• RSS
  • Twitter
  • FaceBook

Exchange Server Forums

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

80072020

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [Microsoft Exchange 2003] >> Installation >> 80072020 Page: [1]
Login
Message << Older Topic   Newer Topic >>
80072020 - 13.Nov.2003 4:27:00 AM   
Paul Alejandro

 

Posts: 2
Joined: 13.Nov.2003
From: USA
Status: offline
I've got a new domain setup but it's still in setup phase. I'm getting an error on the Exchange box (Exchange 2003) every 15 minutes that claims that the 'Exchange Server Group' is not in the Users group in AD. (hex 80072020). During a stress test I also noted errors stating that it could not place proxy items in the AD. However... DCdiag, netdiag, etc and every DNS lookup I can think of all pass every time. Does anyone have any idea where else or what to look for here? It is all new equipment... fresh installs of Win2003 and Exchange 2003 on separate boxes. Exchange is setup as a single site and nothing is connected to it except for 1 pc.

Any help is appreciated.

Thanks
Post #: 1
RE: 80072020 - 13.Nov.2003 8:08:00 AM   
Henrik Walther

 

Posts: 6928
Joined: 21.Nov.2002
From: Copenhagen, Denmark
Status: offline
Hello Paul,

Did you run DomainPrep prior to installing Exchange 2003 ?

(in reply to Paul Alejandro)
Post #: 2
RE: 80072020 - 13.Nov.2003 1:06:00 PM   
Paul Alejandro

 

Posts: 2
Joined: 13.Nov.2003
From: USA
Status: offline
Yes. DomainPrep and ForestPrep.

(in reply to Paul Alejandro)
Post #: 3
RE: 80072020 - 21.Jan.2008 10:48:23 AM   
colemanm

 

Posts: 5
Joined: 18.Jul.2006
Status: offline
I'm having this exact same issue... same environment, same error, everything.

Did you ever figure out a solution to this issue?

(in reply to Paul Alejandro)
Post #: 4
RE: 80072020 - 21.Jan.2008 5:38:09 PM   
jbarsodi

 

Posts: 104
Joined: 22.Oct.2001
From: Sparks, NV
Status: offline
did you move the Exchange Server Group from the Users folder?  If so, move it back.

(in reply to colemanm)
Post #: 5
RE: 80072020 - 24.Jan.2008 5:18:41 AM   
paresh_md

 

Posts: 129
Joined: 12.Dec.2007
From: United Kingdom
Status: offline
Hi,

Permissions to read the group membership could be an issue.

Regards,
PD

(in reply to jbarsodi)
Post #: 6
RE: 80072020 - 4.Dec.2008 10:50:47 AM   
radox

 

Posts: 13
Joined: 26.Apr.2004
From: USA
Status: offline
Did anyone resolve this? I'm having the same issue and everything checks out: domainprep, forestprep, netdiag, dcdiag.

It complains that "exchange domain servers" is not part of "users"

but it is!!

Please help...thanks.

(in reply to paresh_md)
Post #: 7
RE: 80072020 - 5.Dec.2008 4:31:56 AM   
NileshS

 

Posts: 173
Joined: 27.Apr.2008
Status: offline
If the EDS group is located in the Users OU as you said, everything should be fine. However there are a few more things that you can verify:
 
1. Check the membership of the EDS group (If there are any existing Exchange servers, they should be a member of this group).
2. Check if EDS group is a member of EES group.
3. Check for the permission inheritance on the Users OU in ADUC.
4. If there are any custom GPOs other than the default GPO; check if the error occurs after disabling the custom GPOs.
5. Check for the "Manage auditing and security logs" rights on the Domain Controllers and verify the same using Policy test utility.
 
Please get back to us with the results in case the issue is not resolved.

(in reply to radox)
Post #: 8
RE: 80072020 - 5.Dec.2008 4:41:08 AM   
NileshS

 

Posts: 173
Joined: 27.Apr.2008
Status: offline
quote:


During a stress test I also noted errors stating that it could not place proxy items in the AD.

 
From the above, it seems that the Domainprep has not run correctly and the RUS is either stalled or missing some important permissions. Try checking the things I mentioned previously and then try running Domainprep on the local DC/GC.
 
Also use Exbpa and see if there are any issues with the existing environment.

(in reply to Paul Alejandro)
Post #: 9
RE: 80072020 - 5.Dec.2008 10:29:27 AM   
radox

 

Posts: 13
Joined: 26.Apr.2004
From: USA
Status: offline
Thanks Nilesh for your response; however, everything checks out according to your instructions. Actually, running domainprep is the first thing I did, but on the mail server...not the DC.

I'm starting to think it's a bad NIC

(in reply to NileshS)
Post #: 10
RE: 80072020 - 9.Dec.2008 8:04:39 AM   
ratishnair

 

Posts: 154
Joined: 29.Jul.2008
Status: offline
Run Domainprep for the new Domain
policytest.exe

(in reply to Paul Alejandro)
Post #: 11
RE: 80072020 - 9.Dec.2008 9:35:45 AM   
radox

 

Posts: 13
Joined: 26.Apr.2004
From: USA
Status: offline
Results from policytest.exe check out just fine:


This tool will check every domain controller in the local
domain to see if the "Manage auditing and security logs"
privilege granted to the "Exchange Enterprise Servers"
group by DomainPrep has replicated to that DC.  If the
policy change has not yet replicated to all DCs, then
you should avoid making policy changes on any DC that
has not received those changes yet.

You must have Domain Admin rights to run this tool
successfully.  If you see an error that says:
!! LsaEnumerateAccountRights returned error 5 !!
then you don't have permission to open the LSA on the
given DC.


===============================================
Local domain is "fkk.local" (FKK)
Account is "FKK\Exchange Enterprise Servers"
========================
DC      = "FKKMAIN"
In site = "Default-First-Site-Name"
Right found:  "SeSecurityPrivilege"

(in reply to ratishnair)
Post #: 12
RE: 80072020 - 19.Nov.2009 11:16:05 AM   
bam86_be

 

Posts: 2
Joined: 6.Feb.2007
Status: offline
Hi,

I have the same issue.
The only difference is that there are two exchange servers in frontend backend environnement.
At the beginning all was fine, it's only after a lot of month that this issue begin.
Another differnece is that I moved the two exchange servers from OU "Computers" to another OU in our organisation. I'll try to restore the computers in original OU.

Thanks if anyone has another idea than those that were told before.

(in reply to radox)
Post #: 13

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [Microsoft Exchange 2003] >> Installation >> 80072020 Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts


Follow TechGenix on Twitter