This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(83.2, 51%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ES%3C/text%3E%3C/svg%3E)
Hi, everyone,
we have an Exchange Server 2016 / CU 21 under W2K12 / current Windows updates (as of July 21).
Last night I wanted the recommended security patch for Microsoft Exchange Server 2016: July 13, 2021 (KB5004779) / https://support.microsoft.com/en-us/topic/description-of-the-security-up .. import.
I was logged in as an administrator (with domain and organization admin rights) and started the patch with administrative rights.
AV scanner was deactivated, Exchange server started up beforehand.
Unfortunately the patch could not be installed.
Error message:
Setup Wizard for Security Update for Exchange Server 2016 Cumulative Update 21 (KB5004779) ended prematurely because of an error. Your system has not been modified.
Event log: Error MSI installer 1024
Security Update for Exchange Server 2016 Cumulative Update 21 (KB5004779) 12.1.2308.14 could not be installed. Error code 1603
MSI Installer service has started.
Unfortunately, I don't get any further here either:
https://learn.microsoft.com/en-us/exchange/troubleshoot/client-connectivi ...
Who has constructive input here?
Thank you in advance.
Spatze
Hello YukiSun-MSFT,
I noticed that the execution policy for the current user was on Restricted. I have temporarily changed the policy to Remote Signed. Then I gave the admin account temporary organization admin and schema admin rights. Server booted, AV services stopped and tried again ... the update has now been completed successfully.
Checked off another point.
Many Thanks for your assistance.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(284.8, 17%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EYS%3C/text%3E%3C/svg%3E)
Hi @Spatze ,
Great to know that you've sorted it out and thanks for your sharing! If you don't mind, you can click "Accept Answer" under your post so that it can be easier for others who meet a similar issue to search for the useful information : )
If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
You could enable some more detailed logging.
https://learn.microsoft.com/en-us/troubleshoot/windows-client/application-management/enable-windows-installer-logging
likely issue may be the system account doesn't have permissions to destination folder.
https://learn.microsoft.com/en-us/troubleshoot/windows-server/application-management/msi-installation-error-1603
--please don't forget to upvote and Accept as answer if the reply is helpful--
Thank you for the tip with logging:
After I could not install the update again I found this message in the log file:
msgINTERIMUPDATEDETECTED = Unable to install because a previous Interim Update for Microsoft Exchange Server 2016 Cumulative Update 21 has been installed. Please use Add / Remove Programs to uninstall the Interim Update before running this setup again.
Property (C): msgRequiresProc = The version of this file is not compatible with the version of Microsoft Exchange Server 2016 Cumulative Update 21 that you're running. Check your computer to see whether you need an x64 (64-bit) or x86 (32-bit) version of this file.
I am a little confused now:
We have definitely installed Exchange Server 2016 CU21 / 15.1.2308.8 from June 29, 2021
https://www.microsoft.com/en-us/download/details.aspx?id=103242>
And below I downloaded this update to install it:
https://support.microsoft.com/de-de/topic/description-of-the-security-update-for-microsoft-exchange-server-2016-july-13-2021-kb5004779-81e40da3-60db-4c09- bf11-b8c1e0c1b77d ->
https://www.microsoft.com/en-us/download/details.aspx?id=103311
Do I have to understand that?
My comments where more geared towards getting to the bottom of the 1603 MSI Installer issue. May need to start a case here with product support.
https://support.serviceshub.microsoft.com/supportforbusiness
--please don't forget to upvote and Accept as answer if the reply is helpful--
Hi @Spatze ,
Based on the errors you shared above, seems like you are encountering a similar situation as discussed in the following thread:
Security Update For Exchange Server 2016 CU18 (KB4581424) Installation Error
While the CU and SU versions there are different with yours, it mentioned the same event（Event ID 1024 with error code 1603) and has the similar error in the setup log("msgINTERIMUPDATEDETECTED = Unable to install because a previous Interim Update for Microsoft Exchange Server 2016 Cumulative Update...")
So I'd like recommend referring to the solution shared in the thread, that is making sure the Exchange related searvices are enabled and started, then have a go again by running the security update at an elevated command prompt(this is the recommended way to install the SU according to this link).
If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Hello YukiSun-MSFT,
Thanks for the tip.
The link was known to me and I have also checked everything recommended - unfortunately without success.
I also noticed that I installed the patch with an account without "schema admin" rights. The account used only had domain admin and organization admin rights.
I'll try this during the next maintenance window.
Hi @Spatze ,
I also noticed that I installed the patch with an account without "schema admin" rights. The account used only had domain admin and organization admin rights.
I'll try this during the next maintenance window.
Thanks for sharing the findings and hope the patch can get installed successfully this time. Once again, it's recommended to manually install this security update using the steps below:
If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(70.4, 81%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPB%3C/text%3E%3C/svg%3E)
Hello YukiSun-MSFT,
This was helpful for me and works perfectly.
Thanks.