Access to this page requires authorization. You can try signing in or changing directories . Access to this page requires authorization. You can try changing directories . Applies to: Supported versions of Windows Server This article offers you advanced manual methods to fix problems that prevent Windows Update from installing successfully by using the Deployment Image Servicing and Management (DISM) tool. This article is intended for use by support agents and IT professionals. If you're home users and looking for more information about fixing Windows update errors, see Fix Windows Update errors . Original KB number: 947821 Common corruption errors Windows updates may fail to install if there are corruption errors. You can check the Setup event log for errors. The following table lists the possible error codes for Windows Update for your reference: For example, an update might not install if a system file is damaged. The DISM may help you fix some Windows corruption errors. Check this page for Windows Update troubleshooting scenarios . Using DISM to repair Windows Update corruptions The solution mentioned in this section applies to Modern Windows versions like Windows 11, Windows 10, Windows Server 2016, or later. To resolve Windows Update corruptions and address update installation failures, use the DISM tool. Then, install the Windows Update. Open an elevated command prompt. To do this, open the Start menu, type Command Prompt , right-click Command Prompt , and then select Run as administrator . If you're prompted for an administrator password or for a confirmation, type the password, or select Yes . Open an elevated command prompt. To do this, open the Start menu, type Command Prompt , right-click Command Prompt , and then select Run as administrator . If you're prompted for an administrator password or for a confirmation, type the password, or select Yes . Type the following command, and then press Enter. It may take several minutes for the command operation to be completed. DISM.exe /Online /Cleanup-image /Restorehealth Important DISM repair works best when you connect to Microsoft Update servers to fetch missing or corrupted files. When you use the proceeding command, DISM gets the files needed to fix any corruptions from Windows Update. However, if your computer can't connect to Windows Update, you can alternatively use a working Windows installation as the repair source, or you can use files from a Windows folder on a network or from a USB or DVD. Instead, use this command: DISM.exe /Online /Cleanup-Image /RestoreHealth /Source:\\<servername>\c$\windows /LimitAccess Note Replace <servername> with the computer name of the computer you are using as a repair source. The repair source computer must be running the same operating system version. For more information about using the DISM tool to repair Windows, reference Repair a Windows Image . If the scan result is "The restore operation completed successfully", go to the next step. If not, try to analyze the CBS.log file and fix errors. Type the following command, and then press Enter. It may take several minutes for the command operation to be completed. DISM repair works best when you connect to Microsoft Update servers to fetch missing or corrupted files. When you use the proceeding command, DISM gets the files needed to fix any corruptions from Windows Update. However, if your computer can't connect to Windows Update, you can alternatively use a working Windows installation as the repair source, or you can use files from a Windows folder on a network or from a USB or DVD. Instead, use this command: Replace <servername> with the computer name of the computer you are using as a repair source. The repair source computer must be running the same operating system version. For more information about using the DISM tool to repair Windows, reference Repair a Windows Image . If the scan result is "The restore operation completed successfully", go to the next step. If not, try to analyze the CBS.log file and fix errors. Type the sfc /scannow command and press Enter. It may take several minutes for the command operation to be completed. Type the sfc /scannow command and press Enter. It may take several minutes for the command operation to be completed. Close the command prompt, and then run Windows Update again. Close the command prompt, and then run Windows Update again. DISM creates a log file ( %windir%\Logs\CBS\CBS.log ) that captures any issues that the tool found or fixed. %windir% is the folder in which Windows is installed. For example, the %windir% folder is C:\Windows . How does DISM Repair work? DISM is a command-line tool that is used to service and repair Windows images, including the Windows Recovery Environment, Windows Setup, and Windows PE (WinPE). It can also be used to repair the local Windows image on your computer. To give you a better understanding, here's a summary of the resources that the DISM tool checks for integrity: Files that are located in the following directories: %SYSTEMROOT%\Servicing\Packages %SYSTEMROOT%\WinSxS\Manifests %SYSTEMROOT%\Servicing\Packages %SYSTEMROOT%\WinSxS\Manifests Registry data that's located under the following registry subkeys: HKEY_LOCAL_MACHINE\Components HKEY_LOCAL_MACHINE\Schema HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Component Based Servicing HKEY_LOCAL_MACHINE\Components HKEY_LOCAL_MACHINE\Schema HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Component Based Servicing This list may be updated at any time. When the DISM detects incorrect manifests, Cabinets, or registry data, it may replace the incorrect data with a corrected version. The DISM tool creates a log file that captures any issues that the tool found or fixed. The log file is located here: %SYSTEMROOT%\Logs\CBS\CBS.log %SYSTEMROOT%\Logs\CBS\CBS.persist.log Advanced guide to fix CBS corruption manually using DISM utility Step 1: Analyze the CBS.log file After running the DISM commands, go to %WinDir%\Logs\CBS\CBS.log to view the results. The log file provides a summary of the scan and details of any errors found. Here's an example of the log summary: CSI Payload Corruption: This indicates that the payload file EnterpriseModernAppMgmtCSP.dll is corrupt. CBS MUM Missing: A required MUM file is missing from the package ( Microsoft-Windows-Client-Features-Package ). CSI Manifest Corruption: There were two instances of manifest corruption. One was fixed ( wow64_microsoft-windows-audio-mmecore-acm ), and the other ( wow64_microsoft-windows-audio-volumecontrol ) remains corrupt. Step 2: Download the missing files Identify the missing or corrupted files. Review the CBS.log file to identify the missing or corrupted files. For example: (p) CSI Payload Corrupt (n) amd64_microsoft-windows-a..modernappmanagement_31bf3856ad364e35_10.0.19045.3636_none_23b3b3ece690d77b\EnterpriseModernAppMgmtCSP.dll (p) CBS MUM Missing (n) Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.19045.4291 (p) CSI Manifest Corrupt (n) wow64_microsoft-windows-audio-volumecontrol_31bf3856ad364e35_10.0.19045.3636_none_4514b27cf12f35d5 Identify the missing or corrupted files.

Review the CBS.log file to identify the missing or corrupted files. For example: Determine the update containing the missing files. From the log entries, identify the Update Build Revision (UBR) numbers within the file paths: In the EnterpriseModernAppMgmtCSP.dll file, the UBR number is 10.0.19045.3636 . In the Microsoft-Windows-Client-Features-Package package, the UBR number is 10.0.19045.4291 . Determine the update containing the missing files. From the log entries, identify the Update Build Revision (UBR) numbers within the file paths: In the EnterpriseModernAppMgmtCSP.dll file, the UBR number is 10.0.19045.3636 . In the Microsoft-Windows-Client-Features-Package package, the UBR number is 10.0.19045.4291 . Match the UBR number to the KB number: Go to the Windows update history page for your version (for example, Windows 10, version 22H2). Match the UBR number ( 3636 or 4291 ) to the listed updates to find the KB number. For example: UBR 3636 might correspond to KB5031445. UBR 4291 might correspond to KB5036892. Match the UBR number to the KB number: Go to the Windows update history page for your version (for example, Windows 10, version 22H2). Match the UBR number ( 3636 or 4291 ) to the listed updates to find the KB number. UBR 3636 might correspond to KB5031445. UBR 4291 might correspond to KB5036892. Search for and download the update by the KB number: Use the identified KB numbers to search for the updates in the Microsoft Update Catalog . Download the updates associated with each KB number to restore the missing or corrupted files. Search for and download the update by the KB number: Use the identified KB numbers to search for the updates in the Microsoft Update Catalog . Download the updates associated with each KB number to restore the missing or corrupted files. Step 3: Extract the .msu and .cab files To address the corrupted files identified in the CBS.log file, extract the missing files into a specific folder. Follow these steps to extract the .msu and .cab files by using the provided PowerShell script , and then copy the necessary files to the C:\temp\Source folder. Create the necessary folders. Run the following command to create the C:\temp\Source folder if it doesn't exist: mkdir C:\temp\Source Create the necessary folders. Run the following command to create the C:\temp\Source folder if it doesn't exist: Use the instructions and script in Scripts: Extract .msu and .cab files to extract the .msu files by providing the destination paths of the .msu files. Use the instructions and script in Scripts: Extract .msu and .cab files to extract the .msu files by providing the destination paths of the .msu files. Step 4: Repair the corrupted files by using the source files Copy the correct versions of the corrupted files. Copy the correct versions of all the corrupted files that belong to this update to the C:\temp\Source folder. For example, run the following command: Copy-Item "C:\path\extractedFiles\corruptedfile.dll" -Destination "C:\temp\Source" Repeat this process for each corrupted file identified in the log until all the corrupted files are copied to the C:\temp\Source folder. Copy the correct versions of the corrupted files. Copy the correct versions of all the corrupted files that belong to this update to the C:\temp\Source folder. For example, run the following command: Repeat this process for each corrupted file identified in the log until all the corrupted files are copied to the C:\temp\Source folder. Rerun the DISM command. Open a command prompt as an administrator and run the following DISM command with the /Source option: DISM /Online /Cleanup-Image /RestoreHealth /Source:C:\temp\Source\ /LimitAccess Rerun the DISM command. Open a command prompt as an administrator and run the following DISM command with the /Source option: Step 5: Verify and confirm Rerun the DISM command. Rerun the following DISM command to verify that the issues have been resolved: DISM /Online /Cleanup-Image /ScanHealth Rerun the DISM command. Rerun the following DISM command to verify that the issues have been resolved: Check the CBS.log file. Review the CBS.log file to ensure there are no remaining errors. Check the CBS.log file. Review the CBS.log file to ensure there are no remaining errors. Example DISM command output The output of the DISM restore command provides crucial information about the corruption that was detected and repaired: Data collection If you need assistance from Microsoft support, we recommend you collect the information by following the steps mentioned in Gather information by using TSS for deployment-related issues . Was this page helpful? Need help with this topic? Want to try using Ask Learn to clarify or guide you through this topic? Additional resources Last updated on 2026-02-12