Problem connecting and creating AD account via Exchange 2010 new mailbox wizard

We have Exchange 2010, when creating a known existing AD account(new user), populate all the fields and when clicking finish get the attached error. We have on AD DC and when I show FSMO, all point to this DC.

Where can I look to fix this problem?
Test-account-build-with-Exchange.png
LVL 1
HaroldNetwork EngineerAsked:
Who is Participating?
 
MaheshConnect With a Mentor ArchitectCommented:
So you have only DC

Do metadata cleanup for failed DC with ntdsutil

http://support.microsoft.com/kb/216498

Also delete old domain controller stale records from below locations

DNS NS , SRV, Host (A) , PTR records, and CNAME record from _msdcs.domain.com zone
Server entry in AD sites and services
Server entry in domain controllers OU if exists
Server entry under domain.com\system\File replication services\domain system volume container

Then navigate to %systemroot%\system32 and locate netlogon.dns and rename it to netlogon.dnsold
restart netlogon service and then check if you are able to create new user with exchange mailbox

Mahesh.
0
 
achaldaveCommented:
Can you create account in AD first and create mailbox?

How many domain controllers do you have? do you see any other error on domain controllers' event logs or on exchange server's event logs?
0
 
MaheshArchitectCommented:
Check if your active directory replication is working
run dcdiag /v and post output here
Also run repadmin /showrepl and check if replication is successful

You need to make sure that every DC in domain can show same RID master server
Means you need to run netdom query fsmo command on every DC in domain for verification
You need to install 2003 SP2 support tools on 2003 domain controllers to get netdom utility
The above situation may occurs when AD unable to decide who has got originally RID master FSMO role

Check below workaround as well
http://support.microsoft.com/kb/2028216
http://support.microsoft.com/kb/822053
http://support.microsoft.com/kb/839879

Mahesh.
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

 
HaroldNetwork EngineerAuthor Commented:
The reverse works, yes. We have to create AD account, the use Existing User.

1 DC...the other failed a couple months ago. Lot of replication errors about that in Event Viewer.
Where do I check in Exchange?
0
 
HaroldNetwork EngineerAuthor Commented:
I knew there were some issues with replication, as the secondary DC failed a couple months ago.

FSMO points to the current and only DC.

Schema owner                TSN-RAL-FILE01.tsn.corp

Domain role owner           TSN-RAL-FILE01.tsn.corp

PDC role                    TSN-RAL-FILE01.tsn.corp

RID pool manager            TSN-RAL-FILE01.tsn.corp

Infrastructure owner        TSN-RAL-FILE01.tsn.corp
showrepl.txt
dcdiag.txt
0
 
HaroldNetwork EngineerAuthor Commented:
Mahesh: thank you...I've started this process.

What is "Server entry in AD sites and services?"

Also get the following when I start to remove domain controller, should I just remove or something else first?
print01-DC-warning.png
0
 
MaheshArchitectCommented:
Under Ad sites and services you will find stale server object without referencing to anybody

You need to delete that as well.

Also  you can ignore warning and go ahead
0
 
HaroldNetwork EngineerAuthor Commented:
Can't remove this here Ad sites and services.....following error
print01-DC-warning-2.png
0
 
HaroldNetwork EngineerAuthor Commented:
I got it. Had to remove each object one at a time.
0
 
MaheshArchitectCommented:
If you receive a message that states the server is a container that contains other objects, verify that the appropriate decommissioning of services has completed before continuing.

If you receive a message that states the DSA object cannot be deleted, you may be attempting to delete an active domain controller.
http://support.microsoft.com/kb/216364

Just ensure 1st that Dc in the message is not on network and active.

Open adsiedit.msc, add default naming context there and check what else objects are dependent on that DC

if your DC is really already remove from network, use ntdsutil to cleanup metadata from active directory 1st as mentioned in KB article in earlier comment
http://support.microsoft.com/kb/216498

Mahesh
0
 
HaroldNetwork EngineerAuthor Commented:
Now I'm at this screen..not sure what to do here.
print01-DC-warning-3.png
0
 
MaheshArchitectCommented:
just type ? and hit enter, you will find all options

You need to select site, domain and dc name lastly one by one

if you don't find DC name in question, probably you don't have that one in metadata

if not, in that case i think you can simply delete that DC from adsiedit.msc
0
 
HaroldNetwork EngineerAuthor Commented:
The DC was not listed in ntdsutil nor adsiedit.msc. Is this normal and am I done? Do I need to restart anything?
0
 
MaheshArchitectCommented:
So I think DC object is listed in AD sites and services some where, please check that
In order to remove that connect to configuration partition through adsiedit.msc and delete the DC in error from there

Also check if DC in error is configured some where in MS Exchange as configuration DC, if found just delete from there and your problem should get resolved
http://social.technet.microsoft.com/Forums/exchange/en-US/924f0b55-5819-4d44-8606-554e05769ac5/changing-dc-used-by-exchange-2010?forum=exchange2010

http://forums.msexchange.org/m_1800480281/tm.htm
0
 
HaroldNetwork EngineerAuthor Commented:
It was here but was removed......

Also see nothing in exchange, except use default controller.
print01-DC-warning-4.png
0
 
MaheshArchitectCommented:
So are you stll facing issue with Exchange while creating object
0
 
HaroldNetwork EngineerAuthor Commented:
WooHOOO!!!  You da man Mahesh!!  Thank you sir!
0
 
HaroldNetwork EngineerAuthor Commented:
Great working with you....thanks Mahesh!
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.