×
×
×
×

Reverting Changes After Patch Failure

Last Updated On: 31 Oct 2026|
6 minutes read |

Scenario

A windows10.0- filename prefix alone does not mean that a package is unsuitable for Windows Server 2016. Windows 10 version 1607 and Windows Server 2016 share the RS1 servicing family, as shown in Microsoft's Windows version and update table. Verify the KB's supported products, architecture, and target OS build before deployment. If installation rolls back, follow Windows servicing troubleshooting and review the installation logs.

Compare the package with the vendor KB or applicability information for the target OS build, edition, and architecture. The package filename alone is not a supported-platform check. If the update rolls back after reboot, retain the agent installation result and Windows servicing logs for the same attempt.

If a patch deployment is reported as successful in Patch Manager Plus, but the patch is still listed as Missing after the system reboots, verify whether the update was rolled back by Windows during the reboot process. A Missing Patches entry alone does not confirm rollback. The same condition can appear in the execution remarks as Patch installed successfully, but rolled back on reboot. When rollback is confirmed, review the endpoint servicing results for potential environmental issues before attributing the failure to Patch Manager Plus.

Cause

Patch Manager Plus downloads the patch and starts the installation. After the installation reaches the reboot stage, Windows Update servicing completes the remaining commit operations.

If Windows finds a problem during those reboot operations, Windows rolls back the update and restores the previous system state. This rollback runs in Windows servicing after Patch Manager Plus has completed deployment. Treat it as an operating system (environmental) issue, not as a Patch Manager Plus deployment failure.

This Windows rollback is separate from Uninstall Patch. Uninstall Patch is a manual-deployment action. It is available only when Patch Uninstallation for that patch is supported. See Uninstall and rollback limitations.

A restore point exists only when a pre-deployment script created one before deployment. The script does not stop a restart that Windows has already started. See Can we create a restore point before deploying a Windows update?.

Common environmental factors include:

  • Corrupted Windows components
  • Windows servicing issues
  • Incompatible drivers
  • Pending operations
  • Insufficient system resources
  • File access or permission issues
  • Other Windows Update-related problems

Resolution

If Component Store Cleanup is absent from Supported Patches, open Patch Database Settings > Windows and enable Optional Updates. Search Supported Patches again, then follow the cleanup procedure below. See patch-category selection.

If the update continues to roll back, record the Windows build, KB or Patch ID, full error, and reboot result. Follow Windows Update error troubleshooting to select the relevant servicing checks. A rollback remark alone does not confirm component-store corruption or guarantee that a repair patch will resolve the issue.

If redeployment reports This version already exists while Missing Patches still lists the update, compare the exact Patch ID, installed version, reboot outcome, and latest successful scan. See Understanding patch detection results. Keep the historical execution remark separate from the current endpoint result. If they still disagree, follow persistent-mismatch checks.

  1. Deploy the Component Store Cleanup patch (Patch ID: 105979) from the Supported Patches view.
  2. After the cleanup patch is installed successfully, reboot the system and redeploy the failed patch.
  3. Exclude the agent folder from antivirus: C:\Program Files (x86)\ManageEngine\UEMS_Agent.
  4. If Windows servicing or component-store corruption persists, follow the Windows component repair procedure.
  5. Restart the endpoint when required by that procedure and retry the failed update.

If the rollback continues after these steps, collect the Patch Manager Plus agent logs and the Setup logs in Event Viewer:

Event Viewer → Windows Logs → Setup

Related