I refined the process on the last DAG member (running with Administrator privilege makes no difference)
I changed ownership of owa and ecp above to administrator
I added added Full Control to the administrator in owa and ecp.
'Everyone' does not exist when doing this before running the CU8
Worked perfectly, exchange comes up live after running the unattended setup above (approximately 20+ minutes runtime)