Hello,
I just wanted to report a frustrating problem that we are facing within the organisation, especially with the latest MS-24 FEB Cumulative Security Update for Win2019 (KB5034768).
Whenever we use the Microsoft Rollback Task Wizard to generate and create the task to uninstall this KB and then run in the computer, it always fails.
I know some patches are not uninstallable, but this one can be manually uninstalled so I’m guessing the task should work as usual.
Here’s the entire report of the action script actually running on it, you can see at the end that it failed to run.
Completed if {name of operating system = "Win98" OR name of operating system = "WinME"}
Completed wait {value "UninstallString" of key "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB5034768" of registry as string}
Completed action may require restart
Completed elseif {name of operating system = "WinNT"}
Completed wait {value "UninstallString" of key "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB5034768" of registry as string & " -q -z -y -m"}
Completed action may require restart
Completed elseif {name of operating system = "Win2000" OR name of operating system = "WinXP" OR name of operating system = "WinXP-2003" OR name of operating system = "Win2003"}
Completed wait {value "UninstallString" of key "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB5034768" of native registry as string & " -u -q -z"}
Completed action may require restart
Completed elseif {name of operating system = "WinVista" OR name of operating system = "Win2008"}
Completed if {x64 of operating system}
Completed wait {pathname of windows folder}\sysnative\pkgmgr.exe /quiet /norestart /up:{ (first match (regex "^Package_for_RollupFix~.*") of names of values of keys of keys whose (name of it starts with "Package_for_KB5034768") of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry) | (if (size of it = 1) then (element of it) else (if (exists element whose (it contains "Package_for_") of it) then (element whose (it contains "Package_for_") of it) else ("Error")) ) of (set of first matches (regex "Package.*KB\d+~\S+~\S+~~\d+\.\d+\.\d+\.\d+") of names whose (it contains "KB5034768" as uppercase) of keys of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry)}
Completed else
Completed wait {pathname of system folder}\pkgmgr.exe /quiet /norestart /up:{ (first match (regex "^Package_for_RollupFix~.*") of names of values of keys of keys whose (name of it starts with "Package_for_KB5034768") of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry) | ((if (size of it = 1) then (element of it) else (if (exists element whose (it contains "Package_for_") of it) then (element whose (it contains "Package_for_") of it) else ("Error")) ) of (set of first matches (regex "Package.*KB\d+~\S+~\S+~~\d+\.\d+\.\d+\.\d+") of names whose (it contains "KB5034768" as uppercase) of keys of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry))}
Completed endif
Completed action requires restart
Completed elseif {(((it starts with "Win" AND it does not start with "Win20") of name of operating system AND (exists value "CurrentMajorVersionNumber" of it AND value "CurrentMajorVersionNumber" of it as integer = 10) of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion" of native registry) OR (((exists value "ReleaseID" whose (it as integer = 1809) of it) of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion" of native registry OR (name of it = "Win2016" OR name of it starts with "Win20" AND (exists value "CurrentMajorVersionNumber" of it AND value "CurrentMajorVersionNumber" of it as integer = 10) of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion" of native registry)) of operating system)) and (exists names whose (it starts with "Package_for_DotNetRollup~31bf3856ad364e35~" ) of values of keys "Owners" of keys whose (name of it contains "KB5034768") of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry)}
Completed continue if {exists first matches (regex "^\d+$") of ("5034768" as uppercase)}
Completed action uses wow64 redirection {not x64 of operating system}
Completed if {exists key whose ( ( (it starts with "Package_for_DotNetRollup~31bf3856ad364e35~amd64~~" OR it starts with "Package_for_DotNetRollup~31bf3856ad364e35~x86~~") AND (it contains (if(number of ((((((following text of last "~" of it as string)) of it) of names whose (it starts with "Package_for_DotNetRollup") of values of keys "Owners" of keys whose (name of it contains "for_KB5034768") of it) as string) of it) of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry = 0) then "nothing" else (((maximum of (it as version) of (((following text of last "~" of it as string)) of it) of names whose (it starts with "Package_for_DotNetRollup") of values of keys "Owners" of keys whose (name of it contains "for_KB5034768") of it) as string) of it) of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry)) ) of name of it) of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry}
Completed parameter "version_number" = "{maximum of (it as version) of (((following text of last "~" of it as version)) of it)of names whose(it starts with "Package_for_DotNetRollup") of values of keys "Owners" of keys whose (name of it contains "for_KB5034768") of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry}"
Completed if {x64 of operating system}
Completed waithidden "{pathname of system folder}\dism.exe" /Online /Remove-Package /PackageName:Package_for_DotNetRollup~31bf3856ad364e35~amd64~~{parameter "version_number"} /quiet /norestart
Completed else
Completed waithidden "{pathname of system folder}\dism.exe" /Online /Remove-Package /PackageName:Package_for_DotNetRollup~31bf3856ad364e35~x86~~{parameter "version_number"} /quiet /norestart
Completed endif
Completed endif
Completed action requires restart
Completed elseif {(((it starts with "Win" AND it does not start with "Win20") of name of operating system AND exists value "CurrentBuild" whose (it >= "22000") of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion" of native registry) and (exists keys whose ( (value "DisplayVersion" of it = "21H2" OR value "DisplayVersion" of it = "22H2" OR value "DisplayVersion" of it = "23H2") AND (value "CurrentBuild" of it = "22000" OR value "CurrentBuild" of it = "22621" OR value "CurrentBuild" of it = "22631")) of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT" of native registry)) and ((exists names whose (it starts with "Package_for_DotNetRollup_481~31bf3856ad364e35~" ) of values of keys "Owners" of keys whose (name of it contains "KB5034768") of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry) OR (exists names whose (it starts with "Package_for_DotNetRollup~31bf3856ad364e35~" ) of values of keys "Owners" of keys whose (name of it contains "KB5034768") of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry))}
Completed continue if {exists first matches (regex "^\d+$") of ("5034768" as uppercase)}
Completed action uses wow64 redirection {not x64 of operating system}
Completed if {exists key whose ( ( (it starts with "Package_for_DotNetRollup~31bf3856ad364e35~amd64~~" OR it starts with "Package_for_DotNetRollup_481~31bf3856ad364e35~amd64~~" OR it starts with "Package_for_DotNetRollup~31bf3856ad364e35~x86~~" OR it starts with "Package_for_DotNetRollup_481~31bf3856ad364e35~x86~~") AND (it contains (if(number of ((((((following text of last "~" of it as string)) of it) of names whose (it starts with "Package_for_DotNetRollup") of values of keys "Owners" of keys whose (name of it contains "for_KB5034768") of it) as string) of it) of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry = 0) then "nothing" else (((maximum of (it as version) of (((following text of last "~" of it as string)) of it) of names whose (it starts with "Package_for_DotNetRollup") of values of keys "Owners" of keys whose (name of it contains "for_KB5034768") of it) as string) of it) of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry)) ) of name of it) of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry}
Completed parameter "version_number" = "{maximum of (it as version) of (((following text of last "~" of it as version)) of it)of names whose(it starts with "Package_for_DotNetRollup") of values of keys "Owners" of keys whose (name of it contains "for_KB5034768") of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry}"
Completed if {x64 of operating system and (not exists key "HKLM\Software\Microsoft\NET Framework Setup\NDP\v4" whose (exists key "Full" whose ((it = 533320 OR it = 533325) of value "Release" of it) of it) of native registry)}
Completed waithidden "{pathname of system folder}\dism.exe" /Online /Remove-Package /PackageName:Package_for_DotNetRollup~31bf3856ad364e35~amd64~~{parameter "version_number"} /quiet /norestart
Completed elseif {x64 of operating system and (exists key "HKLM\Software\Microsoft\NET Framework Setup\NDP\v4" whose (exists key "Full" whose ((it = 533320 OR it = 533325) of value "Release" of it) of it) of native registry)}
Completed waithidden "{pathname of system folder}\dism.exe" /Online /Remove-Package /PackageName:Package_for_DotNetRollup_481~31bf3856ad364e35~amd64~~{parameter "version_number"} /quiet /norestart
Completed elseif {x86 of operating system and (exists key "HKLM\Software\Microsoft\NET Framework Setup\NDP\v4" whose (exists key "Full" whose ((it = 533320 OR it = 533325) of value "Release" of it) of it) of native registry)}
Completed waithidden "{pathname of system folder}\dism.exe" /Online /Remove-Package /PackageName:Package_for_DotNetRollup_481~31bf3856ad364e35~amd64~~{parameter "version_number"} /quiet /norestart
Completed else
Completed waithidden "{pathname of system folder}\dism.exe" /Online /Remove-Package /PackageName:Package_for_DotNetRollup~31bf3856ad364e35~x86~~{parameter "version_number"} /quiet /norestart
Completed endif
Completed endif
Completed action requires restart
Completed elseif {((it starts with "Win20") of name of operating system and exists value "CurrentBuild" whose (it as string = "20348" OR it as string = "25398") of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion" of native registry) and ((exists names whose (it starts with "Package_for_DotNetRollup_481~31bf3856ad364e35~" ) of values of keys "Owners" of keys whose (name of it contains "KB5034768") of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry) OR (exists names whose (it starts with "Package_for_DotNetRollup~31bf3856ad364e35~" ) of values of keys "Owners" of keys whose (name of it contains "KB5034768") of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry))}
Completed continue if {exists first matches (regex "^\d+$") of ("5034768" as uppercase)}
Completed action uses wow64 redirection {not x64 of operating system}
Completed if {exists key whose ( ( (it starts with "Package_for_DotNetRollup~31bf3856ad364e35~amd64~~" OR it starts with "Package_for_DotNetRollup_481~31bf3856ad364e35~amd64~~" OR it starts with "Package_for_DotNetRollup~31bf3856ad364e35~x86~~" OR it starts with "Package_for_DotNetRollup_481~31bf3856ad364e35~x86~~") AND (it contains (if(number of ((((((following text of last "~" of it as string)) of it) of names whose (it starts with "Package_for_DotNetRollup") of values of keys "Owners" of keys whose (name of it contains "for_KB5034768") of it) as string) of it) of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry = 0) then "nothing" else (((maximum of (it as version) of (((following text of last "~" of it as string)) of it) of names whose (it starts with "Package_for_DotNetRollup") of values of keys "Owners" of keys whose (name of it contains "for_KB5034768") of it) as string) of it) of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry)) ) of name of it) of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry}
Completed parameter "version_number" = "{maximum of (it as version) of (((following text of last "~" of it as version)) of it)of names whose(it starts with "Package_for_DotNetRollup") of values of keys "Owners" of keys whose (name of it contains "for_KB5034768") of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry}"
Completed if {x64 of operating system and (not exists key "HKLM\Software\Microsoft\NET Framework Setup\NDP\v4" whose (exists key "Full" whose ((it = 533320 OR it = 533325) of value "Release" of it) of it) of native registry)}
Completed waithidden "{pathname of system folder}\dism.exe" /Online /Remove-Package /PackageName:Package_for_DotNetRollup~31bf3856ad364e35~amd64~~{parameter "version_number"} /quiet /norestart
Completed elseif {x64 of operating system and (exists key "HKLM\Software\Microsoft\NET Framework Setup\NDP\v4" whose (exists key "Full" whose ((it = 533320 OR it = 533325) of value "Release" of it) of it) of native registry)}
Completed waithidden "{pathname of system folder}\dism.exe" /Online /Remove-Package /PackageName:Package_for_DotNetRollup_481~31bf3856ad364e35~amd64~~{parameter "version_number"} /quiet /norestart
Completed elseif {x86 of operating system and (exists key "HKLM\Software\Microsoft\NET Framework Setup\NDP\v4" whose (exists key "Full" whose ((it = 533320 OR it = 533325) of value "Release" of it) of it) of native registry)}
Completed waithidden "{pathname of system folder}\dism.exe" /Online /Remove-Package /PackageName:Package_for_DotNetRollup_481~31bf3856ad364e35~amd64~~{parameter "version_number"} /quiet /norestart
Completed else
Completed waithidden "{pathname of system folder}\dism.exe" /Online /Remove-Package /PackageName:Package_for_DotNetRollup~31bf3856ad364e35~x86~~{parameter "version_number"} /quiet /norestart
Completed endif
Completed endif
Completed action requires restart
Completed elseif {((it starts with "Win" AND it does not start with "Win20") of name of operating system AND (exists value "CurrentMajorVersionNumber" of it AND value "CurrentMajorVersionNumber" of it as integer = 10 AND exists value "ReleaseID" whose (it as string >= "1903") of it) of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion" of native registry)}
Completed continue if {exists first matches (regex "^\d+$") of ("5034768" as uppercase)}
Completed action uses wow64 redirection {not x64 of operating system}
Completed if {exists key whose ( ( (it starts with "Package_for_RollupFix~31bf3856ad364e35~amd64~~" OR it starts with "Package_for_RollupFix~31bf3856ad364e35~x86~~") AND (it contains (if(number of ((((((following text of last "~" of it as string)) of it) of names whose (it starts with "Package_for_RollupFix") of values of keys "Owners" of keys whose (name of it starts with "Package_" AND name of it contains "for_RollupFix" AND name of it contains "~31bf3856ad364e35") of it) as string) of it) of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry = 0) then "nothing" else (((maximum of (it as version) of (((following text of last "~" of it as string)) of it) of names whose (it starts with "Package_for_RollupFix") of values of keys "Owners" of keys whose (name of it starts with "Package_" AND name of it contains "for_RollupFix" AND name of it contains "~31bf3856ad364e35") of it) as string) of it) of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry)) ) of name of it) of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry}
Completed parameter "version_number" = "{maximum of (it as version) of (((following text of last "~" of it as version)) of it)of names whose(it starts with "Package_for_RollupFix") of values of keys "Owners" of keys whose (name of it starts with "Package_" AND name of it contains "for_RollupFix" AND name of it contains "~31bf3856ad364e35") of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry}"
Completed if {x64 of operating system}
Completed waithidden "{pathname of system folder}\dism.exe" /Online /Remove-Package /PackageName:Package_for_RollupFix~31bf3856ad364e35~amd64~~{parameter "version_number"} /quiet /norestart
Completed else
Completed waithidden "{pathname of system folder}\dism.exe" /Online /Remove-Package /PackageName:Package_for_RollupFix~31bf3856ad364e35~x86~~{parameter "version_number"} /quiet /norestart
Completed endif
Completed else
Completed waithidden "{pathname of system folder}\dism.exe" /Online /Remove-Package /PackageName:{(if (size of it = 1) then (element of it) else (if (exists element whose (it contains "Package_for_") of it) then (element whose (it contains "Package_for_") of it) else ("Error")) ) of (set of first matches (regex "Package.*KB\d+~\S+~\S+~~\d+\.\d+\.\d+\.\d+") of names whose (it contains "KB5034768" as uppercase) of keys of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry)} /quiet /norestart
Completed endif
Completed action requires restart
Failed elseif {((it starts with "Win" AND it does not start with "Win20") of name of operating system AND (exists value "CurrentMajorVersionNumber" of it AND value "CurrentMajorVersionNumber" of it as integer = 10 AND exists value "ReleaseID" whose (it as string < "1903") of it) of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion" of native registry) OR ((name of it starts with "Win20" AND (exists value "CurrentMajorVersionNumber" of it AND value "CurrentMajorVersionNumber" of it as integer = 10 AND value "DisplayVersion" of it as string as lowercase != "21h2" AND value "DisplayVersion" of it as string as lowercase != "23h2") of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion" of native registry) of operating system) OR ((name of it = "Win2016" AND (exists value "CurrentMajorVersionNumber" of it AND value "CurrentMajorVersionNumber" of it as integer = 10 AND value "DisplayVersion" of it as string as lowercase != "21h2" AND value "DisplayVersion" of it as string as lowercase != "23h2") of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion" of native registry) of operating system)}
continue if {exists first matches (regex "^\d+$") of ("5034768" as uppercase)}
action uses wow64 redirection {not x64 of operating system}
if {exists key whose ( ( (it starts with "Package_for_RollupFix~31bf3856ad364e35~amd64~~" OR it starts with "Package_for_RollupFix~31bf3856ad364e35~x86~~") AND (it contains (if(number of ((((((following text of last "~" of it as string)) of it) of names whose (it starts with "Package_for_RollupFix") of values of keys "Owners" of keys whose (name of it contains "for_KB5034768") of it) as string) of it) of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry = 0) then "nothing" else (((maximum of (it as version) of (((following text of last "~" of it as string)) of it) of names whose (it starts with "Package_for_RollupFix") of values of keys "Owners" of keys whose (name of it contains "for_KB5034768") of it) as string) of it) of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry)) ) of name of it) of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry}
parameter "version_number" = "{maximum of (it as version) of (((following text of last "~" of it as version)) of it)of names whose(it starts with "Package_for_RollupFix") of values of keys "Owners" of keys whose (name of it contains "for_KB5034768") of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry}"
if {x64 of operating system}
waithidden "{pathname of system folder}\dism.exe" /Online /Remove-Package /PackageName:Package_for_RollupFix~31bf3856ad364e35~amd64~~{parameter "version_number"} /quiet /norestart
else
waithidden "{pathname of system folder}\dism.exe" /Online /Remove-Package /PackageName:Package_for_RollupFix~31bf3856ad364e35~x86~~{parameter "version_number"} /quiet /norestart
endif
else
waithidden "{pathname of system folder}\dism.exe" /Online /Remove-Package /PackageName:{(if (size of it = 1) then (element of it) else (if (exists element whose (it contains "Package_for_") of it) then (element whose (it contains "Package_for_") of it) else ("Error")) ) of (set of first matches (regex "Package.*KB\d+~\S+~\S+~~\d+\.\d+\.\d+\.\d+") of names whose (it contains "KB5034768" as uppercase) of keys of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry)} /quiet /norestart
endif
action requires restart
elseif {(((it starts with "Win" AND it does not start with "Win20") of name of operating system AND exists value "CurrentBuild" whose (it >= "22000") of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion" of native registry) and (exists keys whose ( (value "DisplayVersion" of it = "21H2" OR value "DisplayVersion" of it = "22H2" OR value "DisplayVersion" of it = "23H2") AND (value "CurrentBuild" of it = "22000" OR value "CurrentBuild" of it = "22621" OR value "CurrentBuild" of it = "22631")) of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT" of native registry))}
continue if {exists first matches (regex "^\d+$") of ("5034768" as uppercase)}
action uses wow64 redirection {not x64 of operating system}
if {exists key whose ( ( (it starts with "Package_for_RollupFix~31bf3856ad364e35~amd64~~" OR it starts with "Package_for_RollupFix~31bf3856ad364e35~x86~~") AND (it contains (if(number of ((((((following text of last "~" of it as string)) of it) of names whose (it starts with "Package_for_RollupFix") of values of keys "Owners" of keys whose (name of it starts with "Package_" AND name of it contains "for_RollupFix" AND name of it contains "~31bf3856ad364e35") of it) as string) of it) of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry = 0) then "nothing" else (((maximum of (it as version) of (((following text of last "~" of it as string)) of it) of names whose (it starts with "Package_for_RollupFix") of values of keys "Owners" of keys whose (name of it starts with "Package_" AND name of it contains "for_RollupFix" AND name of it contains "~31bf3856ad364e35") of it) as string) of it) of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry)) ) of name of it) of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry}
parameter "version_number" = "{maximum of (it as version) of (((following text of last "~" of it as version)) of it)of names whose(it starts with "Package_for_RollupFix") of values of keys "Owners" of keys whose (name of it starts with "Package_" AND name of it contains "for_RollupFix" AND name of it contains "~31bf3856ad364e35") of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry}"
waithidden "{pathname of system folder}\dism.exe" /Online /Remove-Package /PackageName:Package_for_RollupFix~31bf3856ad364e35~amd64~~{parameter "version_number"} /quiet /norestart
else
waithidden "{pathname of system folder}\dism.exe" /Online /Remove-Package /PackageName:{(if (size of it = 1) then (element of it) else (if (exists element whose (it contains "Package_for_") of it) then (element whose (it contains "Package_for_") of it) else ("Error")) ) of (set of first matches (regex "Package.*KB\d+~\S+~\S+~~\d+\.\d+\.\d+\.\d+") of names whose (it contains "KB5034768" as uppercase) of keys of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry)} /quiet /norestart
endif
action requires restart
elseif {((it starts with "Win20") of name of operating system and exists value "CurrentBuild" whose (it as string = "20348" OR it as string = "25398") of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion" of native registry)}
continue if {exists first matches (regex "^\d+$") of ("5034768" as uppercase)}
action uses wow64 redirection {not x64 of operating system}
if {exists key whose ( ( (it starts with "Package_for_RollupFix~31bf3856ad364e35~amd64~~" OR it starts with "Package_for_RollupFix~31bf3856ad364e35~x86~~") AND (it contains (if(number of ((((((following text of last "~" of it as string)) of it) of names whose (it starts with "Package_for_RollupFix") of values of keys "Owners" of keys whose (name of it starts with "Package_" AND name of it contains "for_RollupFix" AND name of it contains "~31bf3856ad364e35") of it) as string) of it) of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry = 0) then "nothing" else (((maximum of (it as version) of (((following text of last "~" of it as string)) of it) of names whose (it starts with "Package_for_RollupFix") of values of keys "Owners" of keys whose (name of it starts with "Package_" AND name of it contains "for_RollupFix" AND name of it contains "~31bf3856ad364e35") of it) as string) of it) of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry)) ) of name of it) of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry}
parameter "version_number" = "{maximum of (it as version) of (((following text of last "~" of it as version)) of it) of names whose (it starts with "Package_for_RollupFix") of values of keys "Owners" of keys whose (name of it starts with "Package_" AND name of it contains "for_RollupFix" AND name of it contains "~31bf3856ad364e35") of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry}"
waithidden "{pathname of system folder}\dism.exe" /Online /Remove-Package /PackageName:Package_for_RollupFix~31bf3856ad364e35~amd64~~{parameter "version_number"} /quiet /norestart
else
waithidden "{pathname of system folder}\dism.exe" /Online /Remove-Package /PackageName:{(if (size of it = 1) then (element of it) else (if (exists element whose (it contains "Package_for_") of it) then (element whose (it contains "Package_for_") of it) else ("Error")) ) of (set of first matches (regex "Package.*KB\d+~\S+~\S+~~\d+\.\d+\.\d+\.\d+") of names whose (it contains "KB5034768" as uppercase) of keys of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry)} /quiet /norestart
endif
action requires restart
elseif {name of operating system = "Win7" OR name of operating system = "Win2008R2" OR name of operating system = "Win2012" OR name of operating system = "Win8" OR name of operating system = "Win8.1" OR name of operating system = "Win2012R2" }
continue if {exists first matches (regex "^\d+$") of "5034768"}
if {x64 of operating system}
wait {pathname of windows folder}\sysnative\wusa.exe /uninstall /kb:5034768 /quiet /norestart
else
wait {pathname of system folder}\wusa.exe /uninstall /kb:5034768 /quiet /norestart
endif
action requires restart
endif
If anyone has faced a similar issue and can help, I’d much appreciate it.