Problems when installing Exchange 2010 Service Pack 1 on a TMG configured for Mail protection
TMG can be configured in a Mail protection role. In such configurations Forefront Protection for Exchange and Exchange Server (edge transport role) are installed on the same machine as TMG.
We have identified problems when installing Microsoft Exchange Server 2010 Service Pack 1 (SP1) that was released last week on such deployments.
Update: A fix for this problem is now available for download as part of Software Update 1 for Microsoft Forefront Threat Management Gateway (TMG) 2010 Service Pack 1.
Root cause
SP1 made some changes to the SDK including removing some of the existing cmdlets (see more information here).
When Email protection is configured on TMG and Spam Filtering functionality is enabled, TMG uses one of the cmdlets that has been removed (get-antispamupdates) in SP1. As a result, Microsoft Forefront TMG Managed Control service fails to start and the event viewer will contain a message that the service terminated with the following error : %%-2146233088 :
What we are doing to address this problem
The TMG team is fully committed to addressing this problem and is working on a fix which will be publically available soon. We recommend refraining from installing Exchange 2010 SP1 on TMG machines until the fix is available. We will publish another blog post when the fix becomes available.
Update: A fix for this problem is now available for download as part of Software Update 1 for Microsoft Forefront Threat Management Gateway (TMG) 2010 Service Pack 1.
If you are already affected by this problem and need urgent assistance, please contact Microsoft support (http://support.microsoft.com).
Thank you for your patience,
Gabriel Koren
Comments
Anonymous
September 01, 2010
Do you guys talk to each other at MS? Like, ever?Anonymous
September 06, 2010
Some updates about release date of TMG hotfix ?Anonymous
September 13, 2010
If you've already applied SP1 on a TMG server, is there any way to remove it?Anonymous
September 13, 2010
Is there already a release date for this hotfix?Anonymous
September 16, 2010
TMG guys some updates about hotfix release ?Anonymous
September 16, 2010
Update would be much appreciated... we've been dealing with a flood of spam for 2 weeks now.Anonymous
September 20, 2010
it has been reported that the fix has been released for this issue and will be available on 9/21/2010Anonymous
September 22, 2010
I have just patched with TMG SP1 and the rollup patch. Then applied Exchange SP1. Control service is now failing with the following error The Microsoft Forefront TMG Managed Control service terminated with the following error: %%-2146233079Anonymous
September 26, 2010
same problem here ... "I have just patched with TMG SP1 and the rollup patch. Then applied Exchange SP1. Control service is now failing with the following error The Microsoft Forefront TMG Managed Control service terminated with the following error: %%-2146233079"Anonymous
September 27, 2010
I have had this problem several times and it is always fixed after running the following command. Get-IPBlockListEntry | Remove-IpBlockListEntry It has something to do with another bug (no words from MS yet about this one) that stops the Managed Control from starting if you block list entires are to many. Hope this fixes you problem :)Anonymous
October 19, 2010
The comment has been removedAnonymous
November 18, 2010
SP1 Update 2 > support.microsoft.com/.../2454850Anonymous
June 12, 2011
The comment has been removedAnonymous
December 13, 2011
Hi there, is there any info available if we are facing similar problems when installing Exchange 2010 SP2?