Windows Server 2019 — Cumulative update fails because required Servicing Stack Update is missing — Fix & Prevention

📖 ~1 min read

Table of contents

1. Symptom & Impact
2. Environment & Reproduction
3. Root Cause Analysis
4. Quick Triage
5. Step-by-Step Diagnosis
6. Solution — Primary Fix
7. Solution — Alternative Approaches
8. Verification & Acceptance Criteria
9. Rollback Plan
10. Prevention & Hardening
11. Related Errors & Cross-Refs
12. References & Further Reading

Symptom & Impact

LCU install on Windows Server 2019 fails with 0x8007007E or 0x800f0922 because the matching Servicing Stack Update has not been applied.

Environment & Reproduction

Reproduces when applying a recent cumulative update to a server that is several months behind on servicing stack patches.

wusa.exe windows10.0-kb5036000-x64.msu /quiet /norestart

Root Cause Analysis

Recent LCUs depend on a newer SSU; without it, the servicing stack cannot process the package manifests.

Quick Triage

Check the most recent SSU installed and compare with the LCU prerequisites.

Get-HotFix | Where Description -Like 'Security Update*' | Sort InstalledOn -Desc | Select -First 5

Step-by-Step Diagnosis

Inspect CBS log for prerequisite errors.

Select-String C:WindowsLogsCBSCBS.log -Pattern 'prerequisite|Servicing Stack' | Select -Last 50

Solution — Primary Fix

Install the latest SSU first, reboot, then apply the LCU.

wusa.exe windows10.0-kb5036xxx-ssu-x64.msu /quiet /norestart
shutdown /r /t 0
wusa.exe windows10.0-kb5036000-x64.msu /quiet /norestart

Solution — Alternative Approaches

Use the combined SSU+LCU package that Microsoft ships for current cumulative releases.

wusa.exe windows10.0-kb5036000-ssu-combined-x64.msu /quiet /norestart

Verification & Acceptance Criteria

Get-HotFix lists the new KB and DISM reports component store healthy.

dism /online /cleanup-image /checkhealth

Rollback Plan

Uninstall the LCU with wusa if it introduces regressions; SSU is not uninstallable.

wusa.exe /uninstall /kb:5036000 /quiet /norestart

Prevention & Hardening

Always deploy the current SSU as part of the monthly patch ring before LCU rollout.

# In WSUS, approve SSU first in the maintenance ring

Related Errors & Cross-Refs

Related: 0x800f081f component missing, DISM repair failures, and WSUS expression-only approval errors.

Related tutorial: View the step-by-step tutorial for Windows Server 2019.

View all Windows Server 2019 tutorials on the Tutorials Hub →

Browse all common problems & solutions on the Tutorials Hub.

References & Further Reading

Microsoft Learn documentation on Servicing Stack Updates and Windows Server cumulative update prerequisites.