question

CWolfram-6134 avatar image
0 Votes"
CWolfram-6134 asked YukiSun-MSFT commented

Security Update 1 for Exchange 2016-CU 21 (KB5004779) ended prematurely

Hi, everyone,

we have an Exchange Server 2016 / CU 21 under W2K12 / current Windows updates (as of July 21).

Last night I wanted the recommended security patch for Microsoft Exchange Server 2016: July 13, 2021 (KB5004779) / https://support.microsoft.com/en-us/topic/description-of-the-security-up .. import.

I was logged in as an administrator (with domain and organization admin rights) and started the patch with administrative rights.

AV scanner was deactivated, Exchange server started up beforehand.

Unfortunately the patch could not be installed.
Error message:
Setup Wizard for Security Update for Exchange Server 2016 Cumulative Update 21 (KB5004779) ended prematurely because of an error. Your system has not been modified.

Event log: Error MSI installer 1024
Security Update for Exchange Server 2016 Cumulative Update 21 (KB5004779) 12.1.2308.14 could not be installed. Error code 1603
MSI Installer service has started.

Unfortunately, I don't get any further here either:
https://docs.microsoft.com/en-us/exchange/troubleshoot/client-connectivi ...

Who has constructive input here?

Thank you in advance.
Spatze

office-exchange-server-administration
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

CWolfram-6134 avatar image
1 Vote"
CWolfram-6134 answered YukiSun-MSFT commented

Hello YukiSun-MSFT,

I noticed that the execution policy for the current user was on Restricted. I have temporarily changed the policy to Remote Signed. Then I gave the admin account temporary organization admin and schema admin rights. Server booted, AV services stopped and tried again ... the update has now been completed successfully.

Checked off another point.

Many Thanks for your assistance.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi @CWolfram-6134,

Great to know that you've sorted it out and thanks for your sharing! If you don't mind, you can click "Accept Answer" under your post so that it can be easier for others who meet a similar issue to search for the useful information : )


If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

0 Votes 0 ·
DSPatrick avatar image
0 Votes"
DSPatrick answered DSPatrick commented

You could enable some more detailed logging.
https://docs.microsoft.com/en-us/troubleshoot/windows-client/application-management/enable-windows-installer-logging

likely issue may be the system account doesn't have permissions to destination folder.
https://docs.microsoft.com/en-us/troubleshoot/windows-server/application-management/msi-installation-error-1603

--please don't forget to upvote and Accept as answer if the reply is helpful--






· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thank you for the tip with logging:

After I could not install the update again I found this message in the log file:

msgINTERIMUPDATEDETECTED = Unable to install because a previous Interim Update for Microsoft Exchange Server 2016 Cumulative Update 21 has been installed. Please use Add / Remove Programs to uninstall the Interim Update before running this setup again.
Property (C): msgRequiresProc = The version of this file is not compatible with the version of Microsoft Exchange Server 2016 Cumulative Update 21 that you're running. Check your computer to see whether you need an x64 (64-bit) or x86 (32-bit) version of this file.

I am a little confused now:
We have definitely installed Exchange Server 2016 CU21 / 15.1.2308.8 from June 29, 2021
https://www.microsoft.com/en-us/download/details.aspx?id=103242>;

And below I downloaded this update to install it:

https://support.microsoft.com/de-de/topic/description-of-the-security-update-for-microsoft-exchange-server-2016-july-13-2021-kb5004779-81e40da3-60db-4c09- bf11-b8c1e0c1b77d ->
https://www.microsoft.com/en-us/download/details.aspx?id=103311

Do I have to understand that?

0 Votes 0 ·

My comments where more geared towards getting to the bottom of the 1603 MSI Installer issue. May need to start a case here with product support.
https://support.serviceshub.microsoft.com/supportforbusiness

--please don't forget to upvote and Accept as answer if the reply is helpful--





0 Votes 0 ·
YukiSun-MSFT avatar image
0 Votes"
YukiSun-MSFT answered YukiSun-MSFT commented

Hi @CWolfram-6134,

Based on the errors you shared above, seems like you are encountering a similar situation as discussed in the following thread:
Security Update For Exchange Server 2016 CU18 (KB4581424) Installation Error
While the CU and SU versions there are different with yours, it mentioned the same event(Event ID 1024 with error code 1603) and has the similar error in the setup log("msgINTERIMUPDATEDETECTED = Unable to install because a previous Interim Update for Microsoft Exchange Server 2016 Cumulative Update...")
123356-1.png

So I'd like recommend referring to the solution shared in the thread, that is making sure the Exchange related searvices are enabled and started, then have a go again by running the security update at an elevated command prompt(this is the recommended way to install the SU according to this link).


If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.



1.png (8.1 KiB)
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hello YukiSun-MSFT,

Thanks for the tip.

The link was known to me and I have also checked everything recommended - unfortunately without success.

I also noticed that I installed the patch with an account without "schema admin" rights. The account used only had domain admin and organization admin rights.

I'll try this during the next maintenance window.

0 Votes 0 ·

Hi @CWolfram-6134,

I also noticed that I installed the patch with an account without "schema admin" rights. The account used only had domain admin and organization admin rights.
I'll try this during the next maintenance window.

Thanks for sharing the findings and hope the patch can get installed successfully this time. Once again, it's recommended to manually install this security update using the steps below:

  1. Select Start , and type cmd .

  2. In the results, right-click Command Prompt , and then select Run as administrator .

  3. If the User Account Control dialog box appears, verify that the default action is the action that you want, and then select Continue .

  4. Type the full path of the .msp file, and then press Enter.


If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

0 Votes 0 ·