Search the Community

Dear Autoexec Friends, I am writing this post in English since the experience describes an error found in very recent products of Microsoft and it might help other people around the globe with the same issue. The story begins with a working and healthy installation of Exchange Server 2016 CU3 on a Windows Server 2016. The Exchange was configured with all available roles and it was part of an AD running on a different Windows Server. After a nice CU11 upgrade which worked like a charm updating the Exchange to the latest version, the virus of upgrading to the Exchange Server 2019 was consuming my head. So, I searched for the prerequisites of Exchange 2019 which was definitely Windows Server 2019. !!!Before reading further, I advise you to do something I did not!!! Please use Windows Backup and get a full VSS backup of your machine running Exchange After mounting the ISO file, I did an in-place upgrade from Windows Server 2016 to 2019. It took like 1 hour to complete with all restarts and etc keeping all existing files and programs. The system was running flawlessly and all services were started including the ones from Exchange. By then, I was happy and took the car for a short drive from Athens to Tripolis for a nice portion of Rost Pig!!! Some hour later, coming back to Athens (with the pig), I checked my emails and found out that there was no new message since I left. Curious, I started searching the root cause ending at Windows Event Viewer which had thousands of new errors repeatedly about Transport Service re-starting after error. Using the Toolbox, I could see all new messages were routed to the Poison Queue. Spending a good 10 hour straight trying-to-debug-horror, I found out that there was an "Access Denied" error that was keeping Exchange Transport Service to write on the Registry key: Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AssistantsQuarantine The issue came up because even though the Transport Service is using the Network Service built-in account, the Registry item and its "children" did not have this account configured with Full Control in their permissions. After that, even without a restart, just a service restart, emails where flowing like water! Please share this post to other people so they can leave the horror behind! Best regards, Nickolas Armonis

Καλησπερα Εχω ενα δικτυο περιπου 120 η/υ με 2 dc (που εχουν windows 2003). Θελω να τους αναβαθμισω και τους 2 σε 2008 r2 που μου τα εδωσε καποιος. Σκεφτομαι να το κανω ως εξης: 1. Να βγαλω τελειως απο dc τον 2ο dc που δεν εχει τους ρολους 2. Να του κανω φορματ και να εγκαταστησω τα 2008 3. Στην συνεχεια να τον κανω dc. 4. Να μεταφερω τους ρολους απο τον 1ο σε αυτον 5. Να επαναλαβω τα ιδια στον 1ο dc. Αποριες: 1. Οι χρηστες θα παθουν κατι κατα την διαρκεια των παραπανω. (εχουν δηλωμενους και τους 2 στο dns - πρωτη τιμη τον 1ο και δευετερη τιμη τον 2ο) 2. μπορω να τους χρησιμοποιησω με το ιδιο ονομα ξανα? 3. Ειναι εφικτο? Αν οχι τι ρισκα υπαρχουν? 4. οι χρηστες που θα εχουν κανει Login εκεινη την ημερα χρησιμοποιωντας τον 2ο που θα βγει απο dc θα εχουν καποιο θεμα?? 5. Επισης εχω στημενο και ενα lync server που ειναι και ο certificate server. Αυτο δημιουργει καποιο θεμα? ευχαριστω εκ των προτερων για οποια βοηθεια....