Symptoms
Assume that Microsoft Forefront Protection 2010 Exchange Server (FPE) is installed in a Microsoft Exchange Server 2010 environment. While Forefront services are running, you install an Exchange update on an Exchange Server 2010 server. In this situation, the installation process takes a long time, and the Microsoft Exchange Transport service does not start automatically after the installation is complete.
Cause
This issue occurs because of a problem in the interaction between the Exchange services and the Forefront services during the installation process.
Resolution
To resolve this issue, install the following update rollup:
2706690 Description of Update Rollup 4 for Exchange Server 2010 Service Pack 2
Note Starting with Update Rollup 4 for Exchange Server 2010 Service Pack 2, the rollup setup and installation process stops and restarts Forefront services automatically. Therefore, if you are installing this update rollup or a later update rollup, you do not have to manually disable and restart Forefront services during the installation process.
Workaround
To work around this issue, manually disable Forefront services before you install the Exchange update rollup, and then restart the Forefront services after the installation is complete.
Status
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
More Information
For more information about Forefront Protection 2010 for Exchange Server, go to the following Microsoft website:
Forefront Protection 2010 for Exchange ServerFor more information about how to enable or disable Forefront Security by using FSC Utility commands, go to the following Microsoft website:
General information about the FSC utilityFor more information about how to disable and enable Forefront services by using PowerShell scripts, go to the following Microsoft website:
Sample script to disable and enable Forefront service during patching
