We couldn't complete the updates...

I was working on updating my Windows Server 2012 R2 VM running in Azure with the latest Windows Updates (as of January 11, 2016). Installing updates failed over and over again with a "We couldn't complete the updates, Undoing changes" message after reboot. This affected all updates I was trying to install in one "batch".

I googled, and found an instruction to disable Secure Boot in Hyper-V (http://blog.powerbiz.net.au/fixes/we-couldnt-complete-the-updates-undoing-changes-error-on-windows-server-2012-r2/) but I cannot do that in Azure. But I noticed I could install updates one by one, so I did that until I found the problematic update.

In my case, the root cause seems to be update KB3096411 (https://support.microsoft.com/en-us/kb/3096411). After excluding this one, all other updates installed fine.

Update January 12, 2016:
The problematic update KB3096411 fixes some issue with KB3000850 (https://support.microsoft.com/en-us/kb/3000850), which had problems with installation on Windows Server instances running on a platform with Secure Boot enabled (UEFI hardware or 2nd generation Hyper-V), giving the same error code I am getting (0x800f0922). The solution recommended by Microsoft was to install update KB2975061 (https://support.microsoft.com/en-us/kb/2975061), which I have now done, but the problem remains. KB3000850 installed fine, but KB3096411 fails.