Exchange 2010 problems applying SP3

SBS2011 box trying to apply SP3, has been rebooted before starting update, post problem same result - the MSExchangeProtectedServiceHost won't start so clients can't access email.

We have not disabled IPv6 and the service is set to local system

06/03/2013 15:38:07.0216] [1] Processing component 'Bridgehead Role Setter' (Configuring the Hub Transport role.).
[06/03/2013 15:38:07.0216] [1] Executing:
        if (get-service MSExchangeServiceHost* | where {$_.name -eq "MSExchangeServiceHost"})
        {
            restart-service MSExchangeServiceHost
        }
       
[06/03/2013 15:38:14.0059] [1] Executing:
        if (get-service MSExchangeProtectedServiceHost* | where {$_.name -eq "MSExchangeProtectedServiceHost"})
        {
            restart-service MSExchangeProtectedServiceHost
        }
       
[06/03/2013 15:40:14.0134] [1] The following 1 error(s) occurred during task execution:
[06/03/2013 15:40:14.0150] [1] 0.  ErrorRecord: Service 'Microsoft Exchange Protected Service Host (MSExchangeProtectedServiceHost)' cannot be started due to the following error: Cannot start service MSExchangeProtectedServiceHost on computer '.'.
[06/03/2013 15:40:14.0212] [1] 0.  ErrorRecord: Microsoft.PowerShell.Commands.ServiceCommandException: Service 'Microsoft Exchange Protected Service Host (MSExchangeProtectedServiceHost)' cannot be started due to the following error: Cannot start service MSExchangeProtectedServiceHost on computer '.'. ---> System.InvalidOperationException: Cannot start service MSExchangeProtectedServiceHost on computer '.'. ---> System.ComponentModel.Win32Exception: The service did not respond to the start or control request in a timely fashion
   --- End of inner exception stack trace ---
   at System.ServiceProcess.ServiceController.Start(String[] args)
   at Microsoft.PowerShell.Commands.ServiceOperationBaseCommand.DoStartService(ServiceController serviceController)
   --- End of inner exception stack trace ---
[06/03/2013 15:40:14.0228] [1] The following error was generated when "$error.Clear();
        if (get-service MSExchangeProtectedServiceHost* | where {$_.name -eq "MSExchangeProtectedServiceHost"})
        {
            restart-service MSExchangeProtectedServiceHost
        }
        " was run: "Service 'Microsoft Exchange Protected Service Host (MSExchangeProtectedServiceHost)' cannot be started due to the following error: Cannot start service MSExchangeProtectedServiceHost on computer '.'.".
[06/03/2013 15:40:14.0228] [1] Service 'Microsoft Exchange Protected Service Host (MSExchangeProtectedServiceHost)' cannot be started due to the following error: Cannot start service MSExchangeProtectedServiceHost on computer '.'.
[06/03/2013 15:40:14.0228] [1] Cannot start service MSExchangeProtectedServiceHost on computer '.'.
[06/03/2013 15:40:14.0228] [1] The service did not respond to the start or control request in a timely fashion
[06/03/2013 15:40:14.0243] [1] [ERROR-REFERENCE] Id=BridgeheadRoleSetterComponent___dd9c610618d44ff9bb1635b8b946ef42 Component=EXCHANGE14:\Current\Release\Shared\Datacenter\Setup
[06/03/2013 15:40:14.0243] [1] Setup is stopping now because of one or more critical errors.
[06/03/2013 15:40:14.0243] [1] Finished executing component tasks.
[06/03/2013 15:40:14.0290] [1] Ending processing Install-BridgeheadRole