Win7、2008R2 Bypass ESU最后一个补丁截止2025年6月，6月后的补丁要么安装不上，要么蓝屏报UNSUPPORTED_PROCESSOR

原创

Windows技术交流

修改于 2025-09-10 07:46:03

1260

Server2008R2 Bypass ESU最后一个兼容性较高的补丁是2025年6月的补丁，6月后的补丁（比如KB5062065）要么安装不上，要么蓝屏报UNSUPPORTED_PROCESSOR。

这几个补丁我试了，在部分AMD机型蓝屏（不区别云服务器还是物理机，我在自己AMD Ryzen 7 3800X电脑上安装VMware搞虚拟机测试的）

2025-07 适用于基于 x64 的系统的 Windows Server 2008 R2 仅安全性质量更新（KB5062619）
2025-07 适用于基于 x64 的系统的 Windows Server 2008 R2 月度安全质量汇总（KB5062632）

2025-08 适用于基于 x64 的系统的 Windows Server 2008 R2 仅安全性质量更新（KB5063927）
2025-08 适用于基于 x64 的系统的 Windows Server 2008 R2 月度安全质量汇总（KB5063947）

在网上下载的这个ISO里面集成的是：2025年6月KB5061078

7601.27766.250512-1833.WIN7SP1_LDR_ESCROW_CLIENTMULTI_X64FRE_ZH-CN.ISO

2025-06 适用于基于 x64 的系统的 Windows Server 2008 R2 月度安全质量汇总（KB5061078）

安装dotnet4.8的2025年7月补丁KB5062065时报错

2025-07 适用于 Windows Server 2008 R2 的 .NET Framework 4.8 安全和质量汇总，适合基于 x64 的系统 (KB5062065)
Final Result: Installation failed with error code: (0x80070643), "安装时发生严重错误 "
MsiGetCachedPatchPath with patch code {6880BC24-E32F-372C-8EFC-B966B21FB5F1} failed

已尝试的办法：

①msiexec /f {16735AF7-1D8D-3681-94A5-C578A61EC832}修复无果

②从https://www.microsoft.com/en-us/download/details.aspx?id=30135下载Microsoft .NET Framework Repair Tool 修复无果

③关闭并禁用windows defender、卸载安全软件

④通过appwiz.cpl程序列表卸载dotnet4.8或者从https://aka.ms/Program_Install_and_Uninstall下载MicrosoftProgram_Install_and_Uninstall.meta.diagcab卸载或通过.NET Framework Setup Cleanup Utility卸载.NET Framework 4

⑤下载ndp48-x86-x64-allos-enu.exe重新安装dotnet4.8，然后再安装KB5062065仍报错

⑥确定Windows Update、签名验证、SHA-2 支持、根证书、Windows Installer都没有问题，安装KB5062065仍报错

Server 2008 R2 已退役，后续 .NET 4.8 月度 MSP 对 ESU 或特定环境有隐含依赖；不过从现有日志看签名验证已成功，且引擎继续进入打补丁阶段。决定性线索通常在“MSP0.txt”那份详细 MSI 日志里（会包含具体哪个组件/文件/变换失败，并出现“Return value 3”附近的调用栈）。

详细的日志文件在%temp%下，名称是这样

%temp%\KB5062065_yyyymmdd_hhmmssxxx-Microsoft .NET Framework 4.8-MSP0.txt

例如：

C:\Users\ADMINI~1\AppData\Local\Temp\1\KB5062065_20250909_120255893-Microsoft .NET Framework 4.8-MSP0.txt
C:\Users\ADMINI~1\AppData\Local\Temp\2\KB5062065_20250909_111108407-Microsoft .NET Framework 4.8-MSP0.txt

节选内容如下，最终确认安装KB5062065报错是ESU不符合要求所致。

MSI (s) (E4:58) [11:12:23:971]: Note: 1: 2205 2: 3: Control
MSI (s) (E4:58) [11:12:23:971]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\Users\ADMINI~1\AppData\Local\Temp\2\KB5062065_20250909_111108407-Microsoft .NET Framework 4.8-MSP0.txt'.
MSI (s) (E4:58) [11:12:23:971]: Command Line: PATCH=C:\1d3e714074829de075429dd75bc9\NDP48-KB5062065.msp CURRENTDIRECTORY=C:\1d3e714074829de075429dd75bc9 CLIENTUILEVEL=3 MSICLIENTUSESEXTERNALUI=1 CLIENTPROCESSID=532
MSI (s) (E4:58) [11:12:23:971]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{A3B8C0BC-2CD0-44D5-ABCA-606B07FB0E21}'.
MSI (s) (E4:58) [11:12:23:971]: Product Code passed to Engine.Initialize: '{16735AF7-1D8D-3681-94A5-C578A61EC832}'
MSI (s) (E4:58) [11:12:23:971]: Product Code from property table before transforms: '{16735AF7-1D8D-3681-94A5-C578A61EC832}'
MSI (s) (E4:58) [11:12:23:971]: Product Code from property table after transforms: '{16735AF7-1D8D-3681-94A5-C578A61EC832}'
MSI (s) (E4:58) [11:12:23:971]: Product registered: entering maintenance mode
MSI (s) (E4:58) [11:12:23:971]: Determined that existing product (either this product or the product being upgraded with a patch) is installed per-machine.
MSI (s) (E4:58) [11:12:23:971]: Product {16735AF7-1D8D-3681-94A5-C578A61EC832} is admin assigned: LocalSystem owns the publish key.
MSI (s) (E4:58) [11:12:23:971]: Product {16735AF7-1D8D-3681-94A5-C578A61EC832} is managed.
MSI (s) (E4:58) [11:12:23:971]: MSI_LUA: Credential prompt not required, user is an admin
MSI (s) (E4:58) [11:12:23:971]: PROPERTY CHANGE: Adding ProductState property. Its value is '5'.
MSI (s) (E4:58) [11:12:23:971]: PROPERTY CHANGE: Adding ProductToBeRegistered property. Its value is '1'.
MSI (s) (E4:58) [11:12:23:971]: Package name retrieved from configuration data: 'netfx_Full_x64.msi'
MSI (s) (E4:58) [11:12:23:986]: Note: 1: 2262 2: AdminProperties 3: -2147287038
MSI (s) (E4:58) [11:12:23:986]: Machine policy value 'DisableMsi' is 1
MSI (s) (E4:58) [11:12:23:986]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (E4:58) [11:12:23:986]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (E4:58) [11:12:23:986]: Product {16735AF7-1D8D-3681-94A5-C578A61EC832} is admin assigned: LocalSystem owns the publish key.
MSI (s) (E4:58) [11:12:23:986]: Product {16735AF7-1D8D-3681-94A5-C578A61EC832} is managed.
MSI (s) (E4:58) [11:12:23:986]: Running product '{16735AF7-1D8D-3681-94A5-C578A61EC832}' with elevated privileges: Product is assigned.
MSI (s) (E4:58) [11:12:23:986]: PROPERTY CHANGE: Adding PATCH property. Its value is 'C:\1d3e714074829de075429dd75bc9\NDP48-KB5062065.msp'.
MSI (s) (E4:58) [11:12:23:986]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\1d3e714074829de075429dd75bc9'.
MSI (s) (E4:58) [11:12:23:986]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'.
MSI (s) (E4:58) [11:12:23:986]: PROPERTY CHANGE: Adding MSICLIENTUSESEXTERNALUI property. Its value is '1'.
MSI (s) (E4:58) [11:12:23:986]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '532'.
MSI (s) (E4:58) [11:12:23:986]: Machine policy value 'DisableAutomaticApplicationShutdown' is 0
MSI (s) (E4:58) [11:12:23:986]: PROPERTY CHANGE: Adding MsiRestartManagerSessionKey property. Its value is 'c207586992baed4a830e5a9495f101a5'.
MSI (s) (E4:58) [11:12:23:986]: RESTART MANAGER: Session opened.
MSI (s) (E4:58) [11:12:23:986]: TRANSFORMS property is now:
MSI (s) (E4:58) [11:12:23:986]: PROPERTY CHANGE: Adding PRODUCTLANGUAGE property. Its value is '0'.
MSI (s) (E4:58) [11:12:23:986]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '300'.
MSI (s) (E4:58) [11:12:23:986]: SHELL32::SHGetFolderPath returned: C:\Users\Administrator\AppData\Roaming
MSI (s) (E4:58) [11:12:23:986]: SHELL32::SHGetFolderPath returned: C:\Users\Administrator\Favorites
MSI (s) (E4:58) [11:12:24:002]: SHELL32::SHGetFolderPath returned: C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Network Shortcuts
MSI (s) (E4:58) [11:12:24:002]: SHELL32::SHGetFolderPath returned: C:\Users\Administrator\Documents
MSI (s) (E4:58) [11:12:24:002]: SHELL32::SHGetFolderPath returned: C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
MSI (s) (E4:58) [11:12:24:002]: SHELL32::SHGetFolderPath returned: C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent
MSI (s) (E4:58) [11:12:24:002]: SHELL32::SHGetFolderPath returned: C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\SendTo
MSI (s) (E4:58) [11:12:24:002]: SHELL32::SHGetFolderPath returned: C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Templates
MSI (s) (E4:58) [11:12:24:002]: SHELL32::SHGetFolderPath returned: C:\ProgramData
MSI (s) (E4:58) [11:12:24:002]: SHELL32::SHGetFolderPath returned: C:\Users\Administrator\AppData\Local
MSI (s) (E4:58) [11:12:24:002]: SHELL32::SHGetFolderPath returned: C:\Users\Administrator\Pictures
MSI (s) (E4:58) [11:12:24:018]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (s) (E4:58) [11:12:24:018]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
MSI (s) (E4:58) [11:12:24:018]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
MSI (s) (E4:58) [11:12:24:018]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu
MSI (s) (E4:58) [11:12:24:018]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop
MSI (s) (E4:58) [11:12:24:018]: SHELL32::SHGetFolderPath returned: C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (s) (E4:58) [11:12:24:018]: SHELL32::SHGetFolderPath returned: C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
MSI (s) (E4:58) [11:12:24:018]: SHELL32::SHGetFolderPath returned: C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
MSI (s) (E4:58) [11:12:24:033]: SHELL32::SHGetFolderPath returned: C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu
MSI (s) (E4:58) [11:12:24:033]: SHELL32::SHGetFolderPath returned: C:\Users\Administrator\Desktop
MSI (s) (E4:58) [11:12:24:033]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates
MSI (s) (E4:58) [11:12:24:033]: SHELL32::SHGetFolderPath returned: C:\Windows\Fonts
MSI (s) (E4:58) [11:12:24:033]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16
MSI (s) (E4:58) [11:12:24:033]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated.
MSI (s) (E4:58) [11:12:24:033]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'.
MSI (s) (E4:58) [11:12:24:033]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
MSI (s) (E4:58) [11:12:24:033]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (s) (E4:58) [11:12:24:033]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'QQ'.
MSI (s) (E4:58) [11:12:24:033]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (s) (E4:58) [11:12:24:033]: PROPERTY CHANGE: Adding COMPANYNAME property. Its value is 'TENCENT'.
MSI (s) (E4:58) [11:12:24:033]: PROPERTY CHANGE: Adding Installed property. Its value is '00:00:00'.
MSI (s) (E4:58) [11:12:24:033]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\Windows\Installer\8cb00.msi'.
MSI (s) (E4:58) [11:12:24:033]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\Windows\Installer\8cb00.msi'.
MSI (s) (E4:58) [11:12:24:033]: Machine policy value 'MsiDisableEmbeddedUI' is 0
MSI (s) (E4:58) [11:12:24:033]: EEUI - Disabling MsiEmbeddedUI due to existing external or embedded UI
MSI (s) (E4:58) [11:12:24:033]: EEUI - Disabling MsiEmbeddedUI for service because it's not a quiet/basic install
MSI (s) (E4:58) [11:12:24:033]: PROPERTY CHANGE: Adding MSPSRC40693D4400D7310D839572393035A3A8 property. Its value is 'C:\Windows\Installer\8cb01.msp'.
MSI (s) (E4:58) [11:12:24:033]: PROPERTY CHANGE: Adding msp property. Its value is 'C:\Windows\Installer\8cb01.msp'.
MSI (s) (E4:58) [11:12:24:033]: PROPERTY CHANGE: Adding MSPSRC6880BC24E32F372C8EFCB966B21FB5F1 property. Its value is 'C:\Windows\Installer\4e1f0.msp'.
MSI (s) (E4:58) [11:12:24:033]: PROPERTY CHANGE: Modifying msp property. Its current value is 'C:\Windows\Installer\8cb01.msp'. Its new value: 'C:\1d3e714074829de075429dd75bc9\NDP48-KB5062065.msp'.
MSI (s) (E4:58) [11:12:24:033]: Machine policy value 'DisableRollback' is 0
MSI (s) (E4:58) [11:12:24:033]: User policy value 'DisableRollback' is 0
MSI (s) (E4:58) [11:12:24:033]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'.
MSI (s) (E4:58) [11:12:24:033]: PROPERTY CHANGE: Adding MsiUISourceResOnly property. Its value is '1'.
MSI (s) (E4:58) [11:12:24:033]: PROPERTY CHANGE: Adding QFEUpgrade property. Its value is '2'.
=== Logging started: 2025/9/9 11:12:24 ===
MSI (s) (E4:58) [11:12:24:033]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'.
MSI (s) (E4:58) [11:12:24:033]: Doing action: INSTALL
MSI (s) (E4:58) [11:12:24:033]: Note: 1: 2205 2: 3: ActionText
Action start 11:12:24: INSTALL.
MSI (s) (E4:58) [11:12:24:033]: Running ExecuteSequence
MSI (s) (E4:58) [11:12:24:049]: Transforming table InstallExecuteSequence.

MSI (s) (E4:58) [11:12:24:049]: Transforming table InstallExecuteSequence.

MSI (s) (E4:58) [11:12:24:049]: Note: 1: 2262 2: InstallExecuteSequence 3: -2147287038
MSI (s) (E4:58) [11:12:24:049]: Transforming table InstallExecuteSequence.

MSI (s) (E4:58) [11:12:24:049]: Transforming table InstallExecuteSequence.

MSI (s) (E4:58) [11:12:24:049]: Note: 1: 2262 2: InstallExecuteSequence 3: -2147287038
MSI (s) (E4:58) [11:12:24:049]: Doing action: FindRelatedProducts
MSI (s) (E4:58) [11:12:24:049]: Note: 1: 2205 2: 3: ActionText
MSI (s) (E4:58) [11:12:24:049]: Skipping FindRelatedProducts action: not run in maintenance mode
Action start 11:12:24: FindRelatedProducts.
MSI (s) (E4:58) [11:12:24:049]: Skipping action: CA_BlockOlderVersionInstall (condition is false)
MSI (s) (E4:58) [11:12:24:049]: Doing action: AppSearch
MSI (s) (E4:58) [11:12:24:049]: Note: 1: 2205 2: 3: ActionText
Action ended 11:12:24: FindRelatedProducts. Return value 0.
Action start 11:12:24: AppSearch.
MSI (s) (E4:58) [11:12:24:049]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (s) (E4:58) [11:12:24:049]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v4.0\Full\SBSDisabled 3: 2
MSI (s) (E4:58) [11:12:24:049]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (s) (E4:58) [11:12:24:049]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v4.0\Full\SBSDisabled 3: 2
MSI (s) (E4:58) [11:12:24:049]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (s) (E4:58) [11:12:24:049]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (s) (E4:58) [11:12:24:049]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\SOFTWARE\Microsoft\NET Framework Setup\OS Integration 3: 2
MSI (s) (E4:58) [11:12:24:049]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (s) (E4:58) [11:12:24:049]: Doing action: CA_ASPPlusVersionCmd_amd64
MSI (s) (E4:58) [11:12:24:049]: Note: 1: 2205 2: 3: ActionText
Action ended 11:12:24: AppSearch. Return value 1.
MSI (s) (E4:58) [11:12:24:065]: Transforming table CustomAction.

MSI (s) (E4:58) [11:12:24:065]: Transforming table CustomAction.

MSI (s) (E4:58) [11:12:24:065]: Note: 1: 2262 2: CustomAction 3: -2147287038
MSI (s) (E4:58) [11:12:24:065]: Transforming table CustomAction.

MSI (s) (E4:58) [11:12:24:065]: Transforming table CustomAction.

MSI (s) (E4:58) [11:12:24:065]: Note: 1: 2262 2: CustomAction 3: -2147287038
MSI (s) (E4:58) [11:12:24:065]: PROPERTY CHANGE: Adding ASPPlusVersion property. Its value is '4.0.30319'.
Action start 11:12:24: CA_ASPPlusVersionCmd_amd64.
MSI (s) (E4:58) [11:12:24:065]: Skipping action: CA_ASPPlusVersionCmd_x86 (condition is false)
MSI (s) (E4:58) [11:12:24:065]: Skipping action: CA_Block_NetFx45_Full_SXSDisabled_Install (condition is false)
MSI (s) (E4:58) [11:12:24:065]: Skipping action: CA_Block_NetFx45_Full_SXSDisabled_Uninstall (condition is false)
MSI (s) (E4:58) [11:12:24:065]: Skipping action: CA_BlockOnOSIntegrated (condition is false)
MSI (s) (E4:58) [11:12:24:065]: Doing action: ValidateProductID
MSI (s) (E4:58) [11:12:24:065]: Note: 1: 2205 2: 3: ActionText
Action ended 11:12:24: CA_ASPPlusVersionCmd_amd64. Return value 1.
Action start 11:12:24: ValidateProductID.
MSI (s) (E4:58) [11:12:24:065]: Doing action: CA_ESUValidate_amd64
MSI (s) (E4:58) [11:12:24:065]: Note: 1: 2205 2: 3: ActionText
Action ended 11:12:24: ValidateProductID. Return value 1.
MSI (s) (E4:58) [11:12:24:065]: Transforming table CustomAction.

MSI (s) (E4:58) [11:12:24:065]: Transforming table CustomAction.

MSI (s) (E4:58) [11:12:24:065]: Note: 1: 2262 2: CustomAction 3: -2147287038
MSI (s) (E4:58) [11:12:24:065]: Transforming table CustomAction.

MSI (s) (E4:58) [11:12:24:080]: Transforming table CustomAction.

MSI (s) (E4:58) [11:12:24:080]: Note: 1: 2262 2: CustomAction 3: -2147287038
MSI (s) (E4:58) [11:12:24:080]: Transforming table Binary.

MSI (s) (E4:58) [11:12:24:080]: Note: 1: 2262 2: Binary 3: -2147287038
MSI (s) (E4:58) [11:12:24:080]: Transforming table Binary.

MSI (s) (E4:58) [11:12:24:080]: Note: 1: 2262 2: Binary 3: -2147287038
MSI (s) (E4:58) [11:12:24:080]: Transforming table Binary.

MSI (s) (E4:58) [11:12:24:080]: Transforming table Binary.

MSI (s) (E4:58) [11:12:24:080]: Note: 1: 2262 2: Binary 3: -2147287038
MSI (s) (E4:1C) [11:12:24:080]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIE55B.tmp, Entrypoint: ValidateESULicense
MSI (s) (E4:64) [11:12:24:096]: Generating random cookie.
MSI (s) (E4:64) [11:12:24:096]: Created Custom Action Server with PID 2408 (0x968).
MSI (s) (E4:58) [11:12:24:127]: Running as a service.
MSI (s) (E4:58) [11:12:24:127]: Hello, I'm your 64bit Impersonated custom action server.
Action start 11:12:24: CA_ESUValidate_amd64.
09/09/25 11:12:24 DDSet_Status: LANGID: 2052
09/09/25 11:12:24 DDSet_Entry: ValidateESULicense Started v1.2.250102.1721 (WSD)- Verifying ESU License status.
09/09/25 11:12:24 DDSet_Status: Supports: General Y6+ ESU licenses.
09/09/25 11:12:24 DDSet_Status: Notes : Azure free offer has ended.
09/09/25 11:12:24 DDSet_Status: Settings: FES - 6, WES - X, POS7 - X, ThinPC - X.
09/09/25 11:12:24 DDSet_Status: CurrDir : C:\1d3e714074829de075429dd75bc9
09/09/25 11:12:24 DDSet_Status: OS Detected 'Windows 7 SP1'
09/09/25 11:12:24 DDSet_Status: ProductInfo 65
09/09/25 11:12:24 DDSet_Status: Embedded SKU detected.
09/09/25 11:12:24 DDSet_Status: Current SKU has a valid Embedded Product Key
09/09/25 11:12:24 DDSet_Status: POSReady7 SKU detected.
09/09/25 11:12:24 DDSet_Status: POSReady7 SKU Support has ended.
09/09/25 11:12:24 DDSet_Error: ESU License required to recieve Security Updates.
09/09/25 11:12:24 DDSet_Exit: ValidateESULicense Ended. HR=15615
CustomAction CA_ESUValidate_amd64 returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
MSI (s) (E4:58) [11:12:24:158]: Transforming table InstallExecuteSequence.

MSI (s) (E4:58) [11:12:24:158]: Transforming table InstallExecuteSequence.

MSI (s) (E4:58) [11:12:24:158]: Note: 1: 2262 2: InstallExecuteSequence 3: -2147287038
MSI (s) (E4:58) [11:12:24:158]: Transforming table InstallExecuteSequence.

MSI (s) (E4:58) [11:12:24:158]: Transforming table InstallExecuteSequence.

MSI (s) (E4:58) [11:12:24:158]: Note: 1: 2262 2: InstallExecuteSequence 3: -2147287038
Action ended 11:12:24: CA_ESUValidate_amd64. Return value 3.
Action ended 11:12:24: INSTALL. Return value 3.
Property(S): UpgradeCode = {10E35DD9-8269-3F1E-97F4-99F0DA3C2CEC}
Property(S): ASPPlusVersion = 4.0.30319
Property(S): WPFFontCache_x86_ID = WPFFontCache_v0400_x86
Property(S): WPFFontCacheServiceName_x86 = Windows Presentation Foundation Font Cache 4.0.0.0
Property(S): WPFFontCacheServiceDescription_x86 = Optimizes performance of Windows Presentation Foundation (WPF) applications by caching commonly used font data. WPF applications will start this service if it is not already running. It can be disabled, though doing so will degrade the performance of WPF applications.
Property(S): WPFFontCache_amd64_ID = WPFFontCache_v0400_amd64
Property(S): WPFFontCacheServiceName_amd64 = Windows Presentation Foundation Font Cache 4.0.0.0
Property(S): WPFFontCacheServiceDescription_amd64 = Optimizes performance of Windows Presentation Foundation (WPF) applications by caching commonly used font data. WPF applications will start this service if it is not already running. It can be disabled, though doing so will degrade the performance of WPF applications.
Property(S): VersionNT = 601
Property(S): ProductShortName = .NET Framework 4.8
Property(S): LocProductName = Microsoft .NET Framework 4.8
Property(S): ARPLocProductName = Microsoft .NET Framework 4.8
Property(S): ProductEdition = full
Property(S): ProductFamily = netfx
Property(S): ProductImage = box
Property(S): ProductCPU = amd64
Property(S): Manufacturer = Microsoft Corporation
Property(S): ProductCode = {16735AF7-1D8D-3681-94A5-C578A61EC832}
Property(S): ProductLanguage = 0
Property(S): ProductName = Microsoft .NET Framework 4.8
Property(S): ProductVersion = 4.8.03761
Property(S): ALLUSERS = 1
Property(S): INSTALLLEVEL = 1
Property(S): FXAssemblyVersion = 4.0.0.0
Property(S): VSAssemblyVersion = 10.0.0.0
Property(S): RTM_ProductVersion = 4.0.30319
Property(S): netfxpri1 = 1
Property(S): ARPNOMODIFY = 1
Property(S): ARPNOREPAIR = 1
Property(S): ARPSYSTEMCOMPONENT = 1
Property(S): URTVersion = v4.0.30319
Property(S): URTBuildNum = 30319
Property(S): ARPSIZE = 39732
Property(S): RTMProductName = Microsoft .NET Framework 4.5
Property(S): ARPREADME = http://go.microsoft.com/fwlink/?LinkId=2053972
Property(S): ARPURLINFOABOUT = http://go.microsoft.com/fwlink/?LinkId=286133
Property(S): ARPURLUPDATEINFO = http://go.microsoft.com/fwlink/?LinkId=286134
Property(S): DirectoryTable100_x86 = DirectoryTable
Property(S): DirectoryTable100_amd64 = DirectoryTable
Property(S): MAINTMODE = IdentityCacheDir
Property(S): NgenServiceFiles = mscorsvc.dll;mscorsvw.exe;ngen.exe
Property(S): NgenExclusionList = aspnet_isapi.dll;aspnet_perf.h;aspnet_perf.ini;aspnet_perf2.ini;aspnet_regiis.exe;aspnet_wp.exe;c1xx.dll;c2.dll;CORPerfMonExt.dll;cscomp.dll;InstallPersistSqlState.sql;InstallSqlState.sql;InstallSqlStateTemplate.sql;PerfCounter.dll;SmartNav.htm;SmartNav.js;SmartNavIE5.js;System.Windows.Forms.tlb;UninstallPersistSqlState.sql;UninstallSqlStateTemplate.sql
Property(S): SharedComponentVersion = 4.0.31106.0
Property(S): SecureCustomProperties = NEWERVERSIONDETECTED;REMOVE_SCHUSESTRONGCRYPTO;UPGRADENETFXCORE48;UPGRADENETFXEXTENDED48
Property(S): MsiHiddenProperties = ExecSecureObjects;ExecSecureObjects_64;ExecSecureObjectsRollback;ExecSecureObjectsRollback_64
Property(S): MSPSRC6880BC24E32F372C8EFCB966B21FB5F1 = C:\Windows\Installer\4e1f0.msp
Property(S): KB4503575.Classification = Update
Property(S): MSPSRC40693D4400D7310D839572393035A3A8 = C:\Windows\Installer\8cb01.msp
Property(S): PrintHoodFolder = C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\
Property(S): MsiRestartManagerSessionKey = c207586992baed4a830e5a9495f101a5
Property(S): MsiRunningElevated = 1
Property(S): ProductState = 5
Property(S): SystemLanguageID = 2052
Property(S): PackageCode = {A3B8C0BC-2CD0-44D5-ABCA-606B07FB0E21}
Property(S): ProductToBeRegistered = 1
Property(S): KB5062065.PatchCode = {6880BC24-E32F-372C-8EFC-B966B21FB5F1}
Property(S): ServicePackLevel = 1
Property(S): ColorBits = 32
Property(S): ProgramFilesFolder = C:\Program Files (x86)\
Property(S): CLIENTUILEVEL = 3
Property(S): CURRENTDIRECTORY = C:\1d3e714074829de075429dd75bc9
Property(S): PATCH = C:\1d3e714074829de075429dd75bc9\NDP48-KB5062065.msp
Property(S): StartMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\
Property(S): VersionNT64 = 601
Property(S): WindowsFolder = C:\Windows\
Property(S): ScreenY = 768
Property(S): WindowsVolume = C:\
Property(S): CaptionHeight = 19
Property(S): System64Folder = C:\Windows\system32\
Property(S): BorderSide = 1
Property(S): TextHeight = 16
Property(S): RemoteAdminTS = 1
Property(S): TempFolder = C:\Users\ADMINI~1\AppData\Local\Temp\
Property(S): TextInternalLeading = 3
Property(S): MsiNTProductType = 3
Property(S): BorderTop = 1
Property(S): SystemFolder = C:\Windows\SysWOW64\
Property(S): Intel = 6
Property(S): KB5062065.AllowRemoval = 1
Property(S): MsiLogFileLocation = C:\Users\ADMINI~1\AppData\Local\Temp\2\KB5062065_20250909_111108407-Microsoft .NET Framework 4.8-MSP0.txt
Property(S): KB4503575.AllowRemoval = 1
Property(S): KB4503575.PatchCode = {40693D44-00D7-310D-8395-72393035A3A8}
Property(S): PATCHNEWPACKAGECODE = {6880BC24-E32F-372C-8EFC-B966B21FB5F1}
Property(S): PATCHNEWSUMMARYSUBJECT = Update for Microsoft .NET Framework 4.8 (KB5062065)
Property(S): PATCHNEWSUMMARYCOMMENTS = KB5062065
Property(S): KB5062065.Classification = Update
Property(S): msp = C:\1d3e714074829de075429dd75bc9\NDP48-KB5062065.msp
Property(S): UILevel = 2
Property(S): VersionMsi = 5.00
Property(S): ProgramMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
Property(S): OriginalDatabase = C:\Windows\Installer\8cb00.msi
Property(S): DATABASE = C:\Windows\Installer\8cb00.msi
Property(S): AdminToolsFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\
Property(S): MyPicturesFolder = C:\Users\Administrator\Pictures\
Property(S): StartupFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Property(S): CommonFiles64Folder = C:\Program Files\Common Files\
Property(S): MsiAMD64 = 6
Property(S): MsiNTSuiteEnterprise = 1
Property(S): ScreenX = 1024
Property(S): QFEUpgrade = 2
Property(S): DesktopFolder = C:\Users\Public\Desktop\
Property(S): OLEAdvtSupport = 1
Property(S): ShellAdvtSupport = 1
Property(S): GPTSupport = 1
Property(S): MsiNetAssemblySupport = 4.8.3761.0
Property(S): AppDataFolder = C:\Users\Administrator\AppData\Roaming\
Property(S): MsiUISourceResOnly = 1
Property(S): FontsFolder = C:\Windows\Fonts\
Property(S): Date = 2025/9/9
Property(S): ProgramFiles64Folder = C:\Program Files\
Property(S): Msix64 = 6
Property(S): VirtualMemory = 4338
Property(S): Time = 11:12:24
Property(S): TTCSupport = 1
Property(S): CommonFilesFolder = C:\Program Files (x86)\Common Files\
Property(S): FavoritesFolder = C:\Users\Administrator\Favorites\
Property(S): ComputerName = 172_16_1_34
Property(S): ServicePackLevelMinor = 0
Property(S): UserLanguageID = 2052
Property(S): UserSID = S-1-5-21-508737280-3758319117-1445457868-500
Property(S): MsiWin32AssemblySupport = 6.1.7601.26412
Property(S): LogonUser = Administrator
Property(S): PhysicalMemory = 4032
Property(S): MsiTrueAdminUser = 1
Property(S): AdminUser = 1
Property(S): RedirectedDllSupport = 2
Property(S): CLIENTPROCESSID = 532
Property(S): PersonalFolder = C:\Users\Administrator\Documents\
Property(S): Privileged = 1
Property(S): RecentFolder = C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\
Property(S): ACTION = INSTALL
Property(S): Installed = 00:00:00
Property(S): LocalAppDataFolder = C:\Users\Administrator\AppData\Local\
Property(S): COMPANYNAME = TENCENT
Property(S): CommonAppDataFolder = C:\ProgramData\
Property(S): MSICLIENTUSESEXTERNALUI = 1
Property(S): NetHoodFolder = C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Network Shortcuts\
Property(S): USERNAME = QQ
Property(S): TemplateFolder = C:\ProgramData\Microsoft\Windows\Templates\
Property(S): PRODUCTLANGUAGE = 0
Property(S): VersionDatabase = 300
Property(S): SendToFolder = C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\SendTo\
Property(S): WindowsBuild = 7601
MSI (s) (E4:58) [11:12:24:190]: 产品: Microsoft .NET Framework 4.8 - 无法安装更新“KB5062065”。错误代码 1603。可以在日志文件 C:\Users\ADMINI~1\AppData\Local\Temp\2\KB5062065_20250909_111108407-Microsoft .NET Framework 4.8-MSP0.txt 中找到其他信息。

MSI (s) (E4:58) [11:12:24:190]: Windows Installer 已安装更新。产品名称: Microsoft .NET Framework 4.8。产品版本: 4.8.03761。产品语言: 0。制造商: Microsoft Corporation。更新名称: KB5062065。安装成功或错误状态: 1603。

MSI (s) (E4:58) [11:12:24:190]: Note: 1: 1729
MSI (s) (E4:58) [11:12:24:205]: Product: Microsoft .NET Framework 4.8 -- Configuration failed.

MSI (s) (E4:58) [11:12:24:205]: Windows Installer 已重新配置产品。产品名称: Microsoft .NET Framework 4.8。产品版本: 4.8.03761。产品语言: 0。制造商: Microsoft Corporation。重新配置成功或错误状态: 1603。

MSI (s) (E4:58) [11:12:24:205]: Attempting to delete file C:\Windows\Installer\4e1f0.msp
MSI (s) (E4:58) [11:12:24:252]: Deferring clean up of packages/files, if any exist
MSI (s) (E4:58) [11:12:24:252]: Attempting to delete file C:\Windows\Installer\4e1f0.msp
MSI (s) (E4:58) [11:12:24:252]: Unable to delete the file outside of the engine. LastError = 2
MSI (s) (E4:58) [11:12:24:252]: MainEngineThread is returning 1603
MSI (s) (E4:40) [11:12:24:252]: RESTART MANAGER: Session closed.
MSI (s) (E4:40) [11:12:24:252]: No System Restore sequence number for this installation.
=== Logging stopped: 2025/9/9 11:12:24 ===
MSI (s) (E4:40) [11:12:24:252]: User policy value 'DisableRollback' is 0
MSI (s) (E4:40) [11:12:24:252]: Machine policy value 'DisableRollback' is 0
MSI (s) (E4:40) [11:12:24:252]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (E4:40) [11:12:24:252]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (E4:40) [11:12:24:268]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (E4:40) [11:12:24:268]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\InProgress 3: 2
MSI (s) (E4:40) [11:12:24:268]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\InProgress 3: 2
MSI (s) (E4:40) [11:12:24:268]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (s) (E4:40) [11:12:24:268]: Restoring environment variables
MSI (s) (E4:40) [11:12:24:268]: Destroying RemoteAPI object.
MSI (s) (E4:64) [11:12:24:268]: Custom Action Manager thread ending.
MSI (c) (14:90) [11:12:24:268]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (c) (14:90) [11:12:24:268]: MainEngineThread is returning 1603
=== Verbose logging stopped: 2025/9/9 11:12:24 ===

补丁在执行 ESU 授权校验的自定义动作时被硬性阻断了。

关键证据：

CA_ESUValidate_amd64 → ValidateESULicense Started … → DDSet_Error: ESU License required to recieve Security Updates → Return value 3 → 最终 1603/0x80070643
日志还显示“Embedded SKU detected / POSReady7 SKU detected / POSReady7 SKU Support has ended / Azure free offer has ended”，说明补丁内置的授权检测明确认定当前系统没有满足继续获取安全更新的有效 ESU 授权（或被识别为已停止支持的嵌入式分支）。

结论：

KB5062065（2025 年 7 月 .NET 4.8 安全更新）对 Windows 7/Server 2008 R2 家族已启用 ESU 强校验。没有有效 ESU，这类 .NET 月度安全更新会直接失败，即使签名验证、SHA-2 支持、根证书、Windows Installer 都没问题，也无法安装。
之前“修复工具/重装 .NET/禁用安全软件/重试”等步骤都不会改变结果，因为拦截点发生在“ValidateESULicense”自定义动作，属于策略性阻断。

后记：

1、2025年7月、8月的安全补丁（KB5062619/KB5062632/KB5063927/KB5063947）可以在S5、S6正常使用（其他低代次Intel机型试了也正常），在SA2、SA9机型尝试，都报UNSUPPORTED_PROCESSOR。

测了这些机型，就SA2、SA9机型跟我的个人AMD台式机电脑报UNSUPPORTED_PROCESSOR，顾名思义跟部分AMD CPU不兼容。
SA9.MEDIUM4
SA5.MEDIUM4
SA4.MEDIUM4
SA3.MEDIUM4
SA2.MEDIUM4
S9.MEDIUM4
S8.MEDIUM4
S7.LARGE8
M7.LARGE32
D3.2XLARGE32
M6p.LARGE16
C5.MEDIUM4
IT3.4XLARGE64
BC1.SMALL4
RS2t.7XLARGE112
RS5t.6XLARGE83
RS3t.5XLARGE80
S5se.LARGE16
C6.LARGE8
C4.LARGE8
M4.SMALL8
M5.SMALL8
S4.LARGE4
SN3ne.LARGE4
TS3.MEDIUM4
TS5.MEDIUM4
RM3t.20XLARGE708

2、dotnet4.8的2025年7月补丁KB5062065在任何机型都会因为ESU的问题安装失败。

https://learn.microsoft.com/en-us/lifecycle/products/windows-server-2008-r2