Windows 11 22H2 update integration error 0x80070422 [1058]

BAZ.Andreas

BAZ.Andreas

New Member
Howdy im having trouble integrating updatets latest versions this started like a month ago for me and its random some time it finishes some time just skipped the parts and Dism comp/reset trows the same error and secound time finishes but no files removed also does nothing when its done without errors it doubles the updates list and apps and the image size will stay big,secound part is that on windows 10 iso it works as should it does remove the links and old versions but not on windows 11 but the main issue is im getting that weird error in latest versions now i dont remember what version was that worked great for me .....i can tell that was working cuz im on that version of windows that i just striped out and updated it to the latest 22621.963 did work great just not Dism nor comp/reset so the iso was around 5.5GB unlike windows 10 where i did not have a single issue with integrating updates or apps.Thank you for your time!!!!
 

Attachments

  • Screenshot (2).png
    Screenshot (2).png
    516.4 KB
  • Screenshot (5).png
    Screenshot (5).png
    322.5 KB
DISM or WU features have been removed, or disabled on the host. If you don't want to reinstall Windows, run a VM with a clean Windows and mod your images inside there. Dynamic Update finishes because it's just extracting files, and not a true DISM integration.
 
BAZ.Andreas said:
Howdy im having trouble integrating updatets latest versions this started like a month ago for me and its random some time it finishes some time just skipped the parts and Dism comp/reset trows the same error and secound time finishes but no files removed also does nothing when its done without errors it doubles the updates list and apps and the image size will stay big,secound part is that on windows 10 iso it works as should it does remove the links and old versions but not on windows 11 but the main issue is im getting that weird error in latest versions now i dont remember what version was that worked great for me .....i can tell that was working cuz im on that version of windows that i just striped out and updated it to the latest 22621.963 did work great just not Dism nor comp/reset so the iso was around 5.5GB unlike windows 10 where i did not have a single issue with integrating updates or apps.Thank you for your time!!!!
Click to expand...
Try Host Refresh (inplace upgrade) to fix the host, as garlin pointed.
 
Howdy thank you for your reply i did try that also i did reinstall my older build but did not help i did not disable nothing related to Windows update only DISM but as i did understand its already disabled default in Settings but i did set updates to 99 simple this was working fine until now,also i disable group policy to day and seems like that was causing issues cuz i did set it up there to but why does Ntlite fails if i set up the group policy settings i just set the updates to be manual and some extra stuff,but then DISM still in does nothing after its done.Thank you for your time!!!
 

Attachments

  • Screenshot (3).png
    Screenshot (3).png
    247.6 KB
Finding the answer will be faster if you attached your preset. I doubt GPO settings are breaking integration. The screenshots don't tell us what changes you've made.
 
Howdy yes i did it 2 times without group policy and works just fine as soon as i re enable my policy settings Ntlite broke and trows the error again about the preset i cant i did not save it also i did reinstall the windows just to make sure,here are the policy settings im using.Thank you for your time!!!
 

Attachments

  • PoliciesHKCM.reg
    129.2 KB
  • PoliciesHKCU.reg
    23.8 KB
BAZ.Andreas said:
Howdy yes i did it 2 times without group policy and works just fine as soon as i re enable my policy settings Ntlite broke and trows the error again about the preset i cant i did not save it also i did reinstall the windows just to make sure,here are the policy settings im using.Thank you for your time!!!
Click to expand...
I looked at both registry files briefly, and there's quite a bit of stuff that needs to be cleaned up. I'll try to hit all the major issues I saw at first glance.

REGISTRY PATHS
There's no need to add filepaths building up to the key you want to use. What I mean is this example below, from your HKCU file.

[HKEY_CURRENT_USER\Software\Policies]

[HKEY_CURRENT_USER\Software\Policies\Microsoft]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\HandwritingErrorReports]
"PreventHandwritingErrorReports"=dword:00000001

In this snippet, the first 3 registry paths can be completely deleted, they do nothing, because the 4th one that contains the "PreventHandwritingErrorReports" creates all those paths/folders if they don't exist. A ton of people make this same mistake though, which makes me wonder if somewhere on the internet it's teaching people to do this?

The reason I point it out is because you can save tons and tons of lines in your files by cleaning all that up, making them a lot easier to read and use, with less chances of errors too since it's less content.

MISSING REGISTRY KEYS
There are places where you do the same thing as in the "Registry Paths" I talked about above, but then it doesn't end with any kind of a registry key, so once again these aren't *doing* anything at all and can be deleted. Example:

[HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA\Certificates]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA\CRLs]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA\CTLs]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\Disallowed]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\trust]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\trust\Certificates]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\trust\CRLs]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\trust\CTLs]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\TrustedPeople]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\TrustedPublisher]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\TrustedPublisher\Certificates]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\TrustedPublisher\CRLs]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\TrustedPublisher\CTLs]

Note: there are tons more of these, this was just one giant block that really stood out.

INCORRECT REGISTRY KEYS
I'm not going to go through and check all of them, but I can see right away at least some of these keys are incorrect, for example you use both of these "AllowPrelaunch" keys with different paths:

[HKEY_CURRENT_USER\Software\Policies\Microsoft\MicrosoftEdge]
"AllowPrelaunch"=dword:00000000

[HKEY_CURRENT_USER\Software\Policies\Microsoft\MicrosoftEdge\Main]
"AllowPrelaunch"=dword:00000000

For Microsoft Edge the 1st key shown doesn't do anything, only the one with "\Main" in the path is correct. Then in the example below, there are a lot of incorrect settings.

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender]
"DisableScanOnRealtimeEnable"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection]
"DisableScanOnRealtimeEnable"=dword:00000001

In this second set, the 1st defender key is also not doing anything, only the one with "\Real-Time Protection" is valid for the "DisableScanOnRealtimeEnable" key, as well as many other similar keys that accompany it in your files.

HKCU VS HKLM
Not sure if you intentionally wanted it a certain way for a reason, but many/most/all of the policies in the HKCU file could be HKLM instead. So for example that "AllowPrelaunch" Microsoft Edge key mentioned in the previous section could be moved over.

Did you manually gather these keys, or find them from random GitHub sites, because those places are notoriously bad for sourcing reliable information.

I'd really recommend building a new registry file (taking into account the things I wrote about up above), and manually look up every single one of these keys in ADMX and also learn.microsoft.com to verify the proper paths and if the key itself is valid for W10/W11. It's how I would tackle this, and the end result would be a single file that is at least half the length of the originals, and with all the non-working keys removed.

To do this, go to the website admx.help and then click the search button on the top right and enter a key without quotes on it, such as AllowPrelaunch and it will show you the right way. You could then double-check this against current Microsoft documentation by typing "AllowPrelaunch" site: learn.microsoft.com into a Google search, including the quotes as shown, and this will limit the search to just that one website.

The other thing to mention, is that you should spend time testing every key, before integrating it. You can do the testing on a live Windows install, just install 5 or 10 keys at a time, reboot, then manually verify each one to see if they are working. By "working" I mean check and see if Defender actually gets disabled (for example), not just verifying if those keys appear in regedit.
 
Last edited:
Howdy thanks for the tip but thats just how it gets when you export it from the registry and yes some are from github and some are made up on my local machine maybe thats why i have 2 of the same key and like said with edge/main and im using the AMDX Help web page and i use that instead of the group policy kinda has more stuff than windows it self in some parts but ill test to see why Ntlite stops working as should and what key broke the integration/disable feature part and dism still even on clean non tweaked windows 11 does not work so i have no idea about it.About if you ask this is all the keys that i manually found and some from github it works out for me without issues.Thank you for your time!!!!
 

Attachments

  • Windows10-11Tweaks.reg
    753.9 KB
My reply here isn't to argue, it's some constructive criticism, and more importantly to hopefully prevent lurkers from using these reg files. This new file (Windows10-11Tweaks.reg) is way worse than the other two, it's the epitome of bad tweaks. I'll explain why:

1) I guarantee that you have introduced countless bugs and errors into Windows with these 3 files (for example, NTLite not working right). More than likely your thread here is not an NTLite program issue, it's a tweaking issue. Other Windows features and 3rd party programs will run into problems with these reg files too, you just haven't used those programs yet or noticed the other bugs that exist currently since Windows is good at logging these as errors and then trying its best to remain stable.

2) One of the only reasons Windows isn't just refusing to boot, is because most of these keys do not apply to Windows 11 and so the OS ignores them, the paths are wrong and thus the OS ignores them, or the keys are made-up and don't actually do anything thus the OS ignores them. The amount of duplicate keys here are off the charts too. By addressing the basic problems I've presented, you could easily cut these files down by 5,000 or more lines simply by fixing the super obvious formatting/organization issues, that's how bad the issues are.

3) There's no way these files were tested, which was explained in my previous post. There's even a ton of keys in this 3rd file that use the path HKEY_USERS\.DEFAULT which is yet another uneccesary thing. A lot of the keys in this 3rd file are mundane registry settings that Windows uses and don't need to be tweaked or integrated. Some of this is probably from bad registry export methods (whole branch, instead of single keys).

4) There probably are many good tweaks buried in these files, but it requires more work to pick them out than it would take to start from scratch and make a proper file with good tweaks...Have you benchmarked all this stuff? How do the benchmarks compare to a default install of Windows, versus other guides on this forum, such as the GamerOS, or my optimized image guide? Also, do some speedtest.net comparisons as well, to check out the internet aspect. Lastly, what's your task manager resources look like for threads/handles/processes/memory? If all of these tweaks were actually doing something you'd be looking at Windows XP era resource usage.

I doubt anyone is going to go through these files to find the problem, it's way too much work for a self-inflicted issue of this magnitude. You've got literally 10,000 lines between 3 files, and it's mostly bad registry tweaks...It's a more efficient use of time to start over and actually test individual keys, integrating only the ones that work, following all the guidelines I've laid out in this post and the previous.
 
Last edited:
Take a look at this guide here (link), download the tweaks folder, unzip it, then edit the .reg files inside and take a look at how they are built, compared to yours, and you'll see a huge difference. Hopefully it will help to explain where I'm coming from.

Also, for anyone else to help you further, they'll need you to post your NTLite XML preset. Be sure to remove any private information from the preset.
 
Last edited:
Howdy thank you again i did use it on my laptop that is bare low end without the policy its just fine i did help a lot but yes you might be right im kinda doing a restart thing like said clean,the xml will pin it thats all i do also did enable DISM but still it wont work and i dont know why ....if i do go back on my windows 10 PC DISM in Ntlite works as should no policy stuff but still as soon i install those seems to broke the ingeration part on windows 10 same as windows 11 so with the same tweaks as in this XML with DISM reset enable/disable is somehow the same thing on my side it wont do the clean up image and wont remove the updates i might end up editing on windows 10 until i get the point on whats up with DISM on Windows 11 my side.Thank you for your time!!!
 

Attachments

  • Auto-saved 31f44b44.xml
    19.7 KB
Howdy so i made a clean install of windows 10 re done everything manual DISM in Ntlite works fine no issues at all no weird errors it does clean up the image but i did the same for Windows 11 clean install no apps remove no extra settings but some how DISM still wont work in Ntlite for me is there something im missing or i need to enable something for it in Windows 11 that i dont know.Thank you for your time!!!
 
BAZ.Andreas said:
Howdy so i made a clean install of windows 10 re done everything manual DISM in Ntlite works fine no issues at all no weird errors it does clean up the image but i did the same for Windows 11 clean install no apps remove no extra settings but some how DISM still wont work in Ntlite for me is there something im missing or i need to enable something for it in Windows 11 that i dont know.Thank you for your time!!!
Click to expand...
To clarify, in your W11 install did you use NTLite at all to create that image you installed Windows with? If so, please attach your XML preset and be sure to remove your private info by editing it before attaching it here.

If you did not use NTLite at all for W11 and just installed it using the ISO from Microsoft, please let us know what error appears when you load up NTLite and try to modify an image. Also check to make sure your antivirus, such as Defender, has realtime-protection disabled when using NTLite or it will cause problems.

Lastly, are you still adding in registry tweaks or other changes after W11 was installed? If so, attach that information too.
 
Howdy yes i did use Ntlite for Win11 ISO cuz the TPM check and thats it but that goes in to the boot.wim not the install.wim and no there are no errors this time like the title said the errors seems be caused by the group policy reg file.
No i dont use antivirus i did remove it also i did left it and let Ntlite disable it still was the same with or without even i did remove it complet disable to just in case and still same issue DISM wont clean the image,i could edit both ISO from Win10 just fine so to make it clear in Win10 everything is fine now i can edit both Win10/11 ISO install the updates and use DISM to clean up in Ntlite even both comp/reset works fine for me but not in Win11.
Thats both Win10 and Win11,i might try again on the next version of Win11 maybe its bugged or something.
Thank you for your time!!
 

Attachments

  • Auto-saved 31f44b44.xml
    4.5 KB
  • Auto-saved 947fdb4a.xml
    4.9 KB
Using a diffmerge tool I can see that the differences between these XML files you posted are as follows. It may be worth investigating these to see if one of them is the culprit, since your W10 image works, but W11 does not:

1) Clean Hotfixed Leftovers:
Your W10 image has this setting->
<CleanHotfixedLeftovers>0</CleanHotfixedLeftovers>
While your W11 image has this setting->
<CleanHotfixedLeftovers>1</CleanHotfixedLeftovers>

2) OptimizeAppX:
Your W10 image has this setting->
<OptimizeAppX>false</OptimizeAppX>
While your W11 image has this setting->
<OptimizeAppX>true</OptimizeAppX>

3) There's also two additional CMD tweaks and a .reg file in the W10 image, but adding them to W11 I doubt would help solve the issue, if anything they would contribute to problems on the W10 image, but you said that one works properly.
 
Howdy yes im trying again install Ntlite on another partition than windows partition this time and see if it will work as should and try out manual updates but i bet will be the same.
Ah that some cmd is for "bcdedit /set useplatformclock false,bcdedit /set useplatformtick true,bcdedit /set disabledynamictick true,bcdedit /set tscsyncpolicy Legacy,bcdedit /set bootmenupolicy Legacy,bcdedit /set bootuxdisabled true,bcdedit /set bootux disabled,bcdedit /set quietboot true,bcdedit /set hypervisorlaunchtype off".
Also i did google a bit in time found something but did not help at all i think its only for DISM in side of windows it self has nothing to do with Ntlite Dism tool but i did try atleast,
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Configuration
DisableComponentBackups=1
DisableResetbase=1/0 i saw this changes by Ntlite in Win10 when used Dism/comp its on 1 when used Dism/resetbase it will be 0
SupersededActions=1/3 found only does nothing my end
Thank you again for your time!!!
 
Howdy so the manual download update file does not work is the same Dism wont clean.
I have gone back to my Win10 pc to see if that install.wim will clean up using Dism in Ntlite and it does.
Installing on other partition Ntlite using other folders creating a new user/Ms account still wont make Ntlite Dism work nor disabling UAC.
Removed Security Center and Defender with Ntlite still wont help.
Here is the XML file that i just used Dism and install the updates in it the comulative update was downloaded and integrated on Win11 but i broke that Windows to pice and wont boot cuz i disabled some raw security things .....will try again on a new version if it will be there a 23h1/2 and see if it works,until then i stick to Win10 Ntlite use.
If got some idea about why does Ntlite Dism wont work in Win11 im willing to try them out even if it brokes windows,i just need to reinstall Win11.
Thank you for your time!!

Edit:
Done it 2 times in a row both type of versions one from Mc-tool windows and a normal one both cleans as should on Win10 here si my other XML file from it.
 

Attachments

  • Auto-saved f140f27f.xml
    5.1 KB
  • Auto-saved 31f44b44.xml
    6.8 KB
Last edited:
I think at this point we need to eliminate all variables. I would take a W11 ISO, preferably version 21H2 (use the Rufus tool to download it), as the official 22H2 from Microsoft is buggy since they don't update their ISO links, and without the patches that come later the 22H2 ISO is too buggy to use.

Also, uninstall NTLite, and download the latest version. We never asked, but what version of NTLite are you using, maybe it's too old? Install the latest one, activate it if you bought a license, keep all the default settings, then proceed below.

Use NTLite to convert that unmodified, official W11 21H2 ISO into WIM format, and add your BypassNRO and TPM tweaks, and that's it. Absolutely no other modifications whatsoever, no matter how harmless they seem. Install that W11 and after you reach the desktop, load up NTLite and do the stuff you've been trying to accomplish, and see if it works properly.

If that still doesn't work, then there has to be some other problem going on, that isn't related to NTLite, because nobody else is reporting this same struggle right now.

Note: check your BIOS, *disable* Virtualization and Vt-d, then *enable* HPET and DEP, before trying to reinstall Windows. If all else fails, just stick to W10, it's what I use and recommend anyway (specifically W10 21H2, since the 22H2 versions are buggy).
 
Last edited:
Howdy thanks for the tip i will do it right now as i get back and report back if it works or not.
No issue on Win10 22h2 latest update and works perfect no issues can confirm im using that right now and Ntlite works fine on it.
Will not go back to Win10 21h2 i had some weird CPU timer issue or something and DPC issues was out of the roof 22h2 got it fixed.
Issue is only on Win11 22h2 cuz thats the only version i can get but now that you told me rufus can download older version i will give it a go.
Yes no other tweaks just as it is with my TPM stuff but done the same for 22h2.
Bios no need to make changes i believe and i dont have HPET settings and its Enabled by default if i dont mistake cant turn it off only DEP and its ON by default.
Im not sure about people using Ntlite on Win11 believe they made the iso maybe on Win10 like me or they did not update to the 22h2 i dont know what to say here its weird.
I dont balme the software it works as should even on Win7.
Thank you again !!!
 
You must log in or register to reply here.
Back
Top