p.MsoNormal, li.MsoNormal, div.MsoNormal {margin-top:0cm;margin-right:0cm;margin-bottom:10.0pt;margin-left:0cm;line-height:115%;font-size:11.0pt;font-family:'Calibri','sans-serif';} .MsoChpDefault {;} .MsoPapDefault {margin-bottom:10.0pt;line-height:115%;} @page Section1 {size:595.3pt 841.9pt;margin:72.0pt 72.0pt 72.0pt 72.0pt;} div.Section1 {page:Section1;} Hi there,We are getting a frustrating issue where the updates for the Exchange 2007 Anti-Spam are failing to install.System info:Server: Windows Server 2008 x64Exchange 2007 SP1 running as Hub TransportEach time I try to run from Windows Update I get the following red event errors in the application log.Log Name: ApplicationSource: MsiInstallerEvent ID: 1024Level: ErrorUser: AdministratorProduct: Microsoft Exchange 2007 Enterprise Anti-spam Filter Updates - Update 'Update to 3.3.7006.600' could not be installed. Error code 1603. Windows Installer can create logs to help troubleshoot issues with installing software packages. Use the following link for instructions on turning on logging support: http://go.microsoft.com/fwlink/?LinkId=23127Log Name: ApplicationSource: MsiInstallerEvent ID: 11719Level: ErrorUser: AdministratorProduct: Microsoft Exchange 2007 Enterprise Anti-spam Filter Updates -- Error 1719. The Windows Installer Service could not be accessed. This can occur if the Windows Installer is not correctly installed. Contact your support personnel for assistance.Log Name: ApplicationSource: MSExchangeTransportEvent ID: 12014Level: ErrorUser: N/AMicrosoft Exchange couldn't find a certificate that contains the domain name issolutions.co.uk in the personal store on the local computer. Therefore, it is unable to support the STARTTLS SMTP verb for the connector Outgoing mail with a FQDN parameter of issolutions.co.uk. If the connector's FQDN is not specified, the computer's FQDN is used. Verify the connector configuration and the installed certificates to make sure that there is a certificate with a domain name for that FQDN. If this certificate exists, run Enable-ExchangeCertificate -Services SMTP to make sure that the Microsoft Exchange Transport service has access to the certificate key.I have verified that the following services are started / configured as:Background Intelligent Transfer Service: Manual (starts when you run Windows Update)Microsoft Exchange Anti-spam Update: Automatic (and started)Windows Update: Automatic (and started)I just cannot seem to be able to figure out why I cannot automatically or manually apply the updates to the Anti-spam for Exchange. Any help is very much appreciated.<!--[if !supportLineBreakNewLine]--><!--[endif]-->

Clarify: Anti-spam updates is not working on HT Troubleshooting: 1. See if Automatic Updates is also started in services.msc Notes: It needs to be started and the Startup type needs to be "Automatic" 2. Please go to the Microsoft Update to check if the Windows can be updated Notes: This can help us to make sure if the issue is related to Windows, or the Exchange Server itself. If it is a Windows update issue, all the automatic update of Windows should be affected 3. Use Get-AntispamUpdates to check the update mode and post the output 4. For error 11719, please follow the methods in the KB 315346 5. For error 1024, please enable windows installer logging and reproduce issue, see if we can get more detailed error info for analysis 6. How to Troubleshoot STARTTLS Certificate Error 12014

Hi, Harry. How's the issue currently?

Hi, issue still stands, I have raised a support call with Microsoft. Will reply when I hear the resolution.Thanks,Dale

OK

Solution found:Incorrect registry key at HKEY_LOCAL_MACHINE\SYSTEM\ CurrentControlSet\Services\msiserver where we had a wow setting to 1 changing it to 0 resolved the issue.

Glad you solved it!

Good answer for me too, thanks. (My registry entry was WOW64 BTW)Just had to restart the Windows Installer service and the update installed correctly (5 months on...)25 years in IT?