Updates fail from SCCM with error 0x87D00668(-2016410008)

So you deployed updates and you get an error message saying 0x87D00668(-2016410008), with an error description: Software update still detected as actionable after apply. This is what you do:

1. RDP to the client with the error
2. Stop Windows Update service.
3. Rename C:\Windows\SoftwareDistribution
4. Rename C:\Windows\System32\GroupPolicy\Machine\registry.pol
5. Restart Windows Update service.

You can run a policy refresh after this and the software updates will drop out of the Software Center.

Source

1. https://social.technet.microsoft.com/Forums/en-US/448c969a-8b87-4950-9432-f0dd33cd6585/software-update-showing-as-failed-software-center-error-the-software-change-returned-error-code?forum=configmanagersecurity
2. https://social.technet.microsoft.com/Forums/en-US/7a02628f-4d83-4c0e-8dd2-2a3fdc0e3807/failed-software-update-returns-error-code-0x87d00668-part2?forum=configmanagersecurity#ea4ced0b-8efd-41ac-bcf8-a6109bc4128d