[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 262
  • Last Modified:

Access denied when starting Exchange 2013 EMC

Hi, we have an Exchange 2013 environment with 2 mbox and 2 cas servers. We also have a DAG. Yesterday we started having problems starting the Exchange EMC. The error message received was access denied. This was happening on the CAS servers but eventually also on the MBOX servers. The other strange problem we encountered was that no mail was being delivered to the recipients anymore.
We have tried all solutions that we have found on the internet regarding the EMC access denied issue, but did not solve the problem. We have also installed a third Exchange 2013 server, but it too had problems starting the Exchange 2013 EMC after installation.

Please advise.

Regards,

John
0
John Becker
Asked:
John Becker
  • 3
  • 3
1 Solution
 
Simon Butler (Sembee)ConsultantCommented:
What changed?
As the problem started on one server then spread to others that is sounding like someone removed a permission and it took a while for the permission cache to flush out. Particularly if email flow stopped as well.

Are you able to start and use EMS? If so, can you look at the queues or the permissions?

You could try running the prep commands from the cumulative update media you are currently on - that can sometimes correct permission problems.

Simon.
0
 
John BeckerAuthor Commented:
Hi Simon, I really don't know. But I managed to resolve the problem by shutting down all non important domain controllersjj. The moment the controllers shutdown the emails started pouring in. I narrowed the problem to one specific domain controller. Now the question remains what went wrong with the specific domain controller that it managed to stop the delivery of emails by Exchange 2013 and receiving of emails on port 25? Since yesterday I have been looking at all information that I can find related to email processing by Exchange and domain controller influence on it.

Any thoughts on this issue?


Regards,

John
0
 
Simon Butler (Sembee)ConsultantCommented:
Exchange is very heavily dependant on AD, but will only use one domain controller at a time. If that DC isn't working correctly then Exchange will not go and look for another DC unless it is forced to. Therefore a malfunctioning DC can affect any and all operations of Exchange, including delivery of email.

Simon.
0
NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

 
John BeckerAuthor Commented:
Hi Simon,

Thanks for your reply. Question, is there a way or tool or anything that I can use to verify the AD such as to prevent any problems from occurring again with our Exchange environment?

Thanks,

John
0
 
Simon Butler (Sembee)ConsultantCommented:
Nothing specific that I can think of.
Issues with a domain controller can sometimes show in events, but that is about all. It is a relatively rare thing to happen.

Simon.
0
 
John BeckerAuthor Commented:
Simon,

Thank you very much!
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

  • 3
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now