Windows 10 22h2 security update [KB5034441] fails to install with code: 0x80070643

Don't worry this is easily solvable. Just follow the instructions and the update will install.

...

Just take your time and follow the instructions step by step. Copy paste is recommended to avoid typos.

Oh sure... it's easily solvable on a singe computer. When you have ~6,000 domain-joined workstations that are exhibiting the same problem, it becomes a little less easily solvable.

I found a complication that probably exists for others.

One of my systems has two recovery partitions, and Windows keeps defaulting to one I can't resize without a lot of partition manipulation.

I found a process that should allow me to change the recovery partition assignment, but I'm too tired of fighting this for now to go through it.

I don't know where the other partition could have come from. The computer was built with a brand new SSD and a regular Windows 10 ISO.

The partition layout is this in diskpart:

1. Reserved (128MB)
2. Recovery (529MB)
3. EFI (100MB)
4. OS (475GB)
5. Recovery (1125MB) *after resizing it

Partition 2 keeps coming up as the recovery partition and I think this is causing the issue on this computer. Multiple recovery partitions are apparently common.

To fix this problem I first went to Computer Management and made OS (C:) 2 gigabytes smaller. I then went to https://support.microsoft.com/en-us/topic/kb5028997-instructions-to-manually-resize-your-partition-to-install-the-winre-update-400faa27-9343-461c-ada9-24c8229763bf and followed the instructions. The run shrink desired command did not work, so I skipped this step and went to the next step. After completing the instructions, the Win RE partition was then 2 gigabytes larger. The update now runs without error.

Don't worry this is easily solvable. Just follow the instructions and the update will install.

The update page warns that failure will happen if your recovery partition isn't large enough.

Right click on Start Button->Disk Management and you can see your current recovery partition size. Aim for a size of 1024 MB (1 GB) which works. Calculate 1024 - yourSize = sizeChange. In the instructions they use a sizeChange of 250. Replace that 250 by the number you just calculated. ex: if your current recovery partition size is 521. Calculate 1024 - 521 = 503. Use shrinkdesired=503 minimum=503 when they say shrinkdesired=250 minimum=250

1. The update page mentions this page which explains how to enlarge your recovery partition
2. Once your recovery partition is enlarged go back and install the update

Caveat:

On one of my 6 PC's the instructions in step 2 failed with error: "Windows RE image not found" (L. Heilig on page 7 mentions this rare error).

1b) Don't worry this also is easily solvable. Just follow these instructions and the update will install.

2b) Follow Method 3 in the page given in step 1b above (method 3 is easy and it works)

3b) Rebooting before installing the update was required in my case for the caveat case only

Just take your time and follow the instructions step by step. Copy paste is recommended to avoid typos.