Resolve a Windows upgrade rollback in the SECOND_BOOT phase

A Windows 10 or Windows 11 feature upgrade installs far enough to reboot into the new operating system, then fails during the SECOND_BOOT phase and rolls back to the previous working version. The useful identifier is the complete pair: a result code such as 0xC1900101 plus an extended code such as 0x40017. The extended code locates the setup phase and operation; it must not be discarded.

This is usually an upgrade compatibility, driver, migration, servicing, space, or unexpected-process failure—not a reason to rebuild the normal Windows BCD after rollback. Use boot repair only if the rollback itself leaves Windows unable to boot and produces independent boot evidence.

Adjacent driver-phase searches include 0xC1900101 - 0x30018, 0xC1900101 - 0x30017, 0xC1900101 - 0x3000D, 0xC1900101 - 0x20017, and 0xC1900101 - 0x2000C. Keep them in the broader upgrade catalog, but do not label them SECOND_BOOT unless the extended code and SetupDiag do.

Use this procedure after Windows successfully rolls back to the prior Windows 10/11 installation and reports a SECOND_BOOT failure or one of the complete phase/operation pairs above. It is designed to turn logs into one targeted correction before the next attempt.

Do not use it for ordinary monthly cumulative-update errors without a feature-upgrade rollback, a clean install, a computer that cannot boot after rollback, unsupported hardware bypasses, or an enterprise deployment controlled by task sequences without incorporating its deployment logs. Do not classify a bare 0xC1900101 as SECOND_BOOT without the extended code.

The exact root cause may remain unknown until SetupDiag and logs are reviewed. The full result/extended code, current and target versions, attempt time, setup method, SetupDiag result, named driver/application/process, free space, and retry outcome may not remain unknown.

Before you start:

The rolled-back Windows installation starts normally
Administrator access
At least several gigabytes of space for copied logs and dumps
Microsoft's current SetupDiag tool
Current supported Windows installation media or Windows Update path
A verified system backup before the next upgrade attempt
Vendor-supported driver or application update when a component is identified

Do not immediately rerun Setup. Log folders in $WINDOWS.~BT can be replaced by another attempt or cleanup. While the rolled-back system is stable, create an evidence folder and preserve the current attempt first.

Do not discard the extended code or phase/operation wording.
Do not call every 0xC1900101 a storage-controller error.
Do not rebuild BCD after a successful rollback unless independent boot evidence requires it.
Do not delete $WINDOWS.~BT before copying its logs.
Do not run registry cleaners, driver-updater utilities, or broad permission resets.
Do not disable every service without hiding Microsoft services and recording the baseline.
Do not repeatedly retry Setup without preserving and comparing each attempt's logs.
Do not bypass a compatibility safeguard merely to force installation.

Stop after a repeated identical failure with no stronger evidence, when SetupDiag/logs are unavailable, hardware is unstable, the target version is unsupported for the device, a safeguard hold remains, or the repair enters deferred RAID/VMD/IRST territory.

Check the cause

Record the exact message and complete code pair from Settings > Windows Update > Update history, the Setup failure dialog, or Event Viewer. Do not record only 0xC1900101.

Record the running version:

winver

Also save system information:

md C:\UpgradeEvidence
msinfo32 /nfo C:\UpgradeEvidence\system-before-retry.nfo

Copy the key setup-log trees before cleanup or retry:

robocopy C:\$WINDOWS.~BT\Sources\Panther C:\UpgradeEvidence\Panther /E /COPY:DAT /R:1 /W:1
robocopy C:\$WINDOWS.~BT\Sources\Rollback C:\UpgradeEvidence\Rollback /E /COPY:DAT /R:1 /W:1
robocopy C:\Windows\Panther C:\UpgradeEvidence\Windows-Panther /E /COPY:DAT /R:1 /W:1

Preserve dumps created during the attempt:

robocopy C:\Windows\Minidump C:\UpgradeEvidence\Minidump *.dmp /R:1 /W:1
copy C:\Windows\MEMORY.DMP C:\UpgradeEvidence\

Run the current Microsoft SetupDiag from an elevated Command Prompt:
```
SetupDiag.exe /Output:C:\UpgradeEvidence\SetupDiagResults.log
```
Preserve all additional SetupDiag files it creates. Open SetupDiagResults.log and record:
- Matching profile or rule
- Result and extended code
- Phase and operation
- Named device, driver, application, service, migration object, or plug-in
- Referenced log and line/time
Search the copied setuperr.log, setupact.log, and rollback setupapi.dev.log around the final failure time. Work backward from the rollback trigger; isolated earlier errors may be benign.

Capture driver and application inventory:

pnputil /enum-drivers > C:\UpgradeEvidence\third-party-drivers-before-retry.txt
driverquery /v /fo csv > C:\UpgradeEvidence\driverquery-before-retry.csv
powershell -NoProfile -Command "Get-AppxPackage | Select Name,Version,PackageFullName | Out-File -Width 300 C:\UpgradeEvidence\appx-before-retry.txt"

Record free space on the Windows, ESP/system, and Recovery partitions. Use Disk Management or DiskPart to detect the layout; do not ask the reader to guess firmware mode or partition placement.
Choose a resolution branch only when SetupDiag, logs, dumps, compatibility output, or a direct retry comparison identifies it.

Branch A — 0xC1900101 - 0x40017 or another named driver/device failure

Identify the exact .sys, device instance, service, or oem#.inf cited near the final failure.
Prefer the following in order:
1. Install a newer vendor-supported driver specifically correcting upgrade compatibility.
2. Roll back the driver if the failure began after its update.
3. Uninstall the owning nonessential application or device package.
4. Physically disconnect a nonessential external device for the upgrade.

Export a third-party package before removal:

pnputil /export-driver <oem-number.inf> C:\UpgradeEvidence\DriverBackup

Remove it only when exact identity and nonessential status are established:
```
pnputil /delete-driver <oem-number.inf> /uninstall
```
Do not mass-update every driver. Do not assume 0xC1900101 specifically means storage.
Disconnect nonessential USB devices, docks, external storage, and extra displays during the retry. Keep required input and network only if the selected setup path needs it.

Branch B — 0xC1900101 - 0x4000D or 0x8007042B - 0x4000D during MIGRATE_DATA

Search rollback logs for the last named migration object, profile, service, shell extension, filter, or process.
For a named third-party process or service, uninstall or update its owning product.
If logs show a background-process collision but do not justify removal, perform a documented clean boot:
- In msconfig, hide all Microsoft services before disabling remaining non-Microsoft services.
- Disable nonessential startup applications in Task Manager.
- Record everything disabled.
Temporarily uninstall third-party antivirus or endpoint filter software only when the logs or vendor guidance support it and its reinstall package/license is available. Merely turning off its interface may leave kernel filters loaded.
Check profile and data paths named by migration. Repair permissions or file-system issues only when the log identifies them.
Retry once. If the same migration object fails, preserve the new logs and escalate rather than adding more generic cleanup.

Branch C — 0xC1900208 - 0x4000C or 0x800F0923 compatibility block

Use SetupDiag, the compatibility report, and setup logs to identify the exact application, driver, or feature.
Update it to a version explicitly supporting the target Windows version, or uninstall it through its supported uninstaller.
Remove abandoned low-level utilities and filters only after confirming ownership and backup.
Restart and rerun the compatibility scan before starting the full upgrade.
Do not bypass a compatibility hold without understanding the blocked component and recovery consequences.

Branch D — Space codes 0x80070070 - 0x50011, -0x50012, or -0x60000

Determine which partition Setup says lacks space. Do not assume it is only C:.
Back up and remove ordinary temporary files through Settings > System > Storage > Temporary files or Disk Cleanup.
Move personal data to another backed-up volume when necessary.
Confirm Windows, ESP/system, and Recovery partitions are healthy and meet the target upgrade's current requirements.
Do not shrink, delete, or retype partitions as an improvised first response. Partition resizing requires a separately imaged procedure.
Record free space before the retry.

Branch E — Component-store or assembly codes 0x80073712, 0x800F081F, or 0x800736B3

From elevated Command Prompt, check and repair the running component store:

dism /Online /Cleanup-Image /ScanHealth
dism /Online /Cleanup-Image /RestoreHealth
sfc /scannow

Preserve C:\Windows\Logs\DISM\DISM.log and C:\Windows\Logs\CBS\CBS.log.
If 0x800F081F says source files cannot be found, use a compatible source for the installed edition, language, architecture, and build. Exact version matters here.
Restart and confirm DISM/SFC are clean before retrying Setup.
Treat 0x800736B3 as a missing side-by-side assembly/component-store problem, not a generic “app missing” message.

Branch F — 0xC0000005 access violation or changing crash modules

Preserve SetupDiag and crash dumps. 0xC0000005 means access violation, not ordinary access denied.
Analyze any dump and identify the faulting process/module.
Return CPU and memory settings to documented defaults and disable XMP/EXPO for the retry.
Run FIX-028 when crashes or named modules vary.
Update or remove only the component supported by the dump/log. Do not apply file-permission resets to the whole Windows tree.

Branch G — Prepare one controlled retry

Confirm the prior Windows installation is healthy and fully backed up.
Install current servicing-stack/cumulative updates required for the supported upgrade path.
Correct exactly the demonstrated blocker from Branch A–F.
Disconnect nonessential external devices.
Preserve at least 30 GB of working free space on the Windows volume unless Microsoft's current requirement or Setup's own calculation calls for more.
Use one supported upgrade path and current media. Record whether Dynamic Update is enabled.
Do not change controller mode, firmware architecture, Secure Boot keys, BCD, multiple drivers, and multiple applications at the same time.
Run the upgrade once. If it fails, preserve the new logs before another attempt and compare the final failure with the prior attempt.

Verify the result

winver shows the intended target Windows version and build.
Windows completes two normal restarts and one cold start without rollback.
Device Manager has no unexplained devices or problem codes.
The component corrected before the retry functions with a supported version.
DISM and SFC are clean when servicing corruption was involved.
Windows Update completes a scan after upgrade.
Pre- and post-retry SetupDiag results, logs, inventories, and code pairs are archived.
Clean-boot settings and security software are restored deliberately.
The corrected component is named and the upgrade completes: The causal mapping is strong.
The phase/code changes: The original blocker may be cleared; diagnose the new complete pair independently.
The same driver or migration object returns: The correction was incomplete or the wrong package copy remains. Do not broaden changes blindly.
SetupDiag reports no match: Manually review the final rollback chronology and device-install log; retain an unknown-cause label if no mechanism is defensible.
Rollback no longer boots: Switch to the boot-failure writeup that matches the new screen. Do not continue the upgrade procedure.
A RAID/VMD/IRST component is named: Retain the case but move it to the deferred specialist branch.

Undo the change if needed

Windows Setup normally performs the primary rollback automatically. Before retrying, create or verify a system image. Re-enable clean-boot services and startup items after the upgrade succeeds or testing ends. Reinstall an exported driver package only if it was wrongly removed and is known compatible:

pnputil /add-driver C:\UpgradeEvidence\DriverBackup\<driver.inf> /install

Restore third-party security software immediately after the upgrade test if it was deliberately removed and the system is otherwise stable.

Preparation, backups and recovery reference

Sources and evidence

Case reports describe observed outcomes. They do not establish a measured success rate or independent laboratory reproduction.

DISM Operating System Package (.cab or .msu) Servicing Command-Line Options — documentation
How to uninstall a Windows Update — documentation
Resolve Windows upgrade errors: Technical information for IT Pros — documentation
SetupDiag — documentation
Windows Setup Log Files and Event Logs — documentation
May 2026 security update might fail to install with error 0x800f0922 — documentation

Windows error codes and exact messages

Full code or identifier	Searchable Windows message or canonical meaning	Most useful initial branch
`0xC1900101 - 0x40017`	The installation failed in the SECOND_BOOT phase with an error during BOOT operation	Driver or device failure during the new OS's second-boot startup. Find the named driver/device in SetupDiag and rollback logs.
`0xC1900101 - 0x4000D`	The installation failed in the SECOND_BOOT phase with an error during MIGRATE_DATA operation	Driver-related rollback associated with data migration. Inspect migration, device, and crash evidence.
`0x8007042B - 0x4000D`	SECOND_BOOT/MIGRATE_DATA; `0x8007042B` maps to `ERROR_PROCESS_ABORTED`	A process terminated unexpectedly during migration. Identify the process or component before using clean boot.
`0xC1900208 - 0x4000C`	`MOSETUP_E_COMPAT_INSTALLREQ_BLOCK` / incompatible application or compatibility block	Remove or update the specifically identified incompatible application or feature.
`0x800F0923`	A driver or other software is incompatible with the upgrade	Use compatibility and setup logs to name it.
`0x8007001F`	`ERROR_GEN_FAILURE` / A device attached to the system is not functioning	Investigate the device and driver named near the failure.
`0xC0000005`	`STATUS_ACCESS_VIOLATION`	A setup process or driver referenced invalid memory. It does not mean ordinary file access was denied.
`0x80070070 - 0x50011`	Insufficient space during user-data migration	Free verified space on the relevant system or reserved partition.
`0x80070070 - 0x50012`	Insufficient space during user-data migration	Same family; preserve the full pair and log context.
`0x80070070 - 0x60000`	Insufficient space during a later setup operation	Check free space and setup's named target.
`0x80073712`	`ERROR_SXS_COMPONENT_STORE_CORRUPT`	Component-store files are missing or corrupt.
`0x800F081F`	`CBS_E_SOURCE_MISSING` / source files could not be found	Repair source is unavailable or unsuitable.
`0x800736B3`	`ERROR_SXS_ASSEMBLY_NOT_FOUND`	A required side-by-side assembly is absent. This is an assembly/component-store error.
`0x80070020`	`ERROR_SHARING_VIOLATION`	Another process has a file open that Setup needs. Identify it in the logs.
`0xC1900107`	A cleanup operation from a previous installation attempt is pending	Restart, complete cleanup, and preserve prior logs before retrying.
`0x80200056`	The upgrade process was interrupted by a restart or sign-out	Correct the interruption or power issue before retrying.
`0x80070002 - 0x20009`	Setup could not find a required file during SAFE_OS/PREPARE_ROLLBACK or associated device scan	Disconnect nonessential disks and validate media/log context. It is not a SECOND_BOOT code but can resemble the same rollback story.

Confidence is high when SetupDiag/logs identify one component, that component is corrected, and the next upgrade succeeds. It is moderate when a clean boot or device disconnection succeeds without naming the exact participant. Stop after a repeated identical failure with no stronger evidence, when SetupDiag/logs are unavailable, hardware is unstable, the target version is unsupported for the device, a safeguard hold remains, or the repair enters deferred RAID/VMD/IRST territory.