Skip to content

Event ID 20: Installation Failure: Windows failed to install the following update with error

Windows Event ID Lookup: What Windows event IDs mean: 4625, 4624, 4740, 6008, 41, 7045, 1102 and 3,000 more, with Windows' own message text, the fields and what to check.

Look up a Windows event ID from Event Viewer, a SIEM alert or a log export: what it means, the fields it records, and what to check. Many IDs are used by more than one source (event 41 is both a Kernel-Power crash and a boot error), so every definition is shown, the one people usually mean first. The message text is Windows' own, read from the event providers of Windows 10.0.26200.0, 2026-10-28; the notes are ours, based on Microsoft's security auditing reference.

Try: 4625, 4624, 4740, 6008, 41, 1074, 7045, 1102, 4104, 1149

Installation Failure: Windows failed to install the following update with error

Event 20
WindowsUpdateClient
System log
Error

An update failed to install, with an error code.

What to check: Look up the error code (e.g. 0x800F081F, 0x80073712) in the Windows Error Code Lookup.

Related: 19, 43

Message and fields (as Event Viewer shows them) 
Installation Failure: Windows failed to install the following update with error …: ….

The event logging service encountered an error … while obtaining or processing configuration for channel

Event 20
Eventlog
Security / System log
Error
Message and fields (as Event Viewer shows them) 
The event logging service encountered an error … while obtaining or processing configuration for channel ….

The leap second configuration has been updated.

Event 20
Kernel-General
System log
Information
Message and fields (as Event Viewer shows them) 
The leap second configuration has been updated.
Reason: …
Leap seconds enabled: …
New leap second count: …
Old leap second count: …

The last shutdown's success status was

Event 20
Kernel-Boot
System log
Information
Message and fields (as Event Viewer shows them) 
The last shutdown's success status was …. The last boot's success status was ….

Logging was requested, but the time service encountered an error while trying to write to the log file

Event 20
Time-Service
System log
Error
Message and fields (as Event Viewer shows them) 
Logging was requested, but the time service encountered an error while trying to write to the log file: …. The error was: …

Final perf configuration data

Event 20
StorPort
System log
Information
Message and fields (as Event Viewer shows them) 
Final perf configuration data

The KDC certificate for the domain controller does not have the DNS name of domain … in the Subject Alternative Name (SAN) attribute: Error Code

Event 20
Security-Kerberos
System log
Information
Message and fields (as Event Viewer shows them) 
The KDC certificate for the domain controller does not have the DNS name of domain … in the Subject Alternative Name (SAN) attribute: Error Code …. The domain administrator will need to obtain a KDC certificate with the DNS domain name in the SAN attribute for the domain controller to resolve this error. When using Windows Server Certificate Services create a certificated based on the Kerberos Authentication Template.

Attempt to send … message to Windows video subsystem failed.

Event 20
TerminalServices-LocalSessionManager
TerminalServices-LocalSessionManager/Operational log
Error
Message and fields (as Event Viewer shows them) 
Attempt to send … message to Windows video subsystem failed. The relevant status code was ….

Performing Update operation on the WMI repository.

Event 20
WMI-Activity
WMI-Activity/Operational log
Information
Message and fields (as Event Viewer shows them) 
Performing Update operation on the WMI repository. OperationID = …; Operation = …; Flags = …

SMB2 Request Query Info

Event 20
SMBServer
SMBServer/Operational log
Information
Message and fields (as Event Viewer shows them) 
SMB2 Request Query Info

A peer was updated.

Event 20
Bits-Client
Bits-Client/Operational log
Information
Message and fields (as Event Viewer shows them) 
A peer was updated.