affected server
Image from a working Server
This explains why the server can not display Roles or Features as well as not finding any updates.
In the event disparities are detected, Please back up the missing registry value from the working server to the problematic server, restart and try to update the server.
If you encounter permission when restoring the registry value, kindly change the owner of the registry value and assign appropriate permissions.
