PENDING SCCM Windows 11 patching error 0x80D02002

[dacheampong]

installing 2024-12 Cumulative update for windows 11 23H2 for x64-based Systems (KB5048685) failing with error "0x80D02002(-2133843966)".

i need help to resolve this issue

 

[Prajwal Desai]

Error = 0x80d02002 may have to do with corrupted Windows Update components or incompatible software or drivers in your system. Try resetting Windows Update components manually on the machine and see if that resolves the issue.

 

[dacheampong]

Error = 0x80d02002 may have to do with corrupted Windows Update components or incompatible software or drivers in your system. Try resetting Windows Update components manually on the machine and see if that resolves the issue.

Thank you for the response. I have tried these (
net stop wuauserv
net stop cryptSvc
net stop bits
net stop msiserver
ren C:\Windows\SoftwareDistribution SoftwareDistribution.3
ren C:\Windows\System32\catroot2 catroot2.2
net start wuauserv
net start cryptSvc
net start bits
net start msiserver
) to reset the components but issues still persist. Is there any other option to reset the components please share so i will try that option.

 

[Prajwal Desai]

On how many devices are you seeing this issue?. I don't think the configuration manager is causing this, as the error code is mostly related to the Windows device.

 

[dacheampong]

On how many devices are you seeing this issue?. I don't think the configuration manager is causing this, as the error code is mostly related to the Windows device.

am seeing this issue on 8 windows11 system (Laptop) that are part of the Test Collection i pushed the 2024-12 cumulative update Patch

 

[Harshit Pandey]

as @Prajwal Desai mentioned, this issue is a local issue and i think you must pick one system and fix that issue. Did you run a sfc scan anytime?

 

[dacheampong]

as @Prajwal Desai mentioned, this issue is a local issue and i think you must pick one system and fix that issue. Did you run a sfc scan anytime?

i picked on system and run the blow which include "sfc scan" still no changes

SC config trustedinstaller start=auto
net stop bits
net stop wuauserv
net stop msiserver
net stop cryptsvc
net stop appidsvc
Ren %Systemroot%\SoftwareDistribution SoftwareDistribution.old
Ren %Systemroot%\System32\catroot2 catroot2.old
regsvr32.exe /s atl.dll
regsvr32.exe /s urlmon.dll
regsvr32.exe /s mshtml.dll
netsh winsock reset
netsh winsock reset proxy
rundll32.exe pnpclean.dll,RunDLL_PnpClean /DRIVERS /MAXCLEAN
dism /Online /Cleanup-image /ScanHealth
dism /Online /Cleanup-image /CheckHealth
dism /Online /Cleanup-image /RestoreHealth
dism /Online /Cleanup-image /StartComponentCleanup
Sfc /ScanNow
net start bits
net start wuauserv
net start msiserver
net start cryptsvc
net start appidsvc

 

[Harshit Pandey]

Ok, have you configured any caching or Delivery Optimization in MECM.

 

[dacheampong]

Ok, have you configured any caching or Delivery Optimization in MECM.

I have not configure any Delivery Optimization

 

[dacheampong]

I have not configure any Delivery Optimization

I have Client Cache Settings: Configure BranchCache set to Yes

 

[Phantomm]

Any update on this issue?

 

[abnrangerx67]

I am experiencing this same issue on over 50 devices. Oddly the security updates installed fine, it is the cumulative updates that are failing with the same error.

 

[smurray]

I was able to get this resolved by doing the following.

1. On your SCCM server, go to IIS Manager > Sites > Default Web Site > SMS_DP_SMSPKG$
2. Under the IIS section, double-click authentication
3. Select Anonymous Authentication and Enable
4. Feel free to do this on SMS_DP_SMSSIG$, NOCERT_SMS_DP_SMSSIG$, & NOCERT_SMS_DP_SMSPKG$
5. Click back to Default Web Site & in the actions pain, Restart the Website


On impacted client:
1. Clear ccmcache: Remove-Item -Recurse -Force C:\Windows\ccmcache\*
2. Restart client services: Restart-Service ccmexec
3. Restart Delivery Optimization services: Restart-Service DoSvc


Retry update.

I saw immediate results on the client when downloading updates after these changes.

 

[abnrangerx67]

I was able to get this resolved by doing the following.

1. On your SCCM server, go to IIS Manager > Sites > Default Web Site > SMS_DP_SMSPKG$
2. Under the IIS section, double-click authentication
3. Select Anonymous Authentication and Enable
4. Feel free to do this on SMS_DP_SMSSIG$, NOCERT_SMS_DP_SMSSIG$, & NOCERT_SMS_DP_SMSPKG$
5. Click back to Default Web Site & in the actions pain, Restart the Website


On impacted client:
1. Clear ccmcache: Remove-Item -Recurse -Force C:\Windows\ccmcache\*
2. Restart client services: Restart-Service ccmexec
3. Restart Delivery Optimization services: Restart-Service DoSvc


Retry update.

I saw immediate results on the client when downloading updates after these changes.

I thought it was not advisable to manually remove content from ccmcache using the method you suggested, but rather it should be done using the configuration manager from the client. However, if the script route is the choice, then it should be done with something like this:
## Initialize the CCM resource manager com object
[__comobject]$CCMComObject = New-Object -ComObject 'UIResource.UIResourceMgr'
## Get the CacheElementIDs to delete
$CacheInfo = $CCMComObject.GetCacheInfo().GetCacheElements()
## Remove cache items
ForEach ($CacheItem in $CacheInfo) {
$null = $CCMComObject.GetCacheInfo().DeleteCacheElement([string]$($CacheItem.CacheElementID))
}
Now I am no expert so take what I say with a grain, of salt, but this has worked for me and I run it from MECM.