Windows 10 22h2 security update [KB5034441] fails to install with code: 0x80070643

First, let me say that I too feel that Microsoft should fix this, especially since this issue has been out there for months. Many people will shy away from running scripts or running utilities at a command prompt. That said, I was able to figure out what my specific issue was that seemed to be preventing me from getting past this installation failure, and I did this all within about 20 minutes or so with minimal technical background required. I'll assume some folks reading this are not technical, so I'll be excruciatingly detailed in my post below. The only skills needed are being able to change a Windows Settings, doing a cut and paste to create your own local script, and running the script by typing its name.

Here's a summary of what I did, followed by more detailed explanations:

Summary

• Checked BitLocker status. If enabled, turn it off.
• Reboot (whether you turned BitLocker off or not.)
• Create a PowerShell script following the directions noted below.
• Open a command prompt, running as administrator, and type in three commands needed in order to execute this script.
• Reboot.
• Check again for updates (or click "Retry" if that button is showing.)
• Re-enable BitLocker as appropriate.

Detailed Instructions

Thanks to Richard UK South (microsoft.com) who gave me my first clue as to why I couldn't install this update. Richard's 4/8/24 post said that "Windows 10 doesn’t support a WinRE partition on a bit locked disk." That seemed strange to me, since I had BitLocker enabled yet running the command "reagentc /info" showed that WinRE was enabled. So I turned BitLocker off, waited for it to finish (decrypting my hard drive), then rebooted the system.

Next, I followed the directions for running the PowerShell script located here. For those not comfortable with how to do this, here are the steps I used:

• In the highlighted section that lists the lines of the script, you will see the word "Copy" in the upper right-hand corner of this section. Click on that and now the entire script has been copied to your clipboard for pasting.
• Use a simple file editor, such as Wordpad (type Wordpad.exe in the search box next to the Windows logo on your screen), to create an empty file in which you will paste the text of the script. To do this, start the editor (Wordpad, as an example) and then click on the "Paste" button shown below the word "File" at the top-left corner of your editor window. This will fill the file with the instructions from the script that you copied. Now just save this file with a name that has a ".ps1" extension, such as resizewinre.ps1. Make note of the directory that you save this file in (for example, in the root directory, aka **c:**)

With the script created on your local hard drive, you'll have three simple commands to run after you open up a command window. First you'll create a new directory that the script will use to back things up to. Next you have to enable this script to execute (won't get into it here, but usually a script needs to be "signed" by a trusted publisher in order to run.) Finally, you'll execute the script. To do these three things, do the following:

• If the account your logged in as is not an administrator of your computer, then open a PowerShell window as an administrator (Press Windows+S to open Windows Search, and then type "PowerShell" and select Run as administrator from the right pane.)
• Type the following to create a backup directory that the script will use (and hit the Enter Key):

mkdir c:\winrebackup (or whatever name you want to give the directory)

• Type the following (and hit the Enter key): ****

Set-ExecutionPolicy -ExecutionPolicy Unrestricted -Scope Process

• If you are not in the directory where you created the script, type in the full path name. For example, if you saved it to the root directory, type the following (and hit the Enter key):

c:\resizewinre.ps1

• The script will ask you to enter the name of the backup directory you just created (c:\winrebackup in the example I used above), so enter that in when prompted.

The script will now finish executing and should completed successfully. Reboot your computer, then check for updates again and see if KB5034441 installs successfully this time. Reenable BitLocker as appropriate.

Good luck!

Jack

Thanks man ill try this before I go to sleep

Thank you. This solution of using the Media Creation Tool and reinstalling Windows 10 while opting to keep my files and apps worked perfectly for me also; and it only took a couple of hours. Although I did not immediately attempt to install KB503441, the constant failure attempts to install it, did stop. I allowed several other updates to install. Then, after several days, I clicked on the 'Check for Updates' in the Update and Security section of Windows 10 settings; update KB503441 appeared and began to install. Finally. I saw 'Successfully installed.'

Note: I did notice that after Windows 10 reinstalled, my search box had been enhanced. It is now illustrated with an interesting topic of the day including links to those topics, 'recent web searches' and 'trending searches' similar to how windows 11 works.

Hi Hahn

Please advice. I ended here. Please see the attached screenshot.

No entiendo como MS no da ninguna respuesta/solucion oficial para TODOS los usuarios.