question

JonHatfield-9592 avatar image
0 Votes"
JonHatfield-9592 asked JonHatfield-9592 edited

Security Update For Exchange Server 2016 CU21 (KB5004779) Fails with Error 0x80070643


Title says it all. Trying to install KB5004779 via Windows Update and it repeatedly fails with error 0x80070643.

I've attempted to install this update manually, but receive and error that states "you need at least exchange server administrator permission on the current computer". The account I'm using is a member of Domain Ad
in, Schema Admin, Enterprise Admin, and Exchange Organization Admin. So permissions are not a problem.

Any help is appreciated

office-exchange-server-administration
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

JonHatfield-9592 avatar image
1 Vote"
JonHatfield-9592 answered JonHatfield-9592 edited

I was able to get this working. I had to perform multiple steps:

  1. Start Exchange Management Shell as an administrator and run the following scripts: .\UpdateCas.ps1 and .\UpdateConfigFiles.ps1.

  2. Exit Exchange Management Shell and open a Command Prompt window as an administrator.

  3. Run iisreset.

Taken from here: https://docs.microsoft.com/en-us/exchange/troubleshoot/client-connectivity/owa-stops-working-after-update



After the update completed and the server rebooted, I couldn't access OWA or EAC. I then needed to create a new certificate:

https://docs.microsoft.com/en-us/exchange/troubleshoot/administration/cannot-access-owa-or-ecp-if-oauth-expired

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

KaelYao-MSFT avatar image
0 Votes"
KaelYao-MSFT answered

Hi @JonHatfield-9592

Did you follow this link to install the security update?
(you should use Command Prompt and Run as administrator, type the full path of the .msp file to install )

If the problem persists, do you have some third-party software running on the Exchange server? For example, anti-malware software.
If there are any, please disable or uninstall them to see if you are able to install the security update.

In addition, have you tried with another account which has the required permissions? Would the same issue persist?


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.