Shulou(Shulou.com)06/02 Report--

[[][(October 23, 2019 15:53:38 Add this bracketed content

If the system is still normal, but to patch, then for the August patch, you must first install the KB4474419 patch, restart, and then install the August monthly patch after normal, and no problems will occur. My servers 2008 have completed all patches released as of October 23, 2019 according to this step.

If it has failed to boot properly, the problem has been confirmed as 2019.8. After the patch update, win7 server2008 UEFI cannot boot. The system directly enters recovery mode. The attempt to recover fails. The system still cannot boot normally. The main problem is WIN7 SERVER2008 series. The boot mode is UEFI.

The solution is: You can find a Win10 C: \windows\boot\efi\bootmgfw.efi and backup to U disk tool disk, use PE tool U disk to start the system, start cmd, diskpart to mount the boot partition, list disk to check the current hard disk information sel disk 0 select disk 0 specifically according to your actual selection list part view the current disk partition sel part 1 select the first partition, That is, esp partition assign letter = G specifies that the current partition disk symbol is G. Specifically, according to your actual selection of an unused drive letter

Copy the bootmgfw.efi in U disk to the following several ways, replace the money, pay attention to the best backup

G:\efi\boot\bootx64.efi Note replace\EFI\BOOT with bootmgfw.efi on USB drive, bootx64.efi below

G: \efi, microsoft\boot\bootmgfw. efi Replace G: \efi\microsoft\boot\bootmgfw.efi with bootmgfw.efi in USB flash drive Restart the system and restore it to normal, depending on your situation)]

】】】】】

The background is as follows: (there are dozens of servers, of which less than 10 are windows server 2008 r2)

1.2019 September 19, 2008, security patches for Windows Server 2008 R2 update, hit July, August, September monthly security update patches, resulting in 2008 can not start normally, security mode can not enter. (Not sure which month it was caused by the patch)

I use the PE of the old peach, you can start with PE to see if you can identify the hard disk, if you can't find the corresponding array card driver, and then manually load the array card driver during the startup process.

2. offline operation

You can use the following methods for first aid: 1. PE or Windows CD boot the server (remember to manually load the array card during the boot process, if it is a virtualized machine, do not use it, the PE in the virtualization class is made into iso load, to boot the virtualized machine, I am a vsphere6.7 environment, four physical servers do cluster, use vSAN).

Then use cmd command line to run the commands in Figure 1 and Figure 2 successively, and then restart will prompt update failure, restore changes, wait quietly.

The following figure is Figure 1: The function of the command is to check the current installed update patch, and the problem patch will be displayed as pending (my environment at that time, see your actual display)

The following figure is Figure 2. This command is to clean up and uninstall the pending patch. After running this command, according to the prompt operation, pull out the USB flash drive PE to restart normally, and then it will prompt that the update fails, restore the changes, and the rest is to wait quietly.

3. The following two pictures show you the specific usage grammar of dism, or you can use/? To display help document information.

! [](https://s1.51cto.com/images/blog/201909/22/210b03b142072a78b8e8c3c9e9e3ef49.jpg? x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=) ! [](https://s1.51cto.com/images/blog/201909/22/f801e95f28671f2e7ae832700291e33d.jpg? x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=)

4. Online (but this method may prompt you to use an offline image to resolve it on the original system.) That is to say, in the non-current system using dism, this cleanup pending patch, please test it yourself according to your own situation, I do not guarantee.)

If there is a problem with the patch, after installing the patch, the system has not been restarted, you can remove the pending patch online, and then restart.

Enter the/online parameter in the command.

Then use the following command to suspend the restore operation. The command in the figure below is not fully typed. The parameters of the mouse position can be followed.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.