I have a 3 node Exchange 2013 environment with 2 2013 nodes running CAS and Mailbox roles in a DAG and the third 2016 node used for hybrid sync. All mailboxes are on premises and we only have spam filtering in the cloud. I recently put one
of my DAG nodes in maintenance mode and tried to install CU13. All pre-reqs passed but the setup failed with the error below. I tried all manor of troubleshooting with no luck. I didn't want to leave it in a down state before our maintenance window was up
so I rolled the whole server back and brought it back online. But, now I'm afraid the environment is in a bad state because AD thinks the server is at CU13 and I am getting some weird certificate errors. I'd like to try the upgrade again but I'm afraid it
will fail at the same spot again. I've looked everywhere but haven't really found anyone with the exact error that I'm getting. Anyone have any ideas?
[08/27/2016 15:50:16.0014] [1] Processing component 'Mailbox Permissions Configuration' (Configuring mailbox permissions).
[08/27/2016 15:50:16.0014] [1] Executing:
Set-LocalPermissions -Feature:"Mailbox"
[08/27/2016 15:50:16.0014] [2] Active Directory session settings for 'Set-LocalPermissions' are: View Entire Forest: 'True', Configuration Domain Controller: 'BCCDC6.internal.co.baldwin.al.us', Preferred
Global Catalog: 'BCCDC6.internal.co.baldwin.al.us', Preferred Domain Controllers: '{ BCCDC6.internal.co.baldwin.al.us }'
[08/27/2016 15:50:16.0014] [2] User specified parameters: -Feature:'Mailbox'
[08/27/2016 15:50:16.0014] [2] Beginning processing Set-LocalPermissions
[08/27/2016 15:50:16.0029] [2] [ERROR] Attempted to perform an unauthorized operation.
[08/27/2016 15:50:16.0029] [2] [ERROR] Attempted to perform an unauthorized operation.
[08/27/2016 15:50:16.0029] [2] Ending processing Set-LocalPermissions
[08/27/2016 15:50:16.0029] [1] The following 1 error(s) occurred during task execution:
[08/27/2016 15:50:16.0029] [1] 0. ErrorRecord: Attempted to perform an unauthorized operation.
[08/27/2016 15:50:16.0029] [1] 0. ErrorRecord: System.UnauthorizedAccessException: Attempted to perform an unauthorized operation.
at Microsoft.Exchange.Configuration.Tasks.Task.ThrowError(Exception exception, ErrorCategory errorCategory, Object target, String helpUrl)
at Microsoft.Exchange.Configuration.Tasks.Task.WriteError(Exception exception, ErrorCategory category, Object target)
at Microsoft.Exchange.Management.Deployment.SetLocalPermissions.InternalProcessRecord()
at Microsoft.Exchange.Configuration.Tasks.Task.<ProcessRecord>b__b()
at Microsoft.Exchange.Configuration.Tasks.Task.InvokeRetryableFunc(String funcName, Action func, Boolean terminatePipelineIfFailed)
[08/27/2016 15:50:16.0029] [1] [ERROR] The following error was generated when "$error.Clear();
Set-LocalPermissions -Feature:"Mailbox"
" was run: "System.UnauthorizedAccessException: Attempted to perform an unauthorized operation.
at Microsoft.Exchange.Configuration.Tasks.Task.ThrowError(Exception exception, ErrorCategory errorCategory, Object target, String helpUrl)
at Microsoft.Exchange.Configuration.Tasks.Task.WriteError(Exception exception, ErrorCategory category, Object target)
at Microsoft.Exchange.Management.Deployment.SetLocalPermissions.InternalProcessRecord()
at Microsoft.Exchange.Configuration.Tasks.Task.<ProcessRecord>b__b()
at Microsoft.Exchange.Configuration.Tasks.Task.InvokeRetryableFunc(String funcName, Action func, Boolean terminatePipelineIfFailed)".
[08/27/2016 15:50:16.0029] [1] [ERROR] Attempted to perform an unauthorized operation.
[08/27/2016 15:50:16.0029] [1] [ERROR-REFERENCE] Id=MailboxLocalPermissionsComponent___f70043bcfee94f9591b1d67c6fb9b763 Component=EXCHANGE14:\Current\Release\Shared\Datacenter\Setup
[08/27/2016 15:50:16.0029] [1] Setup is stopping now because of one or more critical errors.
[08/27/2016 15:50:16.0029] [1] Finished executing component tasks.
[08/27/2016 15:50:16.0045] [1] Ending processing Install-MailboxRole
[08/27/2016 15:51:56.0127] [0] CurrentResult setupbase.maincore:396: 0
[08/27/2016 15:51:56.0127] [0] End of Setup