To all who read this thread:
To troubleshoot the failure of installing Windows updates, it would better start with checking \windows\logs\cbs\cbs.log file.
- Note the file is protected, and you need admin privilege to access it. To do so, right click "command prompt" icon, select "run as admin", and run "copy \windows\logs\cbs\cbs.log %USERPROFILE%\Documents".
Different scenarios as unveiled by cbs.log file are:
- Some people installed a ramdisk program, and set TEMP environment variable to point to the ramdisk. Look like during updating / reboot cycle, the ramdisk program is not started yet, and thus if updating need to access TEMP folder, it will fail. The solution
is to change TEMP to point to its original location, e.g. %LOCALAPPDATA%\temp, or %windir%\temp
* cbs.log: I've not seen it yet. But people do confirm it solves their problem.
* cbs.log: 2012-11-26 19:16:09, Error CSI 00000003 (F) Logged @2012/11/27:00:16:09.328 : [ml:138{69},l:136{68}]"Install (Online) : WMI repository data recovery Failed = -2147024770"
- Some reports wdf01000.sys cannot be moved due to sharing violation. It later was confirmed to be related to anti-virus programs or maybe the system was indeed attacked by virus.
* cbs.log: 2012-11-25 20:24:09, Error CSI 00000006 (F) Error: ResolvePendingTransactions called after poqexec failure (call 1). Status = STATUS_SHARING_VIOLATION, Operation = HardLinkFile, DiagString = [l:342{171}]"\SystemRoot\WinSxS\x86_microsoft-windows-wdf-kernellibrary_31bf3856ad364e35_6.1.7600.17013_none_767300c37f08da42\Wdf01000.sys,
??\C:\Windows\System32\drivers\Wdf01000.sys"
Also note that none of the above problems are directly related nor caused by the update KB2685811 itself; the KB2685811 is merely a victim of inconsistent system state.
This posting is provided "AS IS" with no warranties, and confers no rights.