The problem I had is once the rollup had been installed (and presumably failed as several services failed to start) no amount of program removal, config fixes or anything else would get the services ot autostart, they'd start manually with no problem but I find that less than acceptable.
In the end as this server is a hardware replacement and had no actual mail on it (other than a few test accounts) I redid it from scratch (Windows install included). Ran the rollup with a VPN to the outside world running and everything seems perfect.
I have no problem doing this but I find it hard to believe MS genuinely expect a mail server to have direct access to the internet.