2020-02 Updates KB4524244 Locks Up My Computer and Fails Install

Hi X. I'm Greg, an installation specialist, 10 years Windows MVP, and Volunteer Moderator here to help you.

I'll give you everything possible for fixing failed Windows Updates, so that at least something will work. Even if you've tried a step, please do it over in sequence:

Some Updates will sort themselves out in a few days so I'd wait to see. If not or they are bothering you then here are steps you can take:

1) Run the Windows Update Troubleshooter from Windows Settings > Update & Security > Troubleshoot.

2) There is a new guided walk-through from Microsoft for repairing Windows Update that leads up to resetting components if necessary: https://support.microsoft.com/en-us/help/10164/.... Try running that first.

3) Type Services in Search box, run Services app as Administrator, open Windows Update Service and Stop it.

Press “Windows (flag) key + R,” copy and paste C:\Windows\SoftwareDistribution\ press the Enter button.
This folder has all the files related to Windows updates.
Open the “Download” folder, select all the files and delete all the files.

Restart Windows Update service in Services app by opening it and choosing Start.

4) If that fails try manually resetting Windows Update Service:

Open administrative Command Prompt and type following commands one-by-one followed by Enter key.

net stop wuauserv
net stop cryptSvc
net stop bits
net stop msiserver
Ren C:\Windows\SoftwareDistribution SoftwareDistribution.old
Ren C:\Windows\System32\catroot2 Catroot2.old
net start wuauserv
net start cryptSvc
net start bits
net start msiserver

Close Command Prompt and see if Windows Updates works then

5 You can also install the Updates manually that fail to install, which are logged at Settings > Update & Security > Windows Update > Installed Update History, and then search for those to download and install from this Catalog: http://test.catalog.update.microsoft.com/v7/sit...

6) If they continue to fail and interfere, then you can block them using one of these methods: https://www.howtogeek.com/224471/how-to-prevent...

7) If problems with Updates have become chronic and especially if you have other performance problems, go over this checklist to make sure the install is set up correctly, optimized for best performance, and any needed repairs get done: http://answers.microsoft.com/en-us/windows/wiki...

Start with Step 4 to turn off Startup freeloaders which can conflict and cause issues, then Step 7 to check for infection the most thorough way, then step 10 to check for damaged System Files, and also Step 16 to test a new Local Admin account. Then continue with the other steps to go over your install most thoroughly.

8) If you have an older version or if nothing else works then while I am here to help you I would manually upgrade to the latest version 1909 by opening the Media Creation Tool from this link: http://windows.microsoft.com/en-us/windows-10/m..., choose Download Tool Now, then open the tool and choose Upgrade This PC Now. This saves your files, apps and most settings in place, is the most stable method to change versions, brings your Updates current, resolves most problems.

If any problems report back the verbatim error and number, then continue with these steps for overcoming Version Upgrade problems: http://answers.microsoft.com/en-us/windows/wiki...

_____________________

Good news! There are major changes in Version 1903 giving back control over Updates to the consumer. Microsoft has heard us at the highest level who announced this here:
https://blogs.windows.com/windowsexperience/201...

_____________________

I hope this helps. Feel free to ask back any questions and keep me posted. If you'll wait to rate whether my post helped you, I will keep working with you until it's resolved.

________________________________________________________

Standard Disclaimer: There are links to non-Microsoft websites. The pages appear to be providing accurate, safe information. Watch out for ads on the sites that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the sites before you decide to download and install it.

Thanks Greg,

I will work on this for the next couple of days and report back.

Just an FYI....I am on 1909.  Looking at the KB, it looks like it affects UEFI secure boots, a little suspect since I have that system so locked down.

I will work through your list and see where that gets me, if I find it is something different I will update on what I find.

Hang tight and give me a couple of days to let things settle

Glad to help.

Keep me posted on your progress as I will be here to help until the case is resolved.

I received the Patch Tuesday releases today.  KB4532693, KB4537759 and KB4538674 dropped in the first wave and all installed successfully.  On a subsequent "Check for Updates"  KB4524244 downloaded and installed but on the reboot, it rebooted the first time but froze hard on the second re-boot with Step 2 information and a frozen spinner on my screen, no keyboard or any access.  After about 15 mins I finally forced the system down.  On the reboot, my Secure Boot flagged me that the keys were corrupted.  I was able to get those repaired and reboot into the system.  I rebooted a couple more times but no updates attempted to install.  On a third "Check for updates, the same (KB4524244) update attempted to download but freezes the system at 94% on the download.  Again freezes hard requiring a hard re-set.  I tried flushing the Software Distribution cache but get the same results.

FYI:  I am running Windows defender with VBS (Credential Guard and Hypervisor enforced Code Integrity on an HP EliteDesk 705 G4 MT with a AMD Ryzen 5 PRO 2400G with Radeon Vega Graphics.  I also have a similar set up running on an HP laptop (Intel i5), but the update installed fine on it.

Help

Same problem here on several machines, and they are all running on AMD Ryzen cpus. Installing (trying to install) KB4524244 results in the machine freezing and after recycling the power there's an uefi error (see the image).

This has happened on several machine (both HP laptops and desktops), all running on AMD Ryzen cpus, and all with default bios/uefi settings with the newest bios installed. Windows 10 1809, 1903 or 1909 on all.

 Also DELL server "HOSTS" with Server 2019 install having issues. The kb article references all W10 nothing about Server 2019 yet its the same KB even if you manually download the Server 2019 patch from the MS catalog site. Installs fine on VM's & given it's EUFI references I suspect there is fault in how it is communicating to the hardware itself.

 One thing is clear, don't waste your time trying to find "fault" in your local system, I think MS has to pull this & get it right.

I'm having the same problem on Apple Bootcamp.

KB4524244 - Error 0x800f0922

Tried to manually install it without success.

In our environment, this is happening on all HP AMD based machines with Sure Start Secure Boot Key Protection enabled.  If we turn that off before the initial attempt to install the KB then the KB will install.  After restart we can renable the Sure Start protection.  Each machine we've done this to also has to be rebooted two more times after the patch install for the NIC to be come active properly again.  During the time the NIC isn't working properly an "ipconfig /all" command won't show the NIC adapters, but they appear in Device Manager and in Control Panel/Network Connections.   On PCs where the Sure Start protections are in force at the time of patch install we get the same error Mikael Sillman
 did.  Sure Start then resets the keys and the system will boot up.  Subsequent attempts to install the patch fail.  Most often the error code is 0x80242FFF.   

We are also having this issue on all of our HP EliteBook 745 G5's with AMD Ryzen APU. Sure Start is enabled on all of them. We can confirm that Lenovo based AMD Ryzen laptops are not having the same issue with KB4524244 with Secure Boot enabled. We have pulled this KB from SCCM. We have sent the issue to Microsoft Platforms DSE and they are looking at the issue internally. 

More of the same here.  EliteDesk 705 with Ryzen CPU, Sure Start, etc.

I've read Ryzen CPU's have covered some security vulnerabilities better than Intel, and perhaps that is actually causing this problem, where an Intel will let this update do what it's doing, the Ryzen CPU does not?

Anyway, I'm blocking this update centrally for now.  What a pain.  I've tried the steps outlined here, all of them, and nothing is correcting the problem, so I'm just moving on.

Same problem here with my main desktop PC being an HP with SureStart and Ryzen Pro etc. Unfortunately, despite attempting to belatedly switch off the sure start protections in the BIOS, I am now in the position where shortly after pin code login the machine hangs badly with power still applied, with no monitor feed and need a hard power cycle to even get back into BIOS and attempt another reboot cycle.

 If anyone has worked out a workaround please let me know asap; I really could have done without this headache after the week I've had.

 *update* and now the PC power light comes on, but the machine seems pretty dead otherwise (fan on, integrated nic  light on, but no storage/nvme ssd activity lights or monitor signal). FFS