Security Update 1 for Exchange 2016-CU 21 (KB5004779) ended prematurely

Spatze 101 Reputation points
2021-08-14T20:35:16.597+00:00

Hi, everyone,

we have an Exchange Server 2016 / CU 21 under W2K12 / current Windows updates (as of July 21).

Last night I wanted the recommended security patch for Microsoft Exchange Server 2016: July 13, 2021 (KB5004779) / https://support.microsoft.com/en-us/topic/description-of-the-security-up .. import.

I was logged in as an administrator (with domain and organization admin rights) and started the patch with administrative rights.

AV scanner was deactivated, Exchange server started up beforehand.

Unfortunately the patch could not be installed.
Error message:
Setup Wizard for Security Update for Exchange Server 2016 Cumulative Update 21 (KB5004779) ended prematurely because of an error. Your system has not been modified.

Event log: Error MSI installer 1024
Security Update for Exchange Server 2016 Cumulative Update 21 (KB5004779) 12.1.2308.14 could not be installed. Error code 1603
MSI Installer service has started.

Unfortunately, I don't get any further here either:
https://learn.microsoft.com/en-us/exchange/troubleshoot/client-connectivi ...

Who has constructive input here?

Thank you in advance.
Spatze

Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,393 questions
0 comments No comments
{count} votes

Accepted answer
  1. Spatze 101 Reputation points
    2021-08-18T20:55:53.647+00:00

    Hello YukiSun-MSFT,

    I noticed that the execution policy for the current user was on Restricted. I have temporarily changed the policy to Remote Signed. Then I gave the admin account temporary organization admin and schema admin rights. Server booted, AV services stopped and tried again ... the update has now been completed successfully.

    Checked off another point.

    Many Thanks for your assistance.

    1 person found this answer helpful.

2 additional answers

Sort by: Most helpful
  1. Dave Patrick 426.2K Reputation points MVP
    2021-08-14T21:08:29.583+00:00

    You could enable some more detailed logging.
    https://learn.microsoft.com/en-us/troubleshoot/windows-client/application-management/enable-windows-installer-logging

    likely issue may be the system account doesn't have permissions to destination folder.
    https://learn.microsoft.com/en-us/troubleshoot/windows-server/application-management/msi-installation-error-1603

    --please don't forget to upvote and Accept as answer if the reply is helpful--


  2. Yuki Sun-MSFT 40,881 Reputation points
    2021-08-16T03:43:12.507+00:00

    Hi @Spatze ,

    Based on the errors you shared above, seems like you are encountering a similar situation as discussed in the following thread:
    Security Update For Exchange Server 2016 CU18 (KB4581424) Installation Error
    While the CU and SU versions there are different with yours, it mentioned the same event(Event ID 1024 with error code 1603) and has the similar error in the setup log("msgINTERIMUPDATEDETECTED = Unable to install because a previous Interim Update for Microsoft Exchange Server 2016 Cumulative Update...")
    123356-1.png

    So I'd like recommend referring to the solution shared in the thread, that is making sure the Exchange related searvices are enabled and started, then have a go again by running the security update at an elevated command prompt(this is the recommended way to install the SU according to this link).


    If an Answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.