SBS 2011 not impacted – Exchange 2010 Sp2 KB

Error message when you try to install Exchange Server 2010 SP2: “AuthorizationManager check failed”:
http://support.microsoft.com/kb/2668686/en-us?sd=rss&spid=13965
Consider the following scenario:


  • You install Microsoft Exchange Server 2010 or Microsoft Exchange Server 2010 Service Pack 1 (SP1). (okay SBS 2011 includes Exchange 2010 sp1 – check)
  • You use the Group Policy Management Console (GPMC) or the Local Group Policy Editor (Gpedit.msc) to create a Group Policy Object (GPO) or a local policy . (We do have group policies – check)
  • The GPO or the local policy sets the Windows PowerShell Execution policy to a status other than Undefined. (SBS 2011 does NOT do this and thus will not be impacted by this)
  • You install Microsoft Exchange Server 2010 Service Pack 2 (SP2).

When this error occurs, Exchange Server 2010 does not work and is not listed in Add or Remove Programs. Additionally, you cannot reinstall Exchange Server 2010.

This issue occurs because the Windows Management Instrumentation (WMI) service is stopped during the installation process. Therefore, the ServiceControl.ps1 Windows PowerShell script that runs as part of the Exchange Server 2010 SP2 installation process cannot call the WMI service to verify the execution permissions.


To resolve this issue, follow these steps:


  1. Recover the server that is running Exchange Server 2010

Ouch.  Bottom line, SBS is not impact.  But for anyone else out there installing SP2, you might want to check your PowerShell and ensure you have not set a policy.

4 Thoughts on “SBS 2011 not impacted – Exchange 2010 Sp2 KB

  1. I would still check as per the KB, by default the policy many not be set but once in production someone could have changed that. I just checked my home test server and LocalMachine was set and an SBS deployment from last week has this set.

  2. I just checked my SBS 2011 server, and the ExecutionPolicy value is LocalMachine: “RemoteSigned”!

    When I changed to Undefined, EMC and EMS broke.

    EMS started throwing the following on launch:

    “File C:\Program Files\Microsoft\Exchange Server\V14\bin\RemoteExchange.ps1 cannot be loaded because the execution of scripts is disabled on this system.”

    EMC threw the following when launched “Exception calling “GetSteppablePipeline”…”

    I set the policy back to RemoteSigned, but I’m concerned about proceeding to install

  3. Teddy on March 8, 2012 at 8:43 am said:

    My SBS 2011 server also has the ExecutionPolicy > LocalMachine > “RemoteSigned” value and all others as “Undefined”.

    I’m finding conflicting information on weather this needs to be set as “Undefined”, “Unrestricted” or “RemoteSigned” to allow Exchange 2010 Sp2 to install successfully.

    Can you please confirm if the update will install with LocalMachine set to “RemoteSigned” on an SBS 2011 server?

  4. bradley on March 9, 2012 at 12:27 am said:

    You don’t need to change anything on SBS, it will install just fine.

Post Navigation