{"id":1621,"date":"2016-10-21T08:49:30","date_gmt":"2016-10-21T06:49:30","guid":{"rendered":"http:\/\/borncity.com\/win\/?p=1621"},"modified":"2023-09-22T00:43:56","modified_gmt":"2023-09-21T22:43:56","slug":"windows-updates-fehlende-deinstallation-erzwingen","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2016\/10\/21\/windows-updates-fehlende-deinstallation-erzwingen\/","title":{"rendered":"Uninstalling &lsquo;uninstallable&rsquo; Windows Updates"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" title=\"Update\" style=\"border-left-width: 0px; border-right-width: 0px; border-bottom-width: 0px; float: left; margin: 0px 10px 0px 0px; display: inline; border-top-width: 0px\" border=\"0\" alt=\"Windows Update\" src=\"http:\/\/www.borncity.com\/blog\/wp-content\/uploads\/2015\/02\/Update.jpg\" width=\"40\" height=\"40\">[<a href=\"http:\/\/www.borncity.com\/blog\/2016\/10\/21\/windows-updates-fehlende-deinstallation-erzwingen\/\" target=\"_blank\" rel=\"noopener\">German<\/a>]Some Windows updates are installed as permanent and doesn't offer an uninstall option. This blog post shows how to force uninstalling such update packages (works from Windows 7 up to Windows 10).<\/p>\n<p><!--more--><\/p>\n<h3>The problem is \u2026<\/h3>\n<p><img loading=\"lazy\" decoding=\"async\" alt=\"\" src=\"https:\/\/ssl-vg03.met.vgwort.de\/na\/1e3a0b34bd2149b8877fa80a7f8cb7ac\" width=\"1\" height=\"1\">If an update causes issues, it's possible to open control panel, go to <em>Programs and Features <\/em>and select <em>Installed updates. <\/em>All installed updates are listed. <\/p>\n<p><img decoding=\"async\" title=\"Installed updates\" alt=\"Installed updates\" src=\"https:\/\/web.archive.org\/web\/20190331073713\/http:\/\/k63.imgup.net\/Update-Unidc6f.jpg\"><\/p>\n<p>Selecting an update shows an <em>Uninstall <\/em>button (see screenshot above). If an update causes issues, it's possible to uninstall it and test, whether the issues are solved of not. But for some update packages, an <em>Uninstall<\/em> button isn't available. I was becoming aware of this after installing servicing stack update KB3177467 (from October 11, 2016). Some users are reporting issues. Investigating the update mentioned indicates, that there is no <em>Uninstall <\/em>button for the patch entry in <em>Installed updates <\/em>list (see screenshot below). <\/p>\n<p><img decoding=\"async\" title=\"Update not uninstallable\" alt=\"Update not uninstallable\" src=\"https:\/\/web.archive.org\/web\/20190331073715\/http:\/\/j12.imgup.net\/Update-Uni3ce9.jpg\"><\/p>\n<p>Microsoft has published a <a href=\"https:\/\/msdn.microsoft.com\/en-us\/library\/windows\/desktop\/aa372102%28v=vs.85%29.aspx?f=255&amp;MSPPError=-2147217396\" target=\"_blank\" rel=\"noopener\">document<\/a> explaining, in which cases a patch isn't uninstallable. The options available are \"try to rollback the system in a state before installing the update using either system restore or a system backup\". But what to do, if that options are not available?<\/p>\n<h3>Why and how Microsoft makes updates uninstallable?<\/h3>\n<p>Some updates are essentials for Windows and are integrated deeply into the system. Servicing Stack updates are mandatory to install further updates \u2013 also installer updates are uninstallable. Microsoft declares such updates as \"permanent\" within the .<em>msu <\/em>file, while ordinary update packages are quoted as \"removable\". Sometime a KB article mentions that the update is uninstallable (<a href=\"https:\/\/support.microsoft.com\/en-us\/kb\/3173424\" target=\"_blank\" rel=\"noopener\">see<\/a>).<\/p>\n<p>Controlling whether an update is permanent or removable is done within <em>.mum<\/em> files (mum stands for <a href=\"https:\/\/en.wikipedia.org\/wiki\/Windows_Update\" target=\"_blank\" rel=\"noopener\">Microsoft Update Manifest<\/a>) shipped whithin a .<em>msu<\/em> package. A <em>.mum<\/em> may be found after installing an update with the folger <em>C:\\Windows\\servicing\\Packages\\<\/em>.<\/p>\n<p><img decoding=\"async\" title=\"Update .mum file\" alt=\"Update .mum file\" src=\"https:\/\/web.archive.org\/web\/20190331073714\/http:\/\/b28.imgup.net\/Update-mumc5c8.jpg\"><\/p>\n<p>.mum files are simple XML files containing information about the update (KB numer, language requirements, restart after installation required and so on \u2013 see the screenshot below).<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/web.archive.org\/web\/20190331073713\/http:\/\/w50.imgup.net\/MUM-Datei-5254.jpg\"><\/p>\n<p>The XML attribute <em>permanency=\"permanent\"<\/em> quotes an update as not uninstallable, while a missing attribute or an XML attribut value <em>permanency=\"removable\"<\/em> quotes an update as uninstallable. Only updates with a missing or <em>permanency=\"removable\" <\/em>attribute are uninstallable via control panel or via <em>dism <\/em>(Windows 8 and above). <\/p>\n<blockquote>\n<p>I found this information <a href=\"http:\/\/windows-update-checker.com\/FAQ\/How%20to%20uninstall%20permanent%20updates.htm\" target=\"_blank\" rel=\"noopener\">here<\/a> (too short) and within a <a href=\"http:\/\/answers.microsoft.com\/en-us\/windows\/forum\/windows_other-update\/update-for-windows-7-for-x64-based-systems\/c2fc3d47-5829-4884-b247-c4000361bd66\" target=\"_blank\" rel=\"noopener\">MS-Answers forum thread<\/a> (post from PhilipdayWF).<\/p>\n<\/blockquote>\n<blockquote>\n<p><strong>Stop:<\/strong> Uninstalling updates quoted as \"permanent\" bears the risk, that further updates can't be installed due to serious errors like STATUS_SXS_COMPONENT_STORE_CORRUPT &#8211; see comments from magicandre1981 <a href=\"https:\/\/web.archive.org\/web\/20161227021832\/http:\/\/superuser.com:80\/questions\/947742\/getting-rid-of-a-windows-update-which-will-not-uninstall-via-wusa-or-the-control\" target=\"_blank\" rel=\"noopener\">here<\/a> and here. Hints to analyze Update errors based on Servicing Corruption may be found within the Technet post <a href=\"https:\/\/technet.microsoft.com\/en-us\/library\/ee619779(v=ws.10).aspx\" target=\"_blank\" rel=\"noopener\">Advanced guidelines for diagnosing and fixing servicing corruption<\/a>. Analyzing update errors is covered <a href=\"https:\/\/technet.microsoft.com\/en-us\/library\/cc732334(v=ws.10).aspx\" target=\"_blank\" rel=\"noopener\">here<\/a>. Some information about the structure of .msu and .cab files may be found <a href=\"https:\/\/web.archive.org\/web\/20171101215623\/http:\/\/www.msfn.org\/board\/topic\/175704-windows-update-package-structure-analysis\/\" target=\"_blank\" rel=\"noopener\">here<\/a>.<\/p>\n<\/blockquote>\n<h3>How to mark an update package as 'uninstallable'?<\/h3>\n<p>After I've warned about the risk of uninstalling uninstallable updates (create a restore point or an image backup before trying the steps given below) it's time to use the know how, discussed above. We need to open the update`s <em>.mum <\/em>file and change the XML attribute <em>permanency=\"permanent\"<\/em> to \"removable\". This can be done using Windows editor notepad.exe. <\/p>\n<blockquote>\n<p>There is only one problem: Only TrustedInstaller has full access to <em>.mum files. <\/em>The web site linked above indicates that the access rights needs to be altered for the .mum file in order to edit its content. But this is complex (it can be done via Security tab of the file's properties) and under Windows 7 I was ending assigning the ownership of a .mum file to group Users. Overall I don't like to alter system files access rights. <\/p>\n<\/blockquote>\n<p>A solution to avoid the access right conflict is to run Windows editor <em>notepad.exe with <\/em>TrustedInstallers credentials.<\/p>\n<p>1. Go to website <a href=\"http:\/\/www.sordum.org\/9416\/powerrun-v1-1-run-with-highest-privileges\/\" target=\"_blank\" rel=\"noopener\">sodrum.org<\/a> and download the portable freeware <em>PowerRun<\/em>, unpack the ZIP archive to a local folder.<\/p>\n<p><img decoding=\"async\" title=\"PowerRun\" alt=\"PowerRun\" src=\"https:\/\/web.archive.org\/web\/20190331073713\/http:\/\/v77.imgup.net\/PowerRunf150.jpg\"><\/p>\n<p>2. Launch <em>PowerRun <\/em>(Smartscreen filter creates a warning, that the tool is unknown, so you need to confirm and also confirm UAC), select <em>notepad.exe, <\/em>and click the context menu command <em>Run file<\/em>.<\/p>\n<p>3. Select in notepad's window <em>File \u2013 Open<\/em> and set the file filter to <em>All files (*.*)<\/em>.<\/p>\n<p><img decoding=\"async\" title=\"Mum-Datei editieren\" alt=\"Mum-Datei editieren\" src=\"https:\/\/web.archive.org\/web\/20190331073713\/http:\/\/c31.imgup.net\/MUM-Datei-2413.jpg\"><\/p>\n<p>4. Navigate in the open dialog box symbol bar to folder <em>C:\\Windows\\servicing\\Packages.<\/em><\/p>\n<p>5. Enter the search expression into the search box (for instance <em>KB3177467*.mum<\/em>), to filter the relevant files.<\/p>\n<p>6. Select the first .mum file found and click the <em>Open <\/em>button to load the .mum file. <\/p>\n<p><img decoding=\"async\" title=\"mum-Datei &auml;ndern\" alt=\"mum-Datei &auml;ndern\" src=\"https:\/\/web.archive.org\/web\/20190331073713\/http:\/\/e66.imgup.net\/MUM-Datei-f788.jpg\"><\/p>\n<p>7. Seach the entry <em>permanency=\"permanent\" a<\/em>nd change it to <em>permanency=\"removable\"<\/em><\/p>\n<p>8. Store the altered .mum file \u2013 this should be possible, because Windows editor runs with TrustedInstaller privileges.<\/p>\n<p>9. Repeat the steps give above for all .mum files associated with the update package (the screenshots given above for Windows 7 Servicing Stack update KB3177467 shows 3 .mum files).<\/p>\n<p>After altering all .mum files, you can try to uninstall the package using control panel. Go to <em>Programs and Features <\/em>and select <em>Installed updates.<\/em> Select the update package, and now an <em>Uninstall<\/em> button should be available. Uninstall the package and test, whether the issues are gone. Uninstalling also should be possible within an administrative console window using the following command:<\/p>\n<p>wusa \/uninstall \/kb:3177467 \/quiet \/norestart<\/p>\n<p>where 3177467 stands for the KB number of the update (see <a href=\"https:\/\/support.microsoft.com\/en-us\/kb\/934307\" target=\"_blank\" rel=\"noopener\">here<\/a> and <a href=\"https:\/\/www.windows-faq.de\/2011\/06\/21\/windows-updates-deinstallieren-mit-wusa-exe\/\" target=\"_blank\" rel=\"noopener\">here<\/a>). This approach should work in all Windows versions from Windows 7 up to Windows 10. Afterward it's possible to check the system for damaged system files using <em>sfc \/scannow <\/em>(Windows 7) within an administrative command prompt window. From Windows 8 and up use the article <a href=\"https:\/\/borncity.com\/win\/2016\/07\/08\/check-and-repair-windows-system-files-and-component-store\/\">Check and repair Windows system files and component store<\/a>. <\/p>\n<blockquote>\n<p>Warning: Use the steps given above as a \"last shot\" (if system restore isn't available) at your own risk. In best case you can fix an issue caused by the faulty update. In worst case you ruins your Windows installation, because without the uninstalled update further updates can't be installed due to an STATUS_SXS_COMPONENT_STORE_CORRUPT error. <\/p>\n<\/blockquote>\n<p><strong>Similar articles<br \/><\/strong><a href=\"https:\/\/borncity.com\/win\/2016\/10\/18\/windows-78-1-preview-quality-rollups-kb3192403kb3192404\/\">Windows 7\/8.1: Preview Quality Rollups KB3192403\/KB3192404<\/a><br \/><a href=\"https:\/\/borncity.com\/win\/2016\/10\/19\/microsoft-update-catalog-finally-supports-different-browsers\/\">Microsoft Update Catalog finally supports different browsers<\/a><br \/><a href=\"https:\/\/borncity.com\/win\/2016\/10\/15\/windows-10-analyze-upgrade-errors\/\">Windows 10: Analyze upgrade errors<\/a><br \/><a href=\"https:\/\/borncity.com\/win\/2016\/07\/05\/how-to-decode-windows-errors\/\">How to decode Windows errors?<\/a><br \/><a href=\"https:\/\/web.archive.org\/web\/20210512202711\/https:\/\/borncity.com\/win\/2016\/07\/06\/windows10-open-command-prompt-window-as-administrator\/\">Windows 10: Open command prompt window as administrator<\/a><br \/><a href=\"https:\/\/borncity.com\/win\/2016\/07\/08\/check-and-repair-windows-system-files-and-component-store\/\">Check and repair Windows system files and component store<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>[German]Some Windows updates are installed as permanent and doesn't offer an uninstall option. This blog post shows how to force uninstalling such update packages (works from Windows 7 up to Windows 10).<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[22,2],"tags":[499,500,501,466,502,503,149],"class_list":["post-1621","post","type-post","status-publish","format-standard","hentry","category-update","category-windows","tag-deinstallation","tag-kb3177467","tag-mum-datei","tag-problem","tag-servicing-stack-update","tag-tipp","tag-windows-update"],"_links":{"self":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/1621","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/comments?post=1621"}],"version-history":[{"count":0,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/1621\/revisions"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/media?parent=1621"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/categories?post=1621"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/tags?post=1621"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}