Sign in with Microsoft
Sign in or create an account.
Select a different account.
You have multiple accounts
Choose the account you want to sign in with.

Update Rollup 17 for Microsoft Exchange Server 2010 Service Pack 3 (SP3) was released on March 21, 2017. Before you install this update, you must remove all interim updates for Exchange Server 2010 SP3. Also, see this important information about how to install this update.

This update also includes new daylight saving time (DST) updates for Exchange Server 2010 SP3. For more information about DST, see Daylight Saving Time Help and Support Center.

Get Update Rollup 17 for Exchange Server 2010 SP3

Method 1: Microsoft Update

This update rollup is available on Microsoft Update.

Note Microsoft Update doesn't detect update rollups for Exchange Server 2010 on clustered Exchange Server 2010 systems.

To get this update, follow these steps:

  1. Open Windows Update.

  2. In the navigation pane, select Check for updates, and then wait while Windows looks for the latest updates for your computer.

  3. If you see a message that states that optional updates are available or asks you to review optional updates, select the message to view the updates.

  4. In the list, select the check box for update 4011326, and then select Install.

Method 2: Microsoft Download CenterThe update rollup is also available for download from the following Microsoft Download Center website:

Download Update Rollup 17 for Exchange Server 2010 SP3 (KB4011326).

Issues that the cumulative update fixes

This cumulative update fixes the issues that are described in the following Microsoft Knowledge Base articles:

Update detail information

Installation instructionsLearn more about how to install the latest update rollup for Exchange Server 2010.

Also learn about the following update installation scenarios.

When you install this update rollup on a computer that isn't connected to the Internet, you may experience a long installation time. Additionally, you may receive the following message:

Creating Native images for .Net assemblies.

This behavior is caused by network requests to connect to the following website:

These network requests represent attempts to access the certificate revocation list for each assembly that native image generation (NGen) compiles to native code. However, because the server that's running Exchange Server isn't connected to the Internet, each request must wait to time out before the process continues.

To fix this issue, follow these steps:

  1. On the Tools menu in Internet Explorer, select Internet Options, and then select Advanced.

  2. In the Security section, clear the Check for publisher's certificate revocation check box, and then select OK.

    Note Clear this security option in Internet Explorer only if the computer is in a tightly-controlled environment.

  3. When setup is complete, select the Check for publisher's certificate revocation check box again.

Important Before you apply this update rollup, make a backup copy of any customized Outlook Web App files.

When you apply an update rollup package, the update process updates the Outlook Web App files, if it's required. Therefore, any customizations to the Logon.aspx file or to other Outlook Web App files are overwritten, and you must re-create the Outlook Web App customizations in Logon.aspx.

If you meet both of the following conditions, apply the update rollup on the Internet-facing Client Access servers (CAS) before you apply the update rollup on the non-Internet-facing Client Access servers:

  • You're a CAS Proxy Deployment Guidance customer.

  • You have deployed CAS-CAS proxying.

Note For other Exchange Server 2010 configurations, you don't have to apply the update rollup on your servers in any particular order.

Restart requirement
The required services are restarted automatically when you apply this update rollup.

Removal information
To remove Update Rollup 17 for Exchange Server 2010 SP3, use the Add or Remove Programs item in Control Panel to remove update 4011326. 

More Information

Installing this update on a DBCS version of Windows Server 2012
You can't install or uninstall Update Rollup 17 for Exchange Server 2010 SP3 on a double-byte character set (DBCS) version of Windows Server 2012 if the language preference for non-Unicode programs is set to the default language. To work around this issue, you must first change this setting. To do this, follow these steps:

  1. In Control Panel, select Clock, Region and Language, select Region, and then select Administrative.

  2. In the Language for non-Unicode programs area, select Change system locale.

  3. On the Current system locale list, select English (United States), and then select OK.

After you successfully install or uninstall Update Rollup 17, revert this language setting as appropriate.


Learn about the terminology that Microsoft uses to describe software updates.

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.

Communities help you ask and answer questions, give feedback, and hear from experts with rich knowledge.

Was this information helpful?

What affected your experience?
By pressing submit, your feedback will be used to improve Microsoft products and services. Your IT admin will be able to collect this data. Privacy Statement.

Thank you for your feedback!