Service pack 1 installed fine using an installer, but other incremental updates consistently failed, they would download but they'd be skipped by Windows Update and reported as having not been installed.
One fix involved deleting a folder and letting the update process recreate it, specifically this one:
This folder contains part of an internal Windows database which it uses to track updates, and a log file, dberr.txt, which was rife with error messages like these:
CatalogDB: 6:27:32 PM 2/1/2014: catdbsvc.cpp at line #3454 encountered error 0x8007000e
CatalogDB: 6:27:32 PM 2/1/2014: catadnew.cpp at line #1915 encountered error 0x8007000e
CatalogDB: 2:16:29 PM 2/2/2014: catdbsvc.cpp at line #969 encountered error 0x8007000e
Interestingly, the error 0x8007000e was frequently returned as a response in the failed attempts to update.
Based on this seemingly corrupted database folder, I decided to try deleting it and then have Windows recreate it by taking the following steps, and now updates are again able to be installed.
- Open a command prompt with administrator access.
- Stop the Cryptographic Services, which normally has a lock on the above mentioned folder, by typing this: NET STOP cryptosvc
- Rename (or, if you're brave, delete) the C:\WINDOWS\SYSTEM32\catroot2 folder.
- Start the Cryptographic Services by typing: NET START cryptosvc
- Run Windows Update, and then have it download and install one or more updates to verify that it does so successfully.
After doing this I was able to download and install the latest updates successfully.