Error message when you try to install Exchange Server 2010 SP2: “AuthorizationManager check failed”

Error: Message :



1. Exchange Servers placed in a OU which has GPO applied to them.

2. PowerShell Execution Policy set to unrestricted or remote signed.



Step1: Create a separate Organizational Unit in Active Directory and place Exchange Servers in that  Organizational Unit . Do not apply any GPO on newly created Organizational Unit.

Step2: Log on to Exchange Server. Start Menu>Run>gpedit.msc


Right click on Local Computer Policy>Property>Disable computer Configuration settings and User Configuration Settings


Step3: Open PowerShell> issue the following command

Set-ExecutionPolicy –Scope LocalMachine –ExecutionPolicy Undefined –Confirm –Force

Step4: Reboot Server. Once rebooted log back on to the Exchange Server. check execution policy by issuing the command

Get-ExecutionPolicy –List


Step5:  Start Menu>Run>services.msc . Stop any backup software and Antispam software services on the server.

Step6: Upgrade HT/CAS Server: Download Exchange 2010 SP2 and install Exchange SP2 by the issuing the following command in PowerShell /M:Upgrade /InstallWindowsComponents

Apply Service Pack 2 to HT and MBX server first. If you have multiple servers in HT/CAS Array than you can apply service to one exchange array member. your exchange infrastructure still be functional and service mail systems.






Step7: download Update Rollup1 for Exchange 2010 SP2 and apply rollup1.






Step7: Upgrade Mailbox Server: Log on to MBX server. Open Exchange Management Console>Click Server Configuration>Select Mailbox>Select Server>Click Switchover Server>Browse and Select a server>click ok. Wait few minutes to finish the operation. Check the mailbox node again. It should show Is Active: False.


Now follow the previous steps to upgrade to SP2 and Rollup1.

Caution: Take a snapshot if Exchange is a virtual server. If exchange 2010 SP2 installation fails for another reason revert the snapshot back to original. Exchange will still be functional even active directory schema is upgraded by exchange SP2 installer.

If server is physical than the following URL might be handy for you.

Recovery Databases

Understanding Backup, Restore and Disaster Recovery

Recover an Exchange Server

Reference Microsoft KB2668686

About Raihan Al-Beruni

My Name is Raihan Al-Beruni. I am working as an Infrastructure Architect in Data Center Technologies in Perth, Western Australia. I have been working on Microsoft technologies for more than 15 years. Other than Microsoft technologies I also work on Citrix validated solution and VMware data center virtualization technologies. I have a Masters degree in E-Commerce. I am certified in Microsoft, VMware, ITIL and EMC. My core focus is on cloud technologies. In my blog I share my knowledge and experience to enrich information technology community as a whole. I hope my contribution through this blog will help someone who wants more information on data center technologies.
This entry was posted in Exchange Server and tagged , , , . Bookmark the permalink.

6 Responses to Error message when you try to install Exchange Server 2010 SP2: “AuthorizationManager check failed”

  1. Thomas says:

    Im facing problem intstalling exchange after upgrading to SP2 on my CAS Server.First I have Installed without checking the execution policy and installation failed with error “AuthorizationManager check failed and removed all my exchange binary files.Aftert that I have tried to recover the server using SP1 media using recover switch, that also failed.

    As per you artcile i moved my CAS server to new OU and removed all Group Polcies and changed the Local group polices as per you article.All my Executin policies are now showing undefined.but after starting installtion using /recoverserver to rebuild my server, it was found that local machine execution policy has been changed again back to remotesigned. Do you know why its changing it back ?

    Even if all policies are showing undefined,if i run get-executionpolicies without -list arguments shows that restricted. Any Idea why it is showing like this ?

    Now my CAS server is unsuable, Now i cannot install E2k10 SP2 and also not possible to rebuild my CAS server using Exchange 2010 SP1

    Any help to solve this issue ?

    I know it s bug in Exchange 2010 sp..prerequesties runs fine without any problema and removes all exchange files..Many Admins are facing similar issue.



    • Did u run gpupdate /force and reboot
      Set it undefined again
      open gpedit.msc >right property>disable GPO

      Use Exchange 2010 SP1 CD and recover server

      if you have a snapshot (for virtualized exchange) you may restore the snapshot.


      • Thomas says:

        Thank you for you reply..

        I had created new OU and moved my server and my account to that OU, Also disabled computer and user policies at the local computer (as per ur article). But still recovery was failing again saying that networkconnections.ps1 script is missing. Some blog says that we have to recover using RTM version. I tried that also. but no hope and at last i had to reinstall the OS to recover my CAS server.

        Very bad experience with SP2. I don’t know why they didn’t check execution policy as prerequisite. After upgrading schema and removing all exchange binaries its saying installation failed and recover your exchange using media and recover also failed.
        I had to install SP2 on 24 servers. If this is the case I have to postpone the SP2 deployement.I think this is a bug .

        Can i ask some few questions..

        Wat is the minimum SP1 rollup required to upgrade SP2? All our exchange servers are updated with Sp1 Rollup 2 only.
        Our Powershell Execution Policy for at Domain Level is set to “All Signed”
        Find below the execution polices shows on server wtih group policy settings applied.

        Scope ExecutionPolicy
        —– —————
        MachinePolicy Unrestricted
        UserPolicy Unrestricted
        Process Undefined
        CurrentUser Undefined
        LocalMachine Undefined

        Our SP2 installation was failed with above execution policy settings.

        what is the reccomended powershell execution policy setting at the domain level ?

        Thanks in advance.


  2. Arshad Bashir Khattak says:

    Great work.


  3. Mustapha Amlal says:

    Mustapha Amlal
    Hi Mr. Raihan Al-Beruni
    I hope everything is doing great for you. I am going to migrate Exchange Server 2003 to Exchange Server 2010 do you have an updated procedure for that?
    You are doing a great job by helping people resolving their issues.
    Mustapha Amlal


Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s