Windows Server 2022 Update Issue 0x8007000d & Unable to run CIS Software, getting Error - Assessor AUDIT_SUCCESS_FAILURE Windows “Premature end of file

Question

Windows Server 2022 Update Issue 0x8007000d & Unable to run CIS Software, getting Error - Assessor AUDIT_SUCCESS_FAILURE Windows “Premature end of file

Arun Neelambaran 0

thumbnail_img1

We are encountering a critical issue with Windows Server 2022 (Version 21H2, OS Build 20348.3453), impacting their cybersecurity hardening processes.

Our client utilizes CIS software to generate hardening reports, and we're currently receiving an error message: "Assessor AUDIT_SUCCESS_FAILURE Windows “Premature end of file”" when running the software.

We have already engaged with CIS support, and they have confirmed that this error is a direct result of recent Windows Updates (specifically KB5055528 and KB5055519, deployed on April 8, 2025). CIS has advised that updating the server to Windows Server 2022 KB5058920 should resolve the problem.

CIS-CAT Pro Assessor halts at AUDIT_SUCCESS_FAILURE with a "Premature end of file" error for Windows assessments.

Unfortunately, we have been unable to install KB5058920 or any other recommended and latest Windows patches. Both automatic and manual installation attempts have failed. We attempted to open a support ticket with Microsoft directly, but we were informed that a support plan is required.

Therefore, we are requesting your immediate assistance in creating a Microsoft support ticket for this critical update issue. Your help in facilitating this will be greatly appreciated.

1 answer

Your answer

Answer 1

Based on my knowledge, You're encountering Windows Update Error 0x8007000d on Windows Server 2022 (21H2, OS Build 20348.3453), which is preventing installation of KB5058920—a critical update needed to resolve compatibility issues with CIS-CAT Pro Assessor, which is failing with "AUDIT_SUCCESS_FAILURE: Premature end of file".

I will provide you a step-by-step fix instructions, you can try it and let me know the situation :

Step 1: first you need to run Windows Update Troubleshooter

Open Settings > Update & Security > Troubleshoot > Additional troubleshooters.
Select Windows Update > Run the troubleshooter.
Apply any fixes it suggests and restart.

Step 2: you will need to reset Windows Update Components manually

Open Command Prompt as Administrator, and run these commands one by one:

net stop wuauserv
net stop cryptSvc
net stop bits
net stop msiserver
ren C:\Windows\SoftwareDistribution SoftwareDistribution.old
ren C:\Windows\System32\catroot2 catroot2.old
net start wuauserv
net start cryptSvc
net start bits
net start msiserver

Then try running Windows Update again or install the KB manually.

Step 3: Try to download and install KB5058920 manually

Visit the Microsoft Update Catalog.
Search for KB5058920.
Download the version that matches your OS architecture (likely Windows Server 2022 x64).
Run the .msu file to install the update manually.

If it fails again:

Use the DISM command to repair Windows before retrying, open CMD as Admin and paste these commands bellow one by one:
- DISM /Online /Cleanup-Image /RestoreHealth
- sfc /scannow

Arun Neelambaran 0 Reputation points

2025-06-13T19:50:53.32+00:00

Thanks for your guidelines. I've gone through these steps, but unfortunately, the issue still persists, and I'm still unable to update.
Joseph Tran 415 Reputation points

2025-06-13T20:59:54.39+00:00

Can you try to Bypass Windows Update with an In-Place Repair (Keeps Settings/Data)

because this is often the most effective non-destructive fix.

Download the latest Windows Server 2022 ISO:

Use Visual Studio Subscriptions or VLSC if you have access.

Make sure the ISO includes KB5058920 (or is newer than 20348.3453).

Mount the ISO on the affected server.

Run setup.exe inside the mounted ISO.

When prompted:

Choose "Keep personal files and apps".

Let the repair install finish and restart.

-> This often fixes update corruption issues that neither DISM nor reset components can resolve.

Or you can try to patch it via WSUS or Offline Servicing

If you’re in an enterprise environment and WSUS is used:

Manually import KB5058920 into WSUS from the Microsoft Update Catalog.

Approve the update and force the server to check in:

wuauclt /reportnow

wuauclt /detectnow

Or use PowerShell :

Get-WindowsUpdate -Install -AcceptAll -IgnoreReboot

Alternatively, inject the update into a WIM image using DISM /Add-Package and redeploy.

Share via

Windows Server 2022 Update Issue 0x8007000d & Unable to run CIS Software, getting Error - Assessor AUDIT_SUCCESS_FAILURE Windows “Premature end of file

1 answer

Your answer