Environment
- Windows 10 Pro 22H2, x64, Greek language
- Windows Pro activation status: Licensed (OEM)
- Windows Update confirms: "Your PC is enrolled to get Extended Security Updates"
- ESU preparation package KB5072653: Installed
Problem
Windows cumulative updates repeatedly fail during installation and roll back after a restart, displaying error 0x800F0922.
The October 2026 cumulative update KB5126657 is affected. The .NET cumulative update KB5128925 is also pending installation.
This issue existed before the system drive was replaced.
Key evidence from CBS logs
During the failed installation, CBS repeatedly reports:
SPP Installer: SLpUpdateComponentTokens completed with hr=0xC004F011
The servicing operation subsequently fails and rolls back.
Related Security-SPP events
Event ID 8211 reports error 0xC004F011 while updating Windows license and product-key tokens.
It references:
%windir%\system32\spp\tokens\addons\client-esu-year1\defaultppd-client-esu-year1-ppdlic.xrm-ms
Event ID 8229 repeatedly reports:
The rules engine failed to perform one or more scheduled actions.
Error Code: 0x80070005
Path: SERIALIZE_INTERNAL
The relationship between these two errors has not been established.
Checks already completed
- Windows Pro activation is valid.
- ESU enrollment is confirmed in Windows Update.
- KB5072653 is installed.
- The referenced ESU licensing file exists and has a valid digital signature.
- The Software Protection service (
sppsvc) is running.
- File ownership and permissions appear normal.
- SFC and DISM repair procedures previously completed successfully.
Questions
- What does error 0xC004F011 indicate specifically when
SLpUpdateComponentTokens processes the Windows 10 ESU Year 1 licensing tokens?
- Is there a Microsoft-supported, targeted repair procedure for this failure?
- Could the recurring
SERIALIZE_INTERNAL error 0x80070005 be related?
- How can this be repaired without resetting Windows activation or ESU enrollment, deleting licensing tokens, reinstalling Windows, or losing installed applications and customized settings?
Relevant CBS and Security-SPP logs are available. I can provide appropriately redacted excerpts if needed.
I would appreciate guidance based on the specific CBS/SPP errors rather than general Windows Update troubleshooting.