Re: Exchange install failed

Hi Kurt,

Unless you are performing a delegated setup, you don't need to pre-create a computer account. In other cases, we state the permissions that are needed at http://technet.microsoft.com/en-us/library/bb125149(EXCHG.80).aspx:

"If you are installing SCC on Windows Server 2003, you must use a domain account for the Cluster service account. All nodes in the cluster must be members of the same domain, and all nodes in the cluster must use the same Cluster service account. The Cluster service account must also be a member of the local administrators group on each node that is capable of hosting a clustered mailbox server.
The Cluster service account is responsible for creating and maintaining the computer account identified by and associated with the failover cluster's Network Name resource when that resource is brought online. To ensure that the Cluster service account has the appropriate permissions, see Knowledge Base article 307532, How to troubleshoot the Cluster service account when it modifies computer objects. Additional information can be found in Knowledge Base article 251335, Domain Users Cannot Join Workstation or Server to a Domain.

If you are installing SCC on Windows Server 2008, the Cluster service will run under the LocalSystem (SYSTEM) account."

Hope this helps.
--
Regards,

Scott Schnoll
Microsoft Corporation
This posting is provided "AS IS" with no warranties, and confers no
rights. Please do not send email directly to this alias. This alias is for
newsgroup purposes only.


"Kurt" <Kurt@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:4E6685B9-7CB3-4D3E-B03E-F9BC6E5B832C@xxxxxxxxxxxxxxxx
Thanks Scott,


Due to other errors I encountered trying an uninstall this morning before I
got your message I am just going to rebuild, as I am not sure what else is
wrong beind the scenes and want to make sure all is ok.

I would recommend that MS put into the cluster docs that one needs to create
the CMS computer account in AD with the right permissions on it for the
cluster service computer account in 2008. This would stop people from
getting the PDC emulator problem in another site, and problems like mine. It
may not be necessary in all cases, but if people just create it before hand
it will stop these problems and people won't have to go looking for
technotes, etc.

Thanks,


Kurt

"Scott Schnoll [MSFT]" wrote:

Hi,

Not knowing anything about your DNS topology, it is hard to say if you need
to do that or not. Generally, as long as you have healthy DNS and healthy
AD, you should be fine.

Your setup tried to do the active node, but could not create a CMS. It was
only able to add the Mailbox role, so now it is a passive node. To turn it
into an active node, you run Setup and add a CMS. The command line is the
easiest way to do that, and you always use Setup.com. ExSetup was
deprecated before Exchange RTM'd, and it should never be called directly.

So the command you'd use would be:

Setup.com /m:install /newcms /cmsname:<Name> /cmsipaddress:<IPAddress>
/cmssharedstorage /cmsdatapath:<SharedStoragePathForDatabase>

See http://technet.microsoft.com/en-us/library/bb123969(EXCHG.80).aspx for
more information.

Hope this helps.
--
Regards,

Scott Schnoll
Microsoft Corporation
This posting is provided "AS IS" with no warranties, and confers no
rights. Please do not send email directly to this alias. This alias is for
newsgroup purposes only.


"Kurt" <Kurt@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:36E108DD-80CB-4E2F-AD48-D9E828A44F43@xxxxxxxxxxxxxxxx
Hi Scott,


Thanks. Could it be I have the server's DNS entries as our secondary DNS
nodes, that just accept dumps from the prmaries (it is a secondary to the
AD
integrated zone). I will change the DNS entries on the server to point to
the primaries.

How do I run the setup again when all the options it gives me are greyed
out
for server roles? It also has passive node checked in the greyed out
checkbox, when I installed it as an active node. Do I need to run exsetup
instead?

Thanks,


Kurt



"Scott Schnoll [MSFT]" wrote:

Sorry, meant to point you to
http://technet.microsoft.com/en-us/library/bb125149(EXCHG.80).aspx. This
the SCC planning content.

To recover, just configure the appropriate permissions and re-start
Setup.
--
Regards,

Scott Schnoll
Microsoft Corporation
This posting is provided "AS IS" with no warranties, and confers no
rights. Please do not send email directly to this alias. This alias is
for
newsgroup purposes only.


"Kurt" <Kurt@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:FD2CE07D-6643-4E39-B34A-FE381076ED60@xxxxxxxxxxxxxxxx
Hi Scott,


We are doing a SCC, and not CCR. I don't see where in SCC
documentation
it
says that the cluster account needs to be given domain permissions,
although
it may be somewhere. In fact the cluster itself passed all readiness
checks
in the failover cluster administrator.

Also, now that this is done, how do we recover? I try to reinstall
Exchange, but all the roles are greyed out. I then tried to uninstall
it,
but all the roles are also greyed out, and the server thinks it is a
passive
node.

Thanks,


Kurt

"Scott Schnoll [MSFT]" wrote:

This is documented at
http://technet.microsoft.com/en-us/library/bb123996(EXCHG.80).aspx.
Hope
this helps.
--
Regards,

Scott Schnoll
Microsoft Corporation
This posting is provided "AS IS" with no warranties, and confers no
rights. Please do not send email directly to this alias. This alias is
for
newsgroup purposes only.


"Kurt" <Kurt@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:C1E29C77-0266-4F51-907E-881AD5E3037B@xxxxxxxxxxxxxxxx
Installing the first node of the Active-Passive Exchange cluster
failed
with
an error that the computer account for the Exchange virtual server
could
not
be created in the domain. Looking at the event log I see an error
that
the
Cluster resource did not have permissions in the domain to create
the
virtual
server computer in the Computers OU. The Virtual server was created
in
failover cluster manager (this is 2008), but I could not bring it
online.
I
then created an account and as the event log suggested I gave the
cluster
resource full control over the virtual server computer account in
AD.
This
allowed me to bring it online. But I have no database, and who
knows
what
else was not installed.

Where is it listed that it is a requirement for the cluster resource
computer object to have these permissions? Did I miss something. I
have
read so much documentation. Now I am left with a system in who
knows
what
state. Is there any way out of this, other than starting from
scratch?

Thanks for any input?


Kurt





Relevant Pages

  • Re: Exchange install failed
    ... I would recommend that MS put into the cluster docs that one needs to create ... the CMS computer account in AD with the right permissions on it for the ... Please do not send email directly to this alias. ... I will change the DNS entries on the server to point to ...
    (microsoft.public.exchange.setup)
  • Re: issue moving cluster group to one node?
    ... an issue with the network name. ... The computer account for CLuster resource 'Network ... MVP - Windows Server - Clustering ...
    (microsoft.public.windows.server.clustering)
  • Re: Exchange install failed
    ... Not knowing anything about your DNS topology, it is hard to say if you need to do that or not. ... Please do not send email directly to this alias. ... I will change the DNS entries on the server to point to ... In fact the cluster itself passed all readiness ...
    (microsoft.public.exchange.setup)
  • Re: Help needed on installing Sql Server 2000 on Win2k3.
    ... I have Remote Reg Services Started. ... > virtual server resources for clustering. ... Cluster specific registry entries ... >> account that is a local administrator on all nodes. ...
    (microsoft.public.sqlserver.clustering)
  • Re: Clstr Servce wont start after changing logon account
    ... if you don't want to buy another server. ... cluster and a RAID hard drive system. ... ClusterHelp.com is a Microsoft Certified Gold Partner ... as the cluster service log on account. ...
    (microsoft.public.windows.server.clustering)