security update for Microsoft Exchange Server 2019 CU 11 October 12, 2021 (KB5007012) fails to install

Question

security update for Microsoft Exchange Server 2019 October 12, 2021 (KB5007012) fails to install, with an error to that the current logged in user does not have sufficient permission, and need to be member of exchange administrator role group in current computer

Answer 1

I managed to resolve the issue. The problem was a PowerShell execution policy set to restricted or Allsigned via GPO for that exchange server.

I exempted the server from the GPO, and I was able to launch PowerShell as admin then successfully install the security update.

Thank you all for the tips you provided.

Answer 2

Follow these steps to manually install this security update:

1.Select Start, and type cmd.

2..In the results, right-click Command Prompt, and then select Run as administrator.

3.If the User Account Control dialog box appears, verify that the default action is the action that you want, and then select Continue.

4.Type the full path of the .msp file, and then press Enter.

Answer 3

Hi,@Benard Mwanza

Is this account which you are using to update exchange SU has Enterprise Admin, Domain Admin, and Schema Admin permissions?

If it isn't, please add or use an account which has Enterprise Admin, Domain Admin, and Schema Admin permissions.

Then follow Harmeetsigh’s comment to install security update.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 4

Hello @Benard Mwanza

Seems to be a known issue for this update: https://support.microsoft.com/en-gb/topic/description-of-the-security-update-for-microsoft-exchange-server-2019-and-2016-october-12-2021-kb5007012-de43d01b-d54f-4b40-91d1-93525a29437c

"When you try to manually install this security update by double-clicking the update file (.msp) to run it in Normal mode (that is, not as an administrator), some files are not correctly updated."

You should run it as built in Administrator account.

Hope this helps with your query,

---------
--If the reply is helpful, please Upvote and Accept as answer--