{"id":3528,"date":"2017-05-07T16:08:37","date_gmt":"2017-05-07T12:08:37","guid":{"rendered":"https:\/\/rakhesh.com\/?p=3528"},"modified":"2017-05-07T16:08:37","modified_gmt":"2017-05-07T12:08:37","slug":"get-windowsupdatelog-symsrv-dll-error","status":"publish","type":"post","link":"https:\/\/rakhesh.com\/windows\/get-windowsupdatelog-symsrv-dll-error\/","title":{"rendered":"Get-WindowsUpdateLog SymSrv.dll error"},"content":{"rendered":"<p>Starting with Windows 10 and Server 2016 Microsoft isn&#8217;t providing a <code>WindowsUpdate.log<\/code> file any more. Instead we have to <a href=\"https:\/\/blogs.technet.microsoft.com\/charlesa_us\/2015\/08\/06\/windows-10-windowsupdate-log-and-how-to-view-it-with-powershell-or-tracefmt-exe\/\">run a cmdlet to generate it manually<\/a>.<\/p>\n<p>On my Server 2016 the cmdlet gave the following error:<\/p>\n<pre class=\"lang:ps decode:true\">Copy-Item : Cannot find path 'C:\\Program Files\\Windows Defender\\SymSrv.dll' because it does not exist.\r\nAt C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsUpdate\\WindowsUpdateLog.psm1:56 char:5\r\n+     Copy-Item -Path $SYMSRV_DLL_PATH -Destination $WORKDIR -Force -Er ...\r\n+     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\r\n    + CategoryInfo          : ObjectNotFound: (C:\\Program File...nder\\SymSrv.dll:String) [Copy-Item], ItemNotFoundExce\r\n   ption\r\n    + FullyQualifiedErrorId : PathNotFound,Microsoft.PowerShell.Commands.CopyItemCommand<\/pre>\n<p>I checked the path &#8220;C:\\Program Files\\Windows Defender&#8221; and there&#8217;s no &#8220;SymSrv.dll&#8221; file present there. That&#8217;s because I had removed the Windows Defender feature from my Server 2016 install (we use Sophos, so no need really for Windows Defender). Who thought removing Windows Defender would break this cmdlet?<\/p>\n<p>If I check the module &#8220;C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsUpdate\\WindowsUpdateLog.psm1&#8221; sure enough it looks for this DLL and tries to copy it:<\/p>\n<pre class=\"lang:ps mark:4 decode:true\"># Dependencies\r\n$TRACERPT_EXE_PATH = \"$SYSTEM32\\tracerpt.exe\"\r\n$DBGHELP_DLL_PATH = \"$SYSTEM32\\DbgHelp.dll\"\r\n$SYMSRV_DLL_PATH = \"$env:ProgramFiles\\Windows Defender\\SymSrv.dll\"\r\n\r\n...\r\n\r\n\r\nCopy-Item -Path $SYMSRV_DLL_PATH -Destination $WORKDIR -Force -ErrorAction Stop<\/pre>\n<p>Bugger!<\/p>\n<p>Well, workaround is simple. Copy this DLL from any other 2016 machine (or search through the &#8220;C:\\Windows\\WinSxS\\&#8221; folder on the same machine and copy it from there) to &#8220;C:\\Program Files\\Windows Defender&#8221; and the cmdlet\u00a0will work.\u00a0<\/p>\n<p>Or &#8230; enable the Windows Defender feature and disable it from Settings.\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Starting with Windows 10 and Server 2016 Microsoft isn&#8217;t providing a WindowsUpdate.log file any more. Instead we have to run a cmdlet to generate it manually. On my Server 2016 the cmdlet gave the following error: Copy-Item : Cannot find path &#8216;C:\\Program Files\\Windows Defender\\SymSrv.dll&#8217; because it does not exist. At C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsUpdate\\WindowsUpdateLog.psm1:56 char:5 + Copy-Item -Path &hellip; <a href=\"https:\/\/rakhesh.com\/windows\/get-windowsupdatelog-symsrv-dll-error\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Get-WindowsUpdateLog SymSrv.dll error<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false}}},"categories":[85],"tags":[572],"jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/posts\/3528"}],"collection":[{"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/comments?post=3528"}],"version-history":[{"count":0,"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/posts\/3528\/revisions"}],"wp:attachment":[{"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/media?parent=3528"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/categories?post=3528"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/tags?post=3528"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}