Installing Exchange Server 2007/2010 Update Rollups

Have you ever tried to install an Exchange Server Update Rollup which ended with an error message?

I recently did some troubleshooting on installing Exchange Server 2010 Update Rollup 3 and picked up some experiences I would like to share, in addition to provide some general guidelines for installing Exchange Update Rollups.

The installation may fail when installing either manually by downloading the installation package or by using Windows Update. Afterwards event 1024 are logged to the application log stating that the installation failed with the error code 1603:


This really doesnt help much, and in addition to the failed installation all Exchange-related services are now stopped and disabled, leaving the server offline.

Start by restoring the service-state. First, enable and start Windows Management Service using an elevated Windows PowerShell prompt:

Get-Service Winmgmt | Set-Service –StartupType Automatic; Get-Service Winmgmt | Start-Service

Then run the ServiceControl.ps1 located in the Exchange bin-folder and the pass it the argument “AfterPatch”:


The server should now be restored to an operational state. Next, download the Exchange Update Rollup if you havent done that in the first installation attempt. Next, retry the installation from the elevated PowerShell promt using msiexec with the /lv parameter:

msiexec /lv c:tempex-ur3-install.log /update C:tempExchange2010-KB981401-x64-en.msp

This will instruct the Windows Installer service to log verbose output from the installation to the file specified. After the installation fails you will see an event with event ID 1023 logged to the Application log:


Next, open the log-file and look through it for error messages. The output in this file are really verbose, so you might want to ask for assistance in the Exchange Software Updates Forum on the Exchange Server TechCenter.

In my recent troubleshooting incident I found the following in the log-file:


This indicates that the servicecontrol.ps1 script failed to run correctly. As stated in KB-article 981474 this is caused by the defined PowerShell execution polices. For the installation to succeed, oddly enough, any execution policies must be temporarily undefined.

To see if any PowerShell execution polices are defined on the system, run Get-ExecutionPolicy –List:


In this case, an ExecutionPolicy was defined both locally and in a Group Policy Object. I first cleared the Group Policy setting and then the local setting using the following command:


Execute gpupdate /force and verify that all the ExecutionPolicies are set to “Undefined”:


Redo the steps described above to restore service-state and retry the installation. In this case the installation now succeeded:


At the end I will provide some general guidelines for installing Update Rollups in Exchange Server 2007/2010:

  1. Use elevated Administrator-privileges when running the installation either from Windows Update or by manually downloading the installation file.
  2. Verify that all Execution Policies are set to “Undefined”.
  3. Uninstall any interim Exchange hotfixes installed since the last Update Rollup.
  4. Verify that the ExchangeSetupLogs directory are present on the system-drive. The installer uses this directory for saving service-state information.

Please leave a comment below if you got any further guidelines. I will update this blog-post if I gather more information regarding installing Update Rollups.

13 thoughts on “Installing Exchange Server 2007/2010 Update Rollups

  1. Nice post! Yes, this is a problem. We are looking at it as a top issue to address in the next rollup. The policies depend on the WMI Service being started and the ServiceControl stops and disables that when it stops the Exchange services. When we call out to powershell to restart services, the WMI service is disabled so the Group Polocy check fails as it requires WMI to be running and the powershell call fails. A more technical KB/Blog is going out shortly as well as other general patching blog posts

  2. Pingback: Installing Exchange 2007/2010 Update Rollups «

  3. Hi Jan,
    nice post. I followed your instructions and got to the final screen that confirms the successful installation of the rollup. The strange part is that when I try to check the build version of the exchange using:
    Get-ExchangeServer | fl name,edition,admindisplayversion
    I get the old build number – 14.0.639.21. Can you check on your servers if the build number has change. Here is a link with all builds:

    • Hi, thanks for the feedback.
      The build numbers doesnt change in the version numbers provided by Get-ExchangeServer between update rollups, only between new editions and service packs.
      You can find some information on this here:

      Im not aware which way is the best to check for the latest buildnumber after installing Update Rollups, but one way might be checking the latest version number in the C:Program FilesMicrosoftExchange ServerV14ClientAccessOwa folder (CAS role only).

      • The best way to check for the version of the rollup is to look at exsetup.exe/ on the box. That would be the best way to check it.

  4. Hej jan.

    Jag upplevde samma sak med rollup 4 för 2010. Tror det har kommit nya rekomendationer på hur man skall lägga på rollups nu.

  5. Hi Jan, Now in my exchange 2010 sp2
    C:Windowssystem32> Get-ExecutionPolicy -List

    Scope ExecutionPolicy
    —– —————
    MachinePolicy Undefined
    UserPolicy Undefined
    Process Undefined
    CurrentUser Undefined
    LocalMachine Undefined

    But when I try to install rollup1 shows error 1023

    Product: Microsoft Exchange Server – Update ‘Update Rollup 1 for Exchange Server 2010 Service Pack 2 (KB2645995)′ could not be installed. Error code 1603. Additional information is available in the log file C:UsersXXXAppDataLocalTempMSI6c69.LOG.

    Any Idea

  6. Pingback: Microsoft Exchange 2010 – Update Fehler RU1 | Jahic IT