Exchange 2007 SP1 to SP upgrade (prep for Exchange 2010)

Posted on 2011-05-06
Last Modified: 2012-05-11

2x HUB/CAS SP1 (running on Windows 2003 SP2 x64)
2x Cluster Nodes running SCC Exchange 2007 SP1 (windows 2003 SP2 x64)
1xAD domain (multi-site) - Windows 2003 x86 SP2 Native

When running the SP2 install from one of the Exchange servers and during the 'Organization Preparation) it initially says checks are ok then it goes onto o fail with the following;

The well-known object entry with GUID 73000302-5915-4dce-a330-91dd24f58231 on the otherWellKnownObjects attribute on the container object CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=sub,DC=domain,DC=org refers to a non-USG CN=Exchange Public Folder Administrators,OU=Microsoft Exchange Security Groups,DC=sub,DC=domain,DC=org.  Please either delete the well-known object entry or promote the target object to a universal security group.

Now I have checked this group and it is indeed a USG.

The reason I am a little more concerned, is that I had built a lab which was a direct replica of the prod AD and I also ran recovery to rebuild the exchange infra in the lab so it is an exact config replica also.

Now the SP2 here went fine and the new Exchange 2010 attributes were added to the schema.
I have search for an answer and so far can only seem to find a solution stating to clear the attribute in ldp but I am a little reluctant to jump straight in with trying that on my prod setup.

Both the prod and lab LDP attribs are showing exactly the same values.

As I say, in the lab it went fine with no issues at all...

Any ideas?

Question by:BryanOakley
    LVL 8

    Accepted Solution


    Author Comment

    hi steinmto

    thanks for getting back. i did stumble across this previously and had my lab not been a replica setup (with the same attrib values afaik) then i would go ahead with it.

    I just need to be really cautious as I do not want the prod exchange to go bang and give me major problems :-)

    LVL 23

    Assisted Solution

    by:Justin Durrant
    I have run into this.. updating via LDP is easy and should not cause you any issues.

    Author Comment

    hi jjdurrant

    thanks - ok, so just add a new blank value to otherWellKnownObjects atrrib should be fine?
    Did you have to run any setup/prepareAD post this change or were all your Exchange groups still in place?

    Thanks again.

    Author Closing Comment


    apologies for delay - yes all worked out fine in the end. to note, I did have to run setup/preparead again and then re-populate some of the default exchange groups (to enable my clusters to work etc) but no major issues.

    Thanks for the replies and I hope the points split is ok..


    Featured Post

    Are end users causing IT problems again?

    You’ve taken the time to design and update all your end user’s email signatures, only to find out they’re messing up the HTML, changing the font and ruining the imagery. What can you do to prevent this? Find out how you can save your signatures from end users today.

    Join & Write a Comment

    Granting full access permission allows users to access mailboxes present in their database. By giving full access permission one can open and read the content of any mailbox but cannot send emails from that mailbox.
    We are happy to announce a brand new addition to our line of acclaimed email signature management products – CodeTwo Email Signatures for Office 365.
    In this video we show how to create a Distribution Group in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >>…
    In this video we show how to create a mailbox database in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Servers >> Data…

    754 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    19 Experts available now in Live!

    Get 1:1 Help Now