Dear all,
I am currently setting up Exchange 2013 new server in parallel to my current Exchanege 2010, so I can migrate my mailboxes to Exchange 2013 and switchover to Exchange 2013.
We are using Windows 2016 Active directory (func level Win2008R2), which was upgraded from Windows 2008 R2 (func level Win2003) few weeks ago.
I am trying to upgrade the Exchange 2013 SP1 to the latest Cumulative Update 23 - CU23.
I have encountered a problem , where I cannot upgrade the Exchange 2013 SP1 to CU23.
The Exchange Setup log is as below.
I have checked various articles and permissions and various other ways , still cannot solve.
Please help me on this.
--------------------------------------------------------------------------------------
[01/22/2020 06:52:42.0160] [1] Executing:
Install-CannedRbacRoles -InvocationMode $RoleInstallationMode -DomainController $RoleDomainController
Install-CannedRbacRoles -InvocationMode $RoleInstallationMode -DomainController $RoleDomainController
[01/22/2020 06:52:42.0160] [2] Active Directory session settings for 'Install-CannedRbacRoles' are: View Entire Forest: 'True', Configuration Domain Controller: '(DC name)', Preferred Global Catalog: '(DC name)', Preferred Domain Controllers: '{ (DC name) }'
[01/22/2020 06:52:42.0160] [2] User specified parameters: -InvocationMode:'BuildToBuildUpgrade' -DomainController:'(DC name)'
[01/22/2020 06:52:42.0160] [2] Beginning processing Install-CannedRbacRoles
[01/22/2020 06:52:42.0160] [2] Used domain controller (DC name) to read object DC=xxx,DC=xxx,DC=com.
[01/22/2020 06:52:42.0301] [2] Used domain controller (DC name) to read object CN=Reset Password,CN=Roles,CN=RBAC,CN=xxxx,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=xxx,DC=xxx,DC=com.
[01/22/2020 06:52:42.0317] [2] [ERROR] Active Directory operation failed on (DC name). This error is not retriable. Additional information: Access is denied.
Active directory response: 00000005: SecErr: DSID-03152763, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
[01/22/2020 06:52:42.0317] [2] [ERROR] The user has insufficient access rights.
[01/22/2020 06:52:42.0332] [2] Ending processing Install-CannedRbacRoles
[01/22/2020 06:52:42.0332] [1] The following 1 error(s) occurred during task execution:
[01/22/2020 06:52:42.0332] [1] 0. ErrorRecord: Active Directory operation failed on (DC name). This error is not retriable. Additional information: Access is denied.
Active directory response: 00000005: SecErr: DSID-03152763, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
[01/22/2020 06:52:42.0332] [2] Ending processing Install-CannedRbacRoles
[01/22/2020 06:52:42.0332] [1] The following 1 error(s) occurred during task execution:
[01/22/2020 06:52:42.0332] [1] 0. ErrorRecord: Active Directory operation failed on (DC name). This error is not retriable. Additional information: Access is denied.
Active directory response: 00000005: SecErr: DSID-03152763, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
[01/22/2020 06:52:42.0332] [1] 0. ErrorRecord: Microsoft.Exchange.Data.Directory.ADOperationException: Active Directory operation failed on (DC name). This error is not retriable. Additional information: Access is denied.
Active directory response: 00000005: SecErr: DSID-03152763, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
---> System.DirectoryServices.Protocols.DirectoryOperationException: The user has insufficient access rights.
at System.DirectoryServices.Protocols.LdapConnection.ConstructResponse(Int32 messageId, LdapOperation operation, ResultAll resultType, TimeSpan requestTimeOut, Boolean exceptionOnTimeOut)
at System.DirectoryServices.Protocols.LdapConnection.SendRequest(DirectoryRequest request, TimeSpan requestTimeout)
at Microsoft.Exchange.Data.Directory.PooledLdapConnection.SendRequest(DirectoryRequest request, LdapOperation ldapOperation, Nullable`1 clientSideSearchTimeout, IActivityScope activityScope, String callerInfo)
at Microsoft.Exchange.Data.Directory.ADDataSession.ExecuteModificationRequest(ADObject entry, DirectoryRequest request, ADObjectId originalId, Boolean emptyObjectSessionOnException, Boolean isSync)
--- End of inner exception stack trace ---
at Microsoft.Exchange.Data.Directory.ADDataSession.AnalyzeDirectoryError(PooledLdapConnection connection, DirectoryRequest request, DirectoryException de, Int32 totalRetries, Int32 retriesOnServer)
at Microsoft.Exchange.Data.Directory.ADDataSession.ExecuteModificationRequest(ADObject entry, DirectoryRequest request, ADObjectId originalId, Boolean emptyObjectSessionOnException, Boolean isSync)
at Microsoft.Exchange.Data.Directory.ADDataSession.Delete(ADObject instanceToDelete, Boolean enableTreeDelete)
at Microsoft.Exchange.Data.Directory.SystemConfiguration.ADConfigurationSession.DeleteTree(ADConfigurationObject instanceToDelete, TreeDeleteNotFinishedHandler handler)
at Microsoft.Exchange.Management.Tasks.InstallCannedRbacRoles.RemoveRoleAndAssignments(ADObjectId roleId)
at Microsoft.Exchange.Management.Tasks.InstallCannedRbacRoles.RemoveRolesAndAssignments(String[] rolesToRemove)
at Microsoft.Exchange.Management.Tasks.InstallCannedRbacRoles.InternalProcessRecord()
at Microsoft.Exchange.Configuration.Tasks.Task.ProcessRecord()
[01/22/2020 06:52:42.0348] [1] [ERROR] The following error was generated when "$error.Clear();
Install-CannedRbacRoles -InvocationMode $RoleInstallationMode -DomainController $RoleDomainController
Active directory response: 00000005: SecErr: DSID-03152763, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
---> System.DirectoryServices.Protocols.DirectoryOperationException: The user has insufficient access rights.
at System.DirectoryServices.Protocols.LdapConnection.ConstructResponse(Int32 messageId, LdapOperation operation, ResultAll resultType, TimeSpan requestTimeOut, Boolean exceptionOnTimeOut)
at System.DirectoryServices.Protocols.LdapConnection.SendRequest(DirectoryRequest request, TimeSpan requestTimeout)
at Microsoft.Exchange.Data.Directory.PooledLdapConnection.SendRequest(DirectoryRequest request, LdapOperation ldapOperation, Nullable`1 clientSideSearchTimeout, IActivityScope activityScope, String callerInfo)
at Microsoft.Exchange.Data.Directory.ADDataSession.ExecuteModificationRequest(ADObject entry, DirectoryRequest request, ADObjectId originalId, Boolean emptyObjectSessionOnException, Boolean isSync)
--- End of inner exception stack trace ---
at Microsoft.Exchange.Data.Directory.ADDataSession.AnalyzeDirectoryError(PooledLdapConnection connection, DirectoryRequest request, DirectoryException de, Int32 totalRetries, Int32 retriesOnServer)
at Microsoft.Exchange.Data.Directory.ADDataSession.ExecuteModificationRequest(ADObject entry, DirectoryRequest request, ADObjectId originalId, Boolean emptyObjectSessionOnException, Boolean isSync)
at Microsoft.Exchange.Data.Directory.ADDataSession.Delete(ADObject instanceToDelete, Boolean enableTreeDelete)
at Microsoft.Exchange.Data.Directory.SystemConfiguration.ADConfigurationSession.DeleteTree(ADConfigurationObject instanceToDelete, TreeDeleteNotFinishedHandler handler)
at Microsoft.Exchange.Management.Tasks.InstallCannedRbacRoles.RemoveRoleAndAssignments(ADObjectId roleId)
at Microsoft.Exchange.Management.Tasks.InstallCannedRbacRoles.RemoveRolesAndAssignments(String[] rolesToRemove)
at Microsoft.Exchange.Management.Tasks.InstallCannedRbacRoles.InternalProcessRecord()
at Microsoft.Exchange.Configuration.Tasks.Task.ProcessRecord()
[01/22/2020 06:52:42.0348] [1] [ERROR] The following error was generated when "$error.Clear();
Install-CannedRbacRoles -InvocationMode $RoleInstallationMode -DomainController $RoleDomainController
" was run: "Active Directory operation failed on (DC name). This error is not retriable. Additional information: Access is denied.
Active directory response: 00000005: SecErr: DSID-03152763, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
".
[01/22/2020 06:52:42.0348] [1] [ERROR] Active Directory operation failed on (DC name). This error is not retriable. Additional information: Access is denied.
Active directory response: 00000005: SecErr: DSID-03152763, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
Active directory response: 00000005: SecErr: DSID-03152763, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
".
[01/22/2020 06:52:42.0348] [1] [ERROR] Active Directory operation failed on (DC name). This error is not retriable. Additional information: Access is denied.
Active directory response: 00000005: SecErr: DSID-03152763, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
[01/22/2020 06:52:42.0348] [1] [ERROR] The user has insufficient access rights.
[01/22/2020 06:52:42.0348] [1] [ERROR-REFERENCE] Id=1424659442 Component=
[01/22/2020 06:52:42.0348] [1] Setup is stopping now because of one or more critical errors.
[01/22/2020 06:52:42.0348] [1] Finished executing component tasks.
[01/22/2020 06:52:42.0348] [1] Ending processing Install-ExchangeOrganization
[01/22/2020 06:52:42.0348] [0] CurrentResult console.ProcessRunInternal:198: 1
[01/22/2020 06:52:42.0363] [0] CurrentResult launcherbase.maincore:90: 1
[01/22/2020 06:52:42.0363] [0] CurrentResult console.startmain:52: 1
[01/22/2020 06:52:42.0363] [0] CurrentResult SetupLauncherHelper.loadassembly:452: 1
[01/22/2020 06:52:42.0363] [0] The Exchange Server setup operation didn't complete. More details can be found in ExchangeSetup.log located in the <SystemDrive>:\ExchangeSetupLogs folder.
[01/22/2020 06:52:42.0363] [0] CurrentResult main.run:235: 1
[01/22/2020 06:52:42.0363] [0] CurrentResult setupbase.maincore:396: 1
[01/22/2020 06:52:42.0363] [0] End of Setup
[01/22/2020 06:52:42.0363] [0] **********************************************
[01/22/2020 06:52:42.0348] [1] [ERROR-REFERENCE] Id=1424659442 Component=
[01/22/2020 06:52:42.0348] [1] Setup is stopping now because of one or more critical errors.
[01/22/2020 06:52:42.0348] [1] Finished executing component tasks.
[01/22/2020 06:52:42.0348] [1] Ending processing Install-ExchangeOrganization
[01/22/2020 06:52:42.0348] [0] CurrentResult console.ProcessRunInternal:198: 1
[01/22/2020 06:52:42.0363] [0] CurrentResult launcherbase.maincore:90: 1
[01/22/2020 06:52:42.0363] [0] CurrentResult console.startmain:52: 1
[01/22/2020 06:52:42.0363] [0] CurrentResult SetupLauncherHelper.loadassembly:452: 1
[01/22/2020 06:52:42.0363] [0] The Exchange Server setup operation didn't complete. More details can be found in ExchangeSetup.log located in the <SystemDrive>:\ExchangeSetupLogs folder.
[01/22/2020 06:52:42.0363] [0] CurrentResult main.run:235: 1
[01/22/2020 06:52:42.0363] [0] CurrentResult setupbase.maincore:396: 1
[01/22/2020 06:52:42.0363] [0] End of Setup
[01/22/2020 06:52:42.0363] [0] **********************************************
--------------------------------------------------------------------------------------
Velan Ramalinggam