Exchange 2010 Management Console (EMC) is very slow

Lately while working with my Exchange 2010 customers they complain “ Exchange 2010 Management Console is very slow”, and I have been advising them about a workaround that had worked perfectly for me and them all the time. Now the management console starts very quickly . So here is the solution:


Turn off (Uncheck) “Check for publisher’s certificate revocation” & “Check for server certificate revocation” options on the server/workstations you are starting the EMC (Exchange Management Console) on

·        In Windows Internet Explorer –> Tools –> Internet Options –> Advanced tab

·        In the Security section, uncheck the below two options “Check for publisher’s certificate revocation” & “Check for server certificate revocation”


How does this relate to the EMC in Exchange 2010  ? well Exchange tries to connect to the certificate revocation list (CRL) Web site. Exchange examines the CRL list to verify the code signing certificate.


I have also noticed that unchecking the two options above speed up the start time of EMS (Exchange Management Shell)


This is a security option and unchecking this represent a risk unless the machine is in a secure environment, please be aware the of consciences of this change.

Comments (23)

  1. Glenn says:

    Nice! It does improve the speed of opening the console. Appreciate the tip!

    Amazing how so many of their products are tied in through IE

  2. Steve Shockley says:

    You really suggest disabling CRL checking for the whole machine to resolve performance problems?  You might as well not sign it in the first place.

  3. Steve Blanche says:

    I think the point is to turn it off on the machine where you're using the EMC – not on the Exchange server.

  4. sahar says:

    Thanks ALOT!!! really helped me there…

  5. Rovied Rais says:

    Thanks, life become easy.

  6. Big B says:

    Outstanding – Has made such a huge difference and such a simple fix.  Well done!

  7. Wazza says:

    Thank you very much. Works very fast now.

  8. Mr Mango says:

    Jeez ! This speeds it up a treat! This is crazy, thanks for the info!

  9. Cletus says:

    Sadly, this had no effect on my EMC

  10. Cesar says:

    Thanks, this Solution was Perfect…

  11. Simon says:

    This is NOT a secure solution, this is a global chnage for all certificate requests, i would recomend activating the CAPI2 logging then open the console and see whats happening with the certificate request, on our system there is a problem with the CRL from Microsoft

  12. Rudiger says:

    WooHoo  Fixed for me.  YAY

  13. Zed says:

    Great!…Many thanks mate…I've been looking for a fix for hours

  14. greg says:

    Thank you, thank you, thank you!!!

  15. cagdas says:

    worked for me, thanks so much

  16. S Murad says:

    Did not make any differences! Sorry

  17. Luca says:


  18. Amy Redwing says:

    Did absolutely nothing! Not sure what the commotion is all about. Are you managing couple of hundred MBs? Anyone here with 5000+ MBs?

  19. S Riggs says:

    Did nothing still slow, placebo effect for those that say it loads faster?

  20. Peter F says:

    Went here from , Snap not responding (hangs 15 sec) till direct open. So worked for me !

  21. KnightChunkman says:

    Is there a better way to do this without disabling these options? What exactly does it look for in the CRL?

  22. Cameron Wilson says:

    It checks the CRL to see if the signing certificate has been revoked (e.g. no longer valid from the signing authority).

    To those mentioning the security issue — this absolutely is. However, to those of us who work on closed networks, this is a HUGE performance gain since CRLs (most commonly) aren’t available for checking anyway.

    …as the author said, a conscious security decision by the user. Btw, this setting is on a PER-USER basis.

  23. mcv says:

    Thanks a’s worked for me.