Exchange 2010 DAG Configuration

I am trying to setup the first DAG in my Exchange 2010 environment.  I currently have an Exchange 2003 cluster and have built new Windows 2008 R2 enterprise servers for Exchange 2010.  I have the first server built with the cas, mb, and ht roles.  When I try to configure the DAG I get the error that states "The Exchange Trusted Subsystem is not a member of the local administrators group on the specified witness server"

However, it is a member of the local admins group on the server I'm trying to specify as the witness server.

I have scoured google and the technet and haven't found a solution yet.  Anyone else run into this?

Thanks
UMPH_UserAsked:
Who is Participating?
 
UMPH_UserConnect With a Mentor Author Commented:
Reconfigured server design to include 2 MBX servers and 2 CAS servers.  installed one of the CAS servers with hub trans role as the dag witness.
0
 
MegaNuk3Commented:
Is the witness server a DC/GC?
0
 
talkinsmakCommented:
Are you installing the FSW on the HT Server?  
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 
UMPH_UserAuthor Commented:
MegaNuk3 - No it's a member server

talkinsmak - No, I know it's recommended but I hate to waste an exchange license like that, and I read it can run on just a member server.
0
 
talkinsmakCommented:
I found this CMDLET:

Set-DatabaseAvailabilityGroup -identity <DAGNAME> -witnessserver "Your_DAG_FileServer" -witnessDirectory c:\dagwitness3

If that doesn't work they recommend adding the DAG File Server to the "Exchange servers" universal security group but that is a vulnerability.  Anyone with admin access to your file server can gain contol over all your Exchange objects.

You might want to check this out if you haven't already.

http://www.thecabal.org/2009/12/busting-the-exchange-trusted-subsystem-myth/

John
0
 
UMPH_UserAuthor Commented:
I have read that article.  When I run the cmdlet I get an error stating that DAGNAME could not be found on dnsserver.localdomain.com.  I have added an a record to my local dns for the dag name with the ip that the dag is going to use.

When I try to create a dag using the gui I still get the error stating that the exchange truseted group is not part of the local admins group.

May be time for a call to microsoft?
0
 
MegaNuk3Commented:
Install Exchange 2010 SP1 if you haven't already...

If it is already installed the open a command prompt and go to the source files and run "setup.com /mode:upgrade" that will reinstall the SP and repair group memberships...
0
 
talkinsmakCommented:
Kinda sucks that you had to go through all that to get it to work but that is the recommended way.

John
0
 
UMPH_UserAuthor Commented:
Decided to change design on my exchange upgrade.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.