Microsoft KB2868116 – Very Slow Install Process

With today being Patch Tuesday, it’s time to get cracking on those systems.  Everything seemed fine for the most part, but one patch (KB2868116) gave me some issues on a few servers.  The specific issue is that it took over 45 minutes to install for some reason.  I’m not sure why or what causes this, but it’s something to take note of.

One system was a virtual machine that hosted a yet-to-be-used SQL server.  The other major time-stalled server was the server with Hyper-V that hosted the virtual machine SQL server.  Neither should have taken this long.  No events were logged in the event viewer to suggest an issue.  The Task Manager didn’t show anything too obscene in terms of system resources, although TrustedInstaller.exe did hit 100MB at one point.

Regardless, if you are planning on installing KB2868116, just plan accordingly.  Given what I went through, I would recommend installing all of the other updates, rebooting, then trying to install KB2868116 so that the system can attempt the installation with the caches flushed.  I’m not saying this will have an effect, but it is worth giving a shot.

PROPOSED SOLUTION: Thanks to the many people who commented on this post, apparently the culprit is Symantec Endpoint Protection (SEP).  These users have stated that disabling SEP will allow update KB2868116 to install quickly.  While this is a very easy workaround for single instances, if you are deploying via WSUS, that’s a royal pain to deal with.  Should you be using WSUS, I would consider approving the update late on a Friday so that it will install over the weekend.  While the PC may still require a reboot, at least users won’t get stuck for almost an hour with a wicked slow computer.

EDIT: I’m not sure if this helped “unstick” the process or if it was just a coincidence, but on two servers where it took almost an hour to install said update, I tried to stop the installation by hitting the cancel or stop button.  About 5-10 minutes after doing that, the installation process stopped, but showed that 28686116 had installed.  After a reboot, I installed the remaining updates without a problem. Hitting cancel won’t help the process go along.  I akin it to waiting for a long time at a red light and then flashing your high beams thinking you made the lights change.