SP1 and June CU installed

Always a challenge to install service packs, and today (after having a snapshot of my new SP installation) I installed, in the following order:
SP Foundation SP1, reboot
SP Server SP1, reboot
Run Config wizard, reboot
Restart USP - worked (but you need to have the farm admin account in Local Admins group)
New snapshot
CU for Foundation, reboot
CU for Server, reboot
Run config wizard
Config wizard failed
Powershell and force upgrade
Config wizard successful
USP - failed to start the service
Knew it!
Found that the FIM (Forefront Identity Manager) groups locally were empty
Added the farm admin account to those groups
Now the USP started
Could run the full sync again
Imported all profiles and imported the AD pictures (thumbnailPhoto property) as well, nice!
Will try to remove the farm account from the local admin group tomorrow and run a full sync
Then find out which of the FIM groups the farm account needs to stay in, one by one
New snapshot
Done.
Not too bad.