1. Identify the Failed KB (Do this first)
Settings → Windows Update → Update history.
Note the exact KB number. The fix depends on it.
2. Quick Safe Fixes (Fix most cases)
Restart the PC and check for updates again.
Run the built-in troubleshooter:
Windows 11: Settings → System → Troubleshoot → Other troubleshooters → Windows Update → Run
Windows 10: Settings → Update & Security → Troubleshoot → Additional troubleshooters → Windows UpdateReset Update components (Admin Command Prompt):
text
net stop bits
net stop wuauserv
net stop cryptsvc
net stop msiserver
ren %Systemroot%\SoftwareDistribution SoftwareDistribution.old
ren %Systemroot%\System32\catroot2 catroot2.old
net start bits
net start wuauserv
net start cryptsvc
net start msiserverRestart and retry.
3. Repair System Files
Admin Command Prompt:
text
DISM /Online /Cleanup-Image /RestoreHealth
sfc /scannowRestart after both finish.
4. Targeted Fixes
Defender update (KB2267602 or similar):
text
"%ProgramFiles%\Windows Defender\MpCmdRun.exe" -RemoveDefinitions -All "%ProgramFiles%\Windows Defender\MpCmdRun.exe" -SignatureUpdate.NET update: Run the official Microsoft .NET Framework Repair Tool.
WinRE / Recovery update: Only if the KB is a WinRE package and the above fail.
Back up first. Follow Microsoft KB5028997 exactly (resize recovery partition). Do not guess partition numbers.
5. Last Resort
Download the exact KB from the Microsoft Update Catalog and install it manually, or do an in-place repair with the Media Creation Tool / official ISO (keeps files and apps).
Still need help?
Contact us