The solution to the failure of updating KB3139398, KB4054517 and SP1 in AD environment
Windows7 KB3139398
Windows7 upgrade SP1 KB976932
Windows10 KB4054517
In the AD environment, the above two updates failed. After many attempts, it was found that it was because the USB port was disabled in GPO.
Disabling GPO of USB will modify the security permission settings of usbstor.inf,usbstor.pnf, delete all permissions, change them to inherit from the inf folder, and then restart to install normally. Make sure that when you restart, the permissions are not updated by GPO.
It has recently been found that this GPO setting also affects the installation of SP1.
In short, if there is a patch installation failure, you can first follow the above settings, and then try again, there may be surprises.
