On my domain controller which is Running Windows Server 2016, whenever I check for updates, the updates start downloading and get stuck at 7% or sometimes stuck at checking for updates. I see that the Windows Update service goes from running to stopping. I rebooted multiple times.
net stop wuauserv /yes
net stop cryptSvc /yes
net stop bits /yes
net stop msiserver /yes
ren C:\Windows\SoftwareDistribution SoftwareDistribution.old
ren C:\Windows\System32\catroot2 Catroot2.old
net start wuauserv
net start cryptSvc
net start bits
net start msiserver
rmdir /S /Q C:\Windows\SoftwareDistribution.old
rmdir /S /Q C:\Windows\System32\Catroot2.old
I executed the commands and when I manually checked for updates, the updates were downloading but stuck at 8% and I now see that the Windows update service is back to Stopping state along with Update Orchestrator Service for Windows Update.
I also mounted Windows Server ISO image and ran DISM.exe /Online /Cleanup-Image /RestoreHealth /LimitAccess /Source:D:\sources\install.wim
It didn't give me any error after running but still the problem persists. The updates are stuck in "Checking for updates" and the Windows update service is stuck in Stopping state.
We have two Domain Controllers. I have daily backups from Veeam but I am hesitant to restore a DC from backup. I am not sure what would happen to AD database.