# Fix Windows Server Boot Failure After Windows Update

#   


This guide walks through recovering a Windows Server system that fails to boot after a Windows Update. It uses Windows Recovery Environment (WinRE) and DISM to revert or remove problematic updates.

Tested with Windows Server 2019. The process is nearly identical for Server 2016 / 2022.

---

## Prerequisites

- Windows Server installation ISO matching your OS version
- Physical console, iDRAC, iLO, or other remote KVM access
- Administrator credentials
- BitLocker recovery key (if BitLocker is enabled)

---

## Step 1 — Boot into Windows Recovery Environment

1. Download the correct Windows Server ISO from Microsoft. Search: **"Windows Server 2019 Evaluation ISO"**
2. Boot the server using: 
    - Bootable USB
    - Virtual Media via iDRAC / iLO
3. At the installer screen: 
    - Click **Next**
    - Select **Repair your computer**
4. Navigate to: 
    - **Troubleshoot → Advanced Options → Command Prompt**

If Windows already entered automatic recovery after multiple failed boots, you may see this menu without external media.

---

## Step 2 — Unlock BitLocker (If Enabled)

If the system drive is encrypted, unlock it first:

```
manage-bde -status
manage-bde -unlock D: -RecoveryPassword YOUR-KEY-HERE
```

Replace drive letter and recovery key as needed.

---

## Step 3 — Identify the Windows Installation Drive

In recovery mode, drive letters change. The OS drive is often NOT C:.

```
diskpart
list volume
exit
```

Note the volume containing the **Windows** folder.

```
dir C:
dir D:
dir E:
```

Example: Windows located on **D:\\**

---

## Step 4 — Check Disk Integrity (Recommended)

Before touching updates, verify filesystem health:

```
chkdsk D: /f
```

Replace D: with your OS drive.

---

## Step 5 — Revert Pending Updates

This cancels unfinished update operations.

```
dism /image:D:\ /cleanup-image /revertpendingactions
```

This may take several minutes.

When complete:

1. Close Command Prompt
2. Click **Continue → Boot to Windows**

If Windows boots successfully, stop here.

---

## Step 6 — Remove a Fully Installed Broken Update

If Windows crashes after login or loops during boot, the update must be manually removed.

### List Installed Packages

```
dism /image:D:\ /get-packages
```

Recent updates appear near the bottom.

### Remove a Package

```
dism /image:D:\ /remove-package /packagename:PACKAGE_NAME
```

Tip: Highlight package → right-click to copy → right-click to paste.

Remove updates one at a time and reboot between attempts.

---

## Step 7 — Repair Boot Configuration (If System Still Won’t Start)

If the system fails before Windows loads, repair the bootloader:

```
bootrec /fixmbr
bootrec /fixboot
bootrec /scanos
bootrec /rebuildbcd
```

If `/fixboot` returns Access Denied:

```
bootsect /nt60 sys
```

---

## Step 8 — Run System File Check Offline

Scan for corrupted Windows files:

```
sfc /scannow /offbootdir=D:\ /offwindir=D:\Windows
```

---

## Step 9 — Final Reboot

1. Exit Command Prompt
2. Remove installation media
3. Reboot normally

---

## Troubleshooting Notes

- If DISM fails: verify correct drive letter
- If drive is read-only: run `diskpart → attributes disk clear readonly`
- If BitLocker relocks: unlock again
- If updates reinstall automatically: pause Windows Update after recovery

---

## Summary

- Boot to recovery
- Unlock BitLocker
- Locate OS drive
- Check disk health
- Revert pending updates
- Remove broken packages
- Repair bootloader if needed
- Run SFC

This procedure resolves most Windows Update boot failures without reinstalling the operating system.