Windows update (KB5034441) Error (0x80070643)

And many of us are sitting here with company-issued devices on which we dare not fiddle with partition sizes. All we can do is file a ticket with our IT helpdesks asking how to proceed, and otherwise simply wait for a Microsoft fix that is approved by our IT department. I can imagine Microsoft doing a fix that just makes the machine forget about and quit asking for the faulty update, makes sure other updates can happen normally, and on we go. No, I'm not holding my breath on that, but I do have little option but to wait for a fix.

"2024-01 Security Update for Windows 10 Version 22H2 for x64-based Systems (KB5034441)"

is A PRETTY SERIOUS update since it's a SECURITY UPDATE!

SO, this issue has been existing for some-time now. It seems to me that MICROSOFT should provide feedback to its users as to the time-line for the REMEDY... Ya THINK?

The next problem was added to my system

a new problem because of this defective update:

I cannot disable the default antivirus of Windows 10. When I press the button, It will be enabled again very quickly and automatically

It worked. Follow the original guide. OS does not mean recovery. Directions not clear. You shrink from the PRIMARY drive. I did 1000 instead of 250. Then proceed as normal. It just requires a bit of reading. I REPEAT, YOU DO NOT RESIZE YOUR RECOVERY. YOU TAKE THAT FROM YOUR PRIMARY.

Once you do that, THEN you select your recovery drive and continue to follow instructions. Once done, and I mean at the end of everything(if you didn't end up there you did it wrong or didn't read) then proceed here.

https://support.microsoft.com/en-us/topic/kb5034957-updating-the-winre-partition-on-deployed-devices-to-address-security-vulnerabilities-in-cve-2024-20666-0190331b-1ca3-42d8-8a55-7fc406910c10
Go to powershell, run as admin and run the entire script for your set up starting from LITERALLY, Param (

Let it run all the way till it stops and requires a DL. Get the latest here for your rig.

https://www.catalog.update.microsoft.com/Search.aspx?q=Safe%20OS
I used the top for mine.

Copy the file link, as in the entire line, mine was like

Downloads\windows10.0-kb5034232-x64_ff4651e9e031bad04f7fa645dc3dee1fe1435f38.cab

Put that into the powershell. Then it should complete on its own. Restart PC. Proceed to install update.

You're welcome.

That's not encouraging to hear! How much disk did you allocate? I over-allocated due to the disk already having a lot of unallocated space, i.e. I didn't need to shrink anything, just remove the previous recovery partition, thankfully the last partition, and then create fresh but larger.

I am casting my memory back some weeks now, but I seem to recall there was a 250Mb recovery partition with next to no usage. The advice is to resize by 250Mb, but from memory, given all the unallocated space, I created a new partition of 1Gb and it all worked. And it also used something absurd like 50Mb after the update was done.

I could check on the other machine on what space finally was used ... certainly AFTER the update the used recovery partition space was considerably less that the ORIGINAL partition size