Exchange 2010 Server keeps locking up

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

ASKER

Hi K-H,

here are the items I completed as requested:

1) Checked DNS servers for the network and both DC's are also DNS and set statically on the exchange server
2) I ran dcdiag /fix on SERVER005 and got the following error:
Starting test: NCSecDesc
Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
Replicating Directory Changes In Filtered Set
access rights for the naming context:
DC=DomainDnsZones,DC=DOMAIN,DC=local
......................... ERBERB failed test NCSecDesc

No other error were reported except this - everything else passed

3) Ran ipconfig /flushdns on the exchange
4) Ran ipconfig /registerdns on both servers. (AD& Ex) - checked error logs for both - no errors related to DNS were found
5) Ping erberb.local and got reply back from one of the DC's IP address

Let me know if anything else is required.

thanks,

TheSonicGod

@TheSonicGod: Were you able to point to your DC using the cmdlet I provided earlier?

Regards,
Exchange_Geek

ASKER

Just typing you my post Exchange_Geek:

I tried you command line in EMS console and got the following error:

[PS] C:\Windows\system32>Set-ExchangeServer -Identity EXCHSERVER -StaticDomainControllers SERVER005.ERBERB.LOCAL -StaticGl
obalCatalogs SERVER005.ERBERB.LOCAL -StaticExcludedDomainControllers SERVER005.ERBERB.LOCAL
The specified domain controller "SERVER005.ERBERB.LOCAL" can't be in both the excluded domain controller and the other three.
+ CategoryInfo : InvalidOperation: (EXCHSERVER:ServerIdParameter) [Set-ExchangeServer], InvalidOperation
Exception
+ FullyQualifiedErrorId : 7834D20B,Microsoft.Exchange.Management.SystemConfigurationTasks.SetExchangeServer

Did I not do the command correctly?

ASKER

Also Ran the dcdiag /fix on the 2nd DC server and got these errors:

Starting test: NCSecDesc
Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
Replicating Directory Changes In Filtered Set
access rights for the naming context:
DC=DomainDnsZones,DC=erberb,DC=local
......................... SERVERSQL1 failed test NCSecDesc

Starting test: SystemLog
An error event occurred. EventID: 0xC0002720
Time Generated: 08/02/2012 01:01:17
Event String:
The application-specific permission settings do not grant Local Laun
ch permission for the COM Server application with CLSID
An error event occurred. EventID: 0xC0002720
Time Generated: 08/02/2012 01:01:17
......................... SERVERSQL1 failed test SystemLog

SOLUTION

K-H

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

SOLUTION

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

SOLUTION

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

ASKER

Hi H-K,

I ran repadmin /syncall and here is the output:

CALLBACK MESSAGE: The following replication is in progress:
From: 485bb582-95a3-4e8f-bf14-2d943c44392a._msdcs.erberb.local
To : ea937a96-1205-4a69-a43e-42d863d68c2d._msdcs.erberb.local
CALLBACK MESSAGE: The following replication completed successfully:
From: 485bb582-95a3-4e8f-bf14-2d943c44392a._msdcs.erberb.local
To : ea937a96-1205-4a69-a43e-42d863d68c2d._msdcs.erberb.local
CALLBACK MESSAGE: SyncAll Finished.
SyncAll terminated with no errors.

There are no 2003 DC's anymore as my friend apparently demoted all of them a couple of weeks ago and this is when these issues started - there server are still on the network but have been completely demoted

Thanks for your help - let me know your thoughts on the above.

TheSonicGod

ASKER

Hi Exchange_Geek,

I ran the command in EMS: Set-ExchangeServer -Identity “Your Mail Server Name” -StaticDomainControllers "FQDN of local DC" -StaticGlobalCatalogs "FQDN of local GC" -StaticConfigDomainController "FQDN of local GC"

both with then without the quotes (updated the parameters within the quote areas) and it seem to accept it both ways (was not sure if I should leave the quotes or not)

I assume I do not have to reboot or restart exchange services after this command for these settings to take affect.

And I checked and there is no Read-Only DC's on the netowork (RODC) so I will ignore the NCSecDesc error from dcdiag results as per your MS article link.

Please advise if there is anything else I need to run.

thanks,

TheSonicGod

ASKER CERTIFIED SOLUTION

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

ASKER

Hi Exchange_Geek, H-K,

The exchange shell command seems to have stabilized the email - except that BES services (also installed on this server) crashed over the weekend).

I have not got a chance to do any of the the Domain diagnosis yet but will be complete this this week.

I will advise further once I have more.

thanks,

TheSonicGod

Great, some good news always lightens up the day. We'll wait for your response.

Regards,
Exchange_Geek

ASKER

Hi Exchange_Geek & H-K,

Sorry for the delay in my reply - Ran into some major issues with this setup. It seems that someone in the past has changed and removed the ability for the administrator account in security that now prevents the administrator from running any of the adprep settings.

I am having to manually change/fix the items found but it is a slow process.

I will advise further once I have more.

thanks,

TheSonicGod