Windows Server 2022 cumulative updates fail with 0x80073701 — Missing NetworkController assembly, DISM reports healthy

Corey Millhollon 0 Reputation points
2026-11-05T17:50:21.16+00:00

I'm experiencing a persistent Windows Update issue on a production Windows Server 2022 system and am looking for assistance with a Component-Based Servicing (CBS) repair.

Server information:

  • OS: Windows Server 2022, version 21H2

Current build: 20348.4052

Last successfully installed cumulative OS update: KB5063880 (August 2025)

Roles: Active Directory Domain Services, DNS, and File Server

This is our only domain controller.

Problem:

Cumulative OS updates have consistently failed since approximately August 2025 with error 0x80073701 (ERROR_SXS_ASSEMBLY_MISSING).

Recent failed updates include:

KB5126655 — October 2026 cumulative update

KB5134140 — October 2026 cumulative update, attempted using the standalone Microsoft Update Catalog installer

The standalone installation produces the same error, so this does not appear to be solely a Windows Update download-cache issue.

CBS.log identifies the following failure:

HRESULT_FROM_WIN32(ERROR_SXS_ASSEMBLY_MISSING)

ICSITransaction_PinDeployment(
  a = NetworkController-Server-Deployment,
  version = 10.0.20348.3932,
  arch = amd64
)

Failed to pin deployment while resolving Update:
NetworkController-Server-Package
0x80073701

The error also references:

Microsoft-Windows-msmq-powershell-Opt-WOW64-Package
10.0.20348.3932

Troubleshooting performed:

DISM /Online /Cleanup-Image /ScanHealth — No component store corruption detected.

DISM /Online /Cleanup-Image /RestoreHealth — Completed successfully.

sfc /scannow — No integrity violations found.

Checked Windows feature states. Network Controller management tools and MSMQ are available but not installed.

Queried the affected package using DISM. NetworkController-Server-Package~31bf3856ad364e35~amd64~~10.0.20348.3932 is registered as Staged.

Checked C:\Windows\WinSxS\Manifests. The NetworkController-Server-Deployment manifest for version 10.0.20348.3932 is missing, although versions 20348.4050 and 20348.5622 exist.

Downloaded and extracted the original Microsoft KB5062572 cumulative update. Located and extracted the exact missing manifest:

amd64_networkcontroller-server-deployment_31bf3856ad364e35_10.0.20348.3932_none_fa2908d4d09c92ec.manifest

Ran DISM with the extracted manifest directory as a repair source:

DISM /Online /Cleanup-Image /RestoreHealth /Source:C:\UpdateRepair\RepairSource /LimitAccess

The command completed successfully, but the missing manifest was not restored.

Retried with standalone KB5134140. Installation failed again with the same missing assembly.

CBS.log also states:

Exec: Will not run corruption repair
because no store corruption found.

Questions:

What is the supported method for repairing a missing CBS deployment assembly when DISM reports the component store as healthy?

Can the missing NetworkController-Server-Deployment version 20348.3932 be restored using the original Microsoft cumulative update package without manually modifying WinSxS?

Could the staged Network Controller package have an inconsistent servicing registration, and how can that be safely diagnosed or repaired?

Is there an alternative supported servicing repair method that avoids an in-place OS repair or rebuilding the domain controller?

Because this server is our only domain controller and file server, I am trying to resolve the issue without disrupting Active Directory, DNS, or shared file services.

I can provide the full CBS.log and additional DISM logs if needed.

Any guidance on a supported targeted CBS repair would be greatly appreciated.I'm experiencing a persistent Windows Update issue on a production Windows Server 2022 system and am looking for assistance with a Component-Based Servicing (CBS) repair.

Server information:

OS: Windows Server 2022, version 21H2

Current build: 20348.4052

Last successfully installed cumulative OS update: KB5063880 (August 2025)

Roles: Active Directory Domain Services, DNS, and File Server

This is our only domain controller.

Problem:

Cumulative OS updates have consistently failed since approximately August 2025 with error 0x80073701 (ERROR_SXS_ASSEMBLY_MISSING).

Recent failed updates include:

KB5126655 — October 2026 cumulative update

KB5134140 — October 2026 cumulative update, attempted using the standalone Microsoft Update Catalog installer

The standalone installation produces the same error, so this does not appear to be solely a Windows Update download-cache issue.

CBS.log identifies the following failure:

HRESULT_FROM_WIN32(ERROR_SXS_ASSEMBLY_MISSING)

ICSITransaction_PinDeployment(
  a = NetworkController-Server-Deployment,
  version = 10.0.20348.3932,
  arch = amd64
)

Failed to pin deployment while resolving Update:
NetworkController-Server-Package
0x80073701

The error also references:

Microsoft-Windows-msmq-powershell-Opt-WOW64-Package
10.0.20348.3932

Troubleshooting performed:

DISM /Online /Cleanup-Image /ScanHealth — No component store corruption detected.

DISM /Online /Cleanup-Image /RestoreHealth — Completed successfully.

sfc /scannow — No integrity violations found.

Checked Windows feature states. Network Controller management tools and MSMQ are available but not installed.

Queried the affected package using DISM. NetworkController-Server-Package~31bf3856ad364e35~amd64~~10.0.20348.3932 is registered as Staged.

Checked C:\Windows\WinSxS\Manifests. The NetworkController-Server-Deployment manifest for version 10.0.20348.3932 is missing, although versions 20348.4050 and 20348.5622 exist.

Downloaded and extracted the original Microsoft KB5062572 cumulative update. Located and extracted the exact missing manifest:

amd64_networkcontroller-server-deployment_31bf3856ad364e35_10.0.20348.3932_none_fa2908d4d09c92ec.manifest

Ran DISM with the extracted manifest directory as a repair source:

DISM /Online /Cleanup-Image /RestoreHealth /Source:C:\UpdateRepair\RepairSource /LimitAccess

The command completed successfully, but the missing manifest was not restored.

Retried with standalone KB5134140. Installation failed again with the same missing assembly.

CBS.log also states:

Exec: Will not run corruption repair
because no store corruption found.

Questions:

What is the supported method for repairing a missing CBS deployment assembly when DISM reports the component store as healthy?

Can the missing NetworkController-Server-Deployment version 20348.3932 be restored using the original Microsoft cumulative update package without manually modifying WinSxS?

Could the staged Network Controller package have an inconsistent servicing registration, and how can that be safely diagnosed or repaired?

Is there an alternative supported servicing repair method that avoids an in-place OS repair or rebuilding the domain controller?

Because this server is our only domain controller and file server, I am trying to resolve the issue without disrupting Active Directory, DNS, or shared file services.

I can provide the full CBS.log and additional DISM logs if needed.

Any guidance on a supported targeted CBS repair would be greatly appreciated.

Windows for business | Windows Server | Devices and deployment | Install Windows updates, features, or roles
0 comments No comments

1 answer

Sort by: Most helpful
  1. Chance Maurice Niyonzima 825 Reputation points Independent Advisor
    2026-11-05T19:52:40.9+00:00

    Hello Corey,

    Thank you for posting your question on the Microsoft Windows Forum!

    Thank you for providing such detailed troubleshooting information. You've already completed many of the steps that would normally be recommended for an update failure of this type, which helps narrow the investigation considerably.

    The most important finding

    The most significant detail in your investigation is that:

    CBS consistently reports 0x80073701 (ERROR_SXS_ASSEMBLY_MISSING)
    The missing assembly is NetworkController-Server-Deployment version 10.0.20348.3932
    The corresponding manifest is absent from WinSxS
    DISM and SFC both report no corruption
    

    This combination suggests that the issue may not be traditional component store corruption, but rather a servicing inconsistency where a package remains registered in the servicing stack while one of its required deployment manifests is no longer available.

    What your findings already tell us

    A few of your observations are particularly valuable:

    The failure occurs with both Windows Update and standalone. MSU installation.
    The affected package is present and registered as Staged.
    Newer NetworkController manifest versions exist.
    DISM completes successfully but explicitly states that no corruption was detected.
    

    Because DISM doesn't believe the component store is corrupt, it would also explain why:

    DISM /RestoreHealth
    

    is not restoring the missing deployment manifest even when a repair source is supplied.

    Regarding targeted CBS repair

    From a supported servicing perspective, manually copying manifests into:

    C:\Windows\WinSxS
    

    would not be recommended.

    The servicing stack maintains package metadata, catalog relationships, and component identities that are not fully repaired by manually restoring individual files, even when the correct manifest has been extracted from a Microsoft package.

    One area that may be worth investigating further

    Since the package is currently reported as:

    Staged
    

    I'd be interested in whether the servicing registration and package state are still internally consistent.

    If you haven't already reviewed it, it may be helpful to compare the package state for:

    NetworkController-Server-Package
    

    and its related deployment package versions using:

    DISM /Online /Get-Packages
    

    to determine whether an earlier package revision remains partially staged or superseded.

    Considering the server role

    You also mentioned that this server is:

    The only domain controller
    DNS server
    File server
    

    Given those responsibilities, I appreciate your desire to avoid an in-place upgrade or rebuild unless absolutely necessary.

    At this stage, based on the information provided, I'm hesitant to recommend invasive servicing modifications without a clearer understanding of the package registration state.

    One clarification

    Corey, were you able to identify whether the missing:

    NetworkController-Server-Deployment
    10.0.20348.3932
    

    assembly is referenced by only a single package, or do the CBS logs show multiple package families attempting to resolve that same deployment identity?

    That detail may help determine whether we're looking at a single damaged package registration or a broader servicing-stack inconsistency.

    Thank you again for the thorough investigation and for sharing your findings. Your analysis has already ruled out many of the common causes of update failures, and any additional package-registration information you can provide would be very helpful in narrowing down the next step.

    I hope this information is helpful. If so, please click on Accept Answer and consider upvoting it. Doing so helps other community members identify useful solutions to similar issues.

    Was this answer helpful?


Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.