Hello,
I have just finished to deploy the CU20 in our acceptance (2 DAGs, 10 mailbox servers, 8 as VMs, 2 as physical with a big config. In prod, full of physical with Bitlock enabled).
The installation took on average 8 hours (the slowest one took a bit more than 12 hours (!!!)) while usually in acceptance it takes around 3 hours.
When checking the exchange setup logs, I see that each time it blocks on Set-LocalPermissions for a long time. As other comments, I had a huge number of ASP.NET errors in the event viewer during the install but event viewer is clean after setup process.
AV Disabled, CRL Checks disabled and servers freshly rebooted.
Any idea on why the Set-LocalPermissions took so much time (each time around 45 mins).? Any link with all those asp.net errors? Maybe to stop IIS? Any other idea is more than welcome, I can't afford 12 hours of installation time in prod. Coming from CU19 with latest security fixes.