Unable to upgrade windows 10 1803/1809 to 1903 0x800711C7 Error

tajger985 · 21 Nov 2019

Hi guys,

I can't upgrade windows 10 Enterprise 1803/1809 to 1903. Feel like I've tried everything here.

Tried Windows Update. Doesn't work. [Fails to update during the reboot bit, and simply undoes changes]
Tried Windows Update/Upgrade Assistant. [Gets to about 23% during the reboot bit, and simply gives black screen telling me it's undoing the changes]
Tried Windows In-Place-Upgrade (using the Media Creation Tool). [Same as the Update/Upgrade Assistant above]
Tried disable Device Guard, Secure Boot, Virtualization Based Security [Same as the Update/Upgrade Assistant above]
Tried upgrade in clean boot mode but this doesn't work.
Tried the way:
- sfc /scannow
- Dism /Online /Cleanup-Image /ScanHealth
- Dism /Online /Cleanup-Image /CheckHealth
- Dism /Online /Cleanup-Image /RestoreHealth
- Stop Windows Update service, delete folder SoftwareDistribution from C:/Windows,
- Delete catroot2 folder from C:/Windows/system32
- Clear UEFI variables
- Disable Device Gaurd, VBS with the help of Device Guard Readiness Tools
- run Windows Update Troubleshooter
I have also replaced the device guard policy in audit mode, but result is nothing

Error code is:

0x800711C7 - 0x2000A

The installation failed in the SAFE_OS phase with an error during PREPARE_FIRST_BOOT

0x800711C7 - "This program was blocked by Device Guard because it violates the code integrity policy installed on this system" - but Device Guard is disabled.

The problem is on all personal computers in the domain on which I had enabled device guard (Windows Defender Application Control).

It's my log from C:\$WINDOWS.~BT\Sources\Panther\setuper

2019-11-12 11:55:08, Error MOUPG CDlpActionImpl<class CDlpError - Pastebin.com

Each time the update reaches 23% and changes are rolled back.
Any other ideas for resolve this problem?

dalchina · 21 Nov 2019

Hi, welcome to tenforums. Your error message is not uncommon- please feel free to search the forum for other recent threads on that.

For starters- some of which you may have done:

Please provide the following:
- full specs of the PC in question

- use the V2 log collector here and upload the results as a zipped attachment
BSOD- Posting Instructions

- screenshot of your partitions using a 3rd party partition manager- not Disk Management
To post a screenshot please use the Insert Image icon above your post.
- How much free space do you have on C: ? 30Gb is a good guide.

- Full details of the error message generated when you try upgrading based on logging in and launching setup.exe from either a mounted iso file or a bootable installation disk
- upgrade log files as appropriate e.g. setuperr.log, setupact.log, zipped as an attachment - for ref:
https://support.microsoft.com/en-gb/...sion-of-window
- confirm you have uninstalled any 3rd party security software and disconnected any unnecessary peripherals - you have attempted the upgrade without accepting updates (if you get as far as that prompt)
- whether your PC has received a prompt to upgrade to Win 10 via Windows Update

(If not, your PC may not be compatible)

Please consult this for guidance: Upgrade to Windows 10
especially
Get help with Windows 10 upgrade and installation errors - Windows Support

Resolve Windows 10 upgrade errors

Please be aware there is absolutely no guarantee of succeeding here- some surrender and clean install after some days of effort.

Please try running MS's setupdiag.exe to analyse your log files:
https://docs.microsoft.com/en-us/win...rade/setupdiag

Please note: using the forum features e.g. 'Manage Attachments' below your post when editing to upload files can be easier for respondents.
@zbook will probably help you.

tajger985 · 21 Nov 2019

311/5000
I have previously set up a forum thread on Microsoft forum, but so far no one has found a solution. Yes, I had a message about an update available in Windows Update.
I have 60Gb free space in system disk. I do not have third-party security software or unnecessary peripherals connected.

dalchina · 21 Nov 2019

Please complete the remainder of the info especially the BSOD log collector, setupdiag.exe, and upload upgrade log files (setupact.log, setuperr.log), screenshot of partitions etc etc

My AV gives me a warning if I try to access your pastebin; please upload as attachments to your post. (See Manage attachments below your post when editing).

zbook · 21 Nov 2019

For Windows upgrade failures options are:
a) reset save files equivalent (reinstall drivers and applications)
b) backup important files > clean install
c) troubleshoot

There are log collectors used in another forum room.
Please run each V2 and DM and upload results into this thread:
BSOD - Posting Instructions

Make sure English is the default language so that the files can be scanned and read:
https://www.tenforums.com/tutorials/...dows-10-a.html
Change Display Language in Windows 10

1) Open administrative command prompt and type or copy and paste:
2) sfc /scannow
3) dism /online /cleanup-image /scanhealth
4) dism /online /cleanup-image /restorehealth
5) sfc /scannow
6) chkdsk /scan
7) wmic recoveros set autoreboot = false
8) wmic recoveros set DebugInfoType = 7
9) bcdedit /enum {badmemory}

10) When these have completed > right click on the top bar or title bar of the administrative command prompt box > left click on edit then select all > right click on the top bar again > left click on edit then copy > paste into the thread

11) Make sure that there is no over clocking while troubleshooting.

12) In the left lower corner search type: system or system control > open system control panel > on the left pane click advanced system settings

a) > on the advanced tab under startup and recovery > click settings > post an image of the startup and recovery window into the thread

b) > on the advanced tab under performance > click on settings > on the performance options window > click on the advanced tab > under virtual memory > click on change > post an image of the virtual memory window into the thread

13) If the computer has Ccleaner (do not install the software if it is not already installed) > click windows tab or custom clean > scroll down to system and advanced > post an image into the thread

14) List and uninstall all non-Microsoft antivirus software
(This includes always on and manual software.)
(This includes running the applicable antivirus uninstall tools for any AV that could have been incompletely uninstalled)

15) List and uninstall all non-Microsoft firewall software

16) List all Microsoft and non-Microsoft drive encryption software.
Uninstall all non-Microsoft disk encryption software

17) Make sure Windows defender is on

18) Open disk management > by default some columns are compressed > widen each Status and Volume > make sure the contents within the parenthesis are in full view and that none of the characters are cutoff > view disk 0 > widen this row as needed so that all of the characters are in full view > post an image into the thread
Disk Management - How to Post a Screenshot of

19) Download and install Minitool Partition Wizard > post an image of the results into this thread
MiniTool Partition Wizard Free Edition - Free download and software reviews - CNET Download.com

20) Run setupdiag > post a share link
https://docs.microsoft.com/en-us/win...rade/setupdiag

21) Were you able to find/make windows 10 iso for Windows Enterprise?
a) what was the source?
b) which windows edition/version and which iso edition/version were used for the in place upgrade repairs

22) Update the specs in the "My Computer" section:

System Specs - Fill in at Ten Forums
In the left corner below in your post you find 'My System Specs'.
After clicking it you can find a link a little below that says 'Update your System Spec', click on this link to get to the page where you can fill in your system specs.
System Info - See Your System Specs - Windows 7 Help Forums

Include PSU. cooler, case, peripherals and anything attached to the computer by wired or wireless (mouse, keyboard, headset, printer, xbox, USB wireless network card, etc.)

For all steps / tests please post images into the thread.

If there are any problems posting images please use share links: one drive, drop box, or google drive

Take Screenshot in Windows 10

How to Upload and Post Screenshots and Files at Ten Forums

tajger985 · 22 Nov 2019

My logs from BSOD log collector, log from output setupdiag.exe, setupact.log, setuperr.log

zbook · 22 Nov 2019

The logs were partially in a foreign language which limited the scanning.
The logs displayed BSOD in July and it appears that Windows driver verifier may still be on.
The computer will be checked for misbehaving drivers.
The BIOS is out of date.
The drives need to be tested.

Code:

         Operating System: Windows 10 Enterprise 64-bit (10.0, Build 17763) (17763.rs5_release.180914-1434)

Code:

Error = 0x800711C7-0x2000A
LogEntry: 2019-11-06 12:10:52, Error                 DISM   DISM Sysprep Provider: PID=1296 TID=1336 Failed to run sysprep platform actions. - Specialize(hr:0x800711c7)

Code:

Operation failed: Run sysprep specialization offline on C:\$WINDOWS.~BT\NewOS. Error: 0x800711C7[gle=0x000000b7]

Code:

Error code: (HRESULT) 0x800711c7 - Your organization used Device Guard to block this app. Contact your support person for more info.

Code:

Ochrona DMA jądra	Wyłączone
Kernel DMA Protection Disabled

1) Open administrative command prompt and type or copy and paste:
2) reagentc /info
3) verifier /querysettings
4) verifier /reset

5) When these have completed > right click on the top bar or title bar of the administrative command prompt box > left click on edit then select all > right click on the top bar again > left click on edit then copy > paste into the thread.

6) reboot after posting the results into the thread

7) Make a new restore point:
Create System Restore Point in Windows 10

8) The BIOS: Wersja/data systemu BIOS American Megatrends Inc. P2.00, 2017-04-18

Upgrade the BIOS: 2 > 2.5

9) Run HD Tune (free version) (all drives)
HD Tune website
Post images into the thread for results on these tabs:
a) Health
b) Benchmark
c) Full error scan

10) Run Sea Tools for Windows
long generic test
Post an image of the test result into the thread
SeaTools for Windows |
Seagate
How to use SeaTools for Windows | Seagate Support US

11) Open administrative command prompt and type or copy and paste:
chkdsk /r /v
This may take hours to run so plan to run overnight.
Run on all drives using the syntax: chkdsk /r /v C: or chkdsk /r /v D: changing the drive letter to the applicable drive.

C:\Windows\system32>chkdsk /r /v
The type of the file system is NTFS.
Cannot lock current drive.

Chkdsk cannot run because the volume is in use by another
process. Would you like to schedule this volume to be
checked the next time the system restarts? (Y/N)

Type: Y
reboot

12) Use the information in this link to find the chkdsk report in the event viewer. Copy and paste into notepad > save to desktop > post into the thread using one drive or drop box share link:
Read Chkdsk Log in Event Viewer in Windows 10 Windows 10 Performance Maintenance Tutorials
Read Chkdsk Log in Event Viewer in Windows 10

13) Open administrative powershell and copy and paste:

Get-CimInstance –ClassName Win32_DeviceGuard –Namespace root\Microsoft\Windows\DeviceGuard

14) When this has completed > right click on the top bar or title bar of the administrative command prompt box > left click on edit then select all > right click on the top bar again > left click on edit then copy > paste into the thread.

Code:

Event[44485]:
  Log Name: System
  Source: volmgr
  Date: 2019-11-21T16:31:02.368
  Event ID: 46
  Task: N/A
  Level: Błędy
  Opcode: N/A
  Keyword: Klasyczny
  User: N/A
  User Name: N/A
  Computer: IT3.power.com.pl
  Description: 
Inicjowanie zrzutu awaryjnego nie powiodło się!

tajger985 · 22 Nov 2019

At the moment I send in order:
1. verifier logs
2. chkdsk log
3. Get-CimInstance –ClassName Win32_DeviceGuard –Namespace root\Microsoft\Windows\DeviceGuard logs

Dropbox - verifier logs.txt - Simplify your life
Dropbox - 11_chkdsk_log.txt - Simplify your life
Dropbox - 13 Device Guard.txt - Simplify your life

I will add that I have three computers in active directory with the same bios version, but Device Guard has never been enabled on them. These computers have updated correctly to version 1903. The problem is with those computers on which Device Guard has been enabled.

- - - Updated - - -

At the moment I send in order:
1. verifier logs
2. chkdsk log
3. Get-CimInstance –ClassName Win32_DeviceGuard –Namespace root\Microsoft\Windows\DeviceGuard logs

Dropbox - verifier logs.txt - Simplify your life
Dropbox - 11_chkdsk_log.txt - Simplify your life
Dropbox - 13 Device Guard.txt - Simplify your life

I will add that I have three computers in active directory with the same bios version, but Device Guard has never been enabled on them. These computers have updated correctly to version 1903. The problem is with those computers on which Device Guard has been enabled.

dalchina · 22 Nov 2019

Enable or Disable Device Guard in Windows 10

Have you disabled/removed hypervisor and reversed any relevant settings shown in the above?

tajger985 · 22 Nov 2019

Disable Device Guard, Virtualization Based Security using DG_Readiness_Tool_v3.6 -Disable, I'm verify, Device Guard and VBS are turned off.
I also disabled using the local policy editor, from the same tutorial Enable or Disable Device Guard in Windows 10