Saturday, July 16, 2011

Interim Update notes


I installed the Exchange Server 2010 Service Pack 1 Update Rollup 4 Interim Update (KB2575734) this afternoon on all of our Exchange 2010 servers, and I have a couple of thoughts to share.
Regarding ANY Exchange patching:
  • Our Exchange 2010 servers are running the Microsoft Forefront Protection for Exchange anti-virus software. This software integrates with Exchange and creates dependencies with the Transport and Information Store services. You MUST disable Forefront prior to installing ANY Exchange patches, so it won’t interfere with the patch installer’s ability to stop or start Exchange services as needed, and then re-enable Forefront after patching. Run the FSCUTILITY command line utility with either the “/disable” or “/enable” switch to perform those tasks. That command will remove/restore the service dependencies. 
Regarding the interim update:
  • This Interim Update fixes a bug that was recently discovered in Exchange Server 2010 SP1 Update Rollup 4 (http://blogs.technet.com/b/exchange/archive/2011/07/13/exchange-2010-sp1-ru4-removed-from-download-center.aspx), which can cause subfolders and messages to disappear when a folder is copied from one location to another within the Outlook client (all versions). The bug does not affect OWA or ActiveSync clients. The deleted files can be recovered from the dumpster, but most Outlook clients do not have the dumpster enabled for any folder except the Deleted Items folder.
  • This Interim Update can only be applied to the same Exchange Server 2010 version and/or Rollup target for which it was intended.
  • Only one Interim Update can be run on a server at a time. You must remove any other Exchange Server 2010 Interim Update before installing this Interim Update. If you require multiple Interim Update fixes, these Interim Update fixes must be in a single Interim Update package and need to be requested.
  • The Strong Name tool (sn.exe) must be present to configure the system to skip strong name verification before installing the Interim Update package.
  • Strong named signing verification must not be enabled if an Interim Update is present on the server or some services may crash on startup.
  • This Interim Update package must be removed before installing any Exchange Server 2010 official rollup or alternate IU release.
Steps to apply the Interim Update:
1.            Run sn.exe -Vr * to disable strong name verification.
2.            Run sn.exe -Vl to verify that strong name verification is disabled.
3.            Run the MSP file to install the Interim Update on the system.
Steps to remove the Interim Update (these steps will not occur until the next update rollup or service pack is ready to be installed):
1.            Uninstall Interim Update for Exchange Server 2010 (KB2575734) from Add/Remove programs.
2.            Run sn.exe -Vu * to enable strong name verification.
3.            Run sn.exe –Vl to verify that strong name verification is enabled.