This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 19%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EEH%3C/text%3E%3C/svg%3E)
on the MDC I have run the
setup /prepareschema
setup /preparead
both succeeded
MDC windows 2019
DC Windows 2016
hybrid exchange mode
all mailboxes on on-premise exchange server
I have exchange 2019 installed on a windows 2019 core server (no gui)
when I run Setup.exe /IAcceptExchangeServerLicenseTerms /Mode:Upgrade /DomainController:<mdc> /EnableErrorReporting
all I get is
The Mailbox server role isn't installed on this computer
the exchange setup log is to big to upload(~8mb), any ideas on what to search for that might help?
here is the snippet of the log that has the error
[03/10/2021 03:54:56.0937] [1] Finished [Setting:OpenProcesses] [Duration:00:00:08.1820385]
[03/10/2021 03:54:56.0937] [1] Finished [Setting:OpenProcessesOnUpgrade] [Duration:00:00:08.1810348]
[03/10/2021 03:54:56.0937] [1] Finished [Setting:OpenProcessesOnUninstall] [Duration:00:00:08.1800365]
[03/10/2021 03:54:56.0937] [1] Evaluated [Rule:ProcessNeedsToBeClosedOnUpgrade] [HasException:False] [Value:"False"] [ParentValue:"<NULL>"] [Thread:16] [Duration:00:00:08.1660352]
[03/10/2021 03:54:56.0937] [1] Finished [Rule:ProcessNeedsToBeClosedOnUpgrade] [Duration:00:00:08.1660352]
[03/10/2021 03:54:57.0281] [1] Evaluated [Setting:RemoteRegistryServiceId] [HasException:False] [Value:"3020"] [ParentValue:"<NULL>"] [Thread:81] [Duration:00:00:08.5230399]
[03/10/2021 03:54:57.0282] [1] Finished [Setting:RemoteRegistryServiceId] [Duration:00:00:08.5240398]
[03/10/2021 03:54:57.0312] [1] Active Directory session settings for 'Get-OrganizationConfig' are: View Entire Forest: 'True', Configuration Domain Controller: '<DC>', Preferred Global Catalog: '<DC>', Preferred Domain Controllers: '{ <DC> }'
[03/10/2021 03:54:57.0312] [1] User specified parameters:
[03/10/2021 03:54:57.0312] [1] Beginning processing Get-OrganizationConfig
[03/10/2021 03:54:57.0325] [1] Searching objects of type "ADOrganizationConfig" with filter "$null", scope "SubTree" under the root "$null".
[03/10/2021 03:54:57.0333] [1] Request filter in Get Task: (&(|(objectCategory=msExchOrganizationContainer)(objectCategory=msExchConfigurationUnitContainer))(|(&(msExchVersion<=3377699720527872)(!(msExchVersion=3377699720527872)))(!(msExchVersion=)))).
[03/10/2021 03:54:57.0343] [1] Previous operation run on domain controller '<DC>'.
[03/10/2021 03:54:57.0344] [1] Preparing to output objects. The maximum size of the result set is "Unlimited".
[03/10/2021 03:54:57.0690] [1] Ending processing Get-OrganizationConfig
[03/10/2021 03:54:57.0694] [1] Evaluated [Rule:WarnMapiHttpNotEnabled] [HasException:False] [Value:"False"] [ParentValue:"<NULL>"] [Thread:17] [Duration:00:00:08.9220361]
[03/10/2021 03:54:57.0694] [1] Finished [Rule:WarnMapiHttpNotEnabled] [Duration:00:00:08.9220361]
[03/10/2021 03:54:57.0694] [1] Started [Rule:VC2013RedistDependencyRequirement] [Parent:RootAnalysisMember] [RuleType:Error]
[03/10/2021 03:54:57.0695] [1] Started [Setting:VCRedist2013Installed] [Parent:RootAnalysisMember] [ValueType:Boolean]
[03/10/2021 03:54:57.0695] [1] Started [Setting:FileVersionMsvcr120] [Parent:RootAnalysisMember] [ValueType:Version]
[03/10/2021 03:54:57.0735] [1] Active Directory session settings for 'Get-SendConnector' are: View Entire Forest: 'True', Configuration Domain Controller: '<DC>', Preferred Global Catalog: '<DC>', Preferred Domain Controllers: '{ <DC> }'
[03/10/2021 03:54:57.0736] [1] User specified parameters:
[03/10/2021 03:54:57.0736] [1] Beginning processing Get-SendConnector
[03/10/2021 03:54:57.0741] [1] Searching objects of type "SmtpSendConnectorConfig" with filter "$null", scope "SubTree" under the root "Administrative Groups".
[03/10/2021 03:54:57.0742] [1] Request filter in Get Task: (&(objectCategory=msExchRoutingSMTPConnector)(|(&(msExchVersion<=1125899906842624)(!(msExchVersion=1125899906842624)))(!(msExchVersion=)))).
[03/10/2021 03:54:57.0750] [1] Evaluated [Setting:FileVersionMsvcr120] [HasException:False] [Value:"12.0.21005.1"] [ParentValue:"<NULL>"] [Thread:17] [Duration:00:00:00.0550002]
[03/10/2021 03:54:57.0750] [1] Finished [Setting:FileVersionMsvcr120] [Duration:00:00:00.0550002]
[03/10/2021 03:54:57.0750] [1] Evaluated [Setting:VCRedist2013Installed] [HasException:False] [Value:"True"] [ParentValue:"<NULL>"] [Thread:17] [Duration:00:00:00.0550002]
[03/10/2021 03:54:57.0750] [1] Finished [Setting:VCRedist2013Installed] [Duration:00:00:00.0560006]
[03/10/2021 03:54:57.0750] [1] Evaluated [Rule:VC2013RedistDependencyRequirement] [HasException:False] [Value:"False"] [ParentValue:"<NULL>"] [Thread:17] [Duration:00:00:00.0560006]
[03/10/2021 03:54:57.0751] [1] Finished [Rule:VC2013RedistDependencyRequirement] [Duration:00:00:00.0560006]
[03/10/2021 03:54:57.0764] [1] Previous operation run on domain controller '<DC>'.
[03/10/2021 03:54:57.0764] [1] Preparing to output objects. The maximum size of the result set is "Unlimited".
[03/10/2021 03:54:57.0772] [1] Ending processing Get-SendConnector
[03/10/2021 03:54:57.0774] [1] Evaluated [Rule:SendConnectorException] [HasException:False] [Value:"False"] [ParentValue:"System.DirectoryServices.ResultPropertyCollection"] [Thread:63] [Duration:00:00:09.0430417]
[03/10/2021 03:54:57.0774] [1] Finished [Rule:SendConnectorException] [Duration:00:00:09.0440415]
[03/10/2021 03:54:57.0886] [1] Active Directory session settings for 'Get-ExchangeServer' are: View Entire Forest: 'True', Configuration Domain Controller: '<DC>', Preferred Global Catalog: '<DC>', Preferred Domain Controllers: '{ <DC> }'
[03/10/2021 03:54:57.0886] [1] User specified parameters: -Identity:'<exchange server>'
[03/10/2021 03:54:57.0886] [1] Beginning processing get-ExchangeServer
[03/10/2021 03:54:57.0919] [1] Searching objects "<exchange server>" of type "Server" under the root "$null".
[03/10/2021 03:54:57.0996] [1] Previous operation run on domain controller '<DC>'.
[03/10/2021 03:54:57.0999] [1] Previous operation run on domain controller '<DC>'.
[03/10/2021 03:54:57.0999] [1] Preparing to output objects. The maximum size of the result set is "Unlimited".
[03/10/2021 03:54:58.0042] [1] Ending processing get-ExchangeServer
[03/10/2021 03:54:58.0045] [1] Evaluated [Setting:CmdletGetExchangeServerResult] [HasException:False] [Value:"<exchange server>"] [ParentValue:"<NULL>"] [Thread:80] [Duration:00:00:09.2920396]
[03/10/2021 03:54:58.0045] [1] Finished [Setting:CmdletGetExchangeServerResult] [Duration:00:00:09.2930388]
[03/10/2021 03:54:58.0077] [1] Evaluated [Setting:PowerShellExecutionPolicy] [HasException:False] [Value:"False"] [ParentValue:"<NULL>"] [Thread:79] [Duration:00:00:09.3280406]
[03/10/2021 03:54:58.0077] [1] Finished [Setting:PowerShellExecutionPolicy] [Duration:00:00:09.3280406]
[03/10/2021 03:54:58.0077] [1] Evaluated [Rule:PowerShellExecutionPolicyCheckSet] [HasException:False] [Value:"False"] [ParentValue:"<NULL>"] [Thread:79] [Duration:00:00:09.3290416]
[03/10/2021 03:54:58.0077] [1] Finished [Rule:PowerShellExecutionPolicyCheckSet] [Duration:00:00:09.3290416]
[03/10/2021 03:54:58.0082] [1] Finished [Analysis:Prereq] [Duration:00:00:09.4200425]
[03/10/2021 03:54:58.0085] [1] Failed [Rule:BridgeheadRoleNotInstalled] [Message:The Mailbox server role isn't installed on this computer.]
[03/10/2021 03:54:58.0086] [1] [REQUIRED] The Mailbox server role isn't installed on this computer.
[03/10/2021 03:54:58.0086] [1] Help URL: http://technet.microsoft.com/library(EXCHG.150)/ms.exch.setupreadiness.BridgeheadRoleNotInstalled.aspx
[03/10/2021 03:54:58.0104] [1] Ending processing test-SetupPrerequisites
[03/10/2021 03:54:58.0106] [0] CurrentResult console.ProcessRunInternal:136: 1
[03/10/2021 03:54:58.0106] [0] Exchange Server installation failed during prereq check. Trying to restore the server state back to active.
[03/10/2021 03:54:58.0106] [0] RestoreServer Script Path: C:\Windows\Temp\ExchangeSetup\RestoreServerOnPrereqFailure.ps1
[03/10/2021 03:54:58.0167] [0] Beginning processing Write-ExchangeSetupLog
[03/10/2021 03:54:58.0168] [0] Trying to restore server state.
[03/10/2021 03:54:58.0168] [0] Ending processing Write-ExchangeSetupLog
[03/10/2021 03:54:58.0170] [0] Active Directory session settings for 'Get-ExchangeServer' are: View Entire Forest: 'True', Configuration Domain Controller: '<DC>', Preferred Global Catalog: '<DC>', Preferred Domain Controllers: '{ <DC> }'
[03/10/2021 03:54:58.0170] [0] User specified parameters: -ErrorAction:'SilentlyContinue' -Identity:'<exchange server>'
[03/10/2021 03:54:58.0170] [0] Beginning processing get-ExchangeServer
[03/10/2021 03:54:58.0172] [0] Searching objects "<exchange server>" of type "Server" under the root "$null".
[03/10/2021 03:54:58.0203] [0] Previous operation run on domain controller '<DC>'.
[03/10/2021 03:54:58.0203] [0] Previous operation run on domain controller '<DC>'.
[03/10/2021 03:54:58.0203] [0] Preparing to output objects. The maximum size of the result set is "Unlimited".
[03/10/2021 03:54:58.0228] [0] Ending processing get-ExchangeServer
[03/10/2021 03:54:58.0241] [0] Active Directory session settings for 'Set-ServerComponentState' are: View Entire Forest: 'True', Configuration Domain Controller: '<DC>', Preferred Global Catalog: '<DC>', Preferred Domain Controllers: '{ <DC> }'
[03/10/2021 03:54:58.0241] [0] User specified parameters: -Component:'Monitoring' -Requester:'Functional' -State:'Active' -Identity:'<exchange server>'
[03/10/2021 03:54:58.0241] [0] Beginning processing Set-ServerComponentState
[03/10/2021 03:55:01.0550] [0] Calling ADSession.GetSharedConfigDC()
thanks
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(246.4, 22%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKY%3C/text%3E%3C/svg%3E)
Would you please check via ADSI to confirm if the Schema/AD/Domain preparation was successful?
PrepareSchema: ADSI edit >connect to "Schema" > container "ms-Exch-Schema-Version-Pt"> properties> attribute "rangerUpper"
The value should be 17002.
PrepareAD: ADSI edit > connect to "Default naming context" > container "Microsoft Exchange System Objects" > properties > attribute "objectVersion"
The value should be 13239.
PrepareDomains: ADSI edit > connect to "Configuration" > Services > Microsoft Exchange > container "<Your Exchange Organization Name>" > properties > attribute "objectVersion"
The value should be 16756.
And is the '<DC>' in exchange setup log the MDC(with FSMO roles)?
Hi, @Eric Hendrickson
I am writing here to confirm with you how thing going now?
Did the problem get resolved?
sorry for the delay
no it has not, for some reason I never got a notification for your first post, but I got one for your second,
to answer you questions
in ADSIedit, all those values are the correct version
is the <DC> pointing to my MDC? no it is not, even though I ran
Set-ADServerSettings -ConfigurationDomainController <MDC> it still seems to be stuck on my secondary DC
if I run Get-ExchangeServer -status, the exchange server is still referencing the secondary DC
also on vlsc cu8 in no longer available cu7 and cu9 are now available should I skip cu8? could I try cu7 even though my schema is cu8?
Hi,
According to the document: Set-ADServerSettings
Set-ADServerSettings only changes the settings in the current Exchange Management Shell session.
You may need to use Set-ExchangeServer instead.
The command should be like:
Set-ExchangeServer -identity "exchangeserver" -StaticDomainControllers "MDC" -StaticGlobalCatalogs "MDC"
hello
I did both your commands and mine and it still says The Mailbox server role isn't installed on this computer.
in the attached document79787-get-exchangeserver.txt you can see that all references to a domain controller is the MDC
Get-ExchangeServer -status |fl
Hi,
Please download the SetupLogReviewer.ps1 script and review the output.
Follow the steps in this link: Error during Setup in Setup log
Hello,
results of setuplogreviewer
Looks like we weren't able to determine the cause of the issue with Setup. Please run SetupAssist.ps1
so ran setupassist results for that
WARNING: ExecutionPolicy is RemoteSigned
WARNING: Reboot pending.
WARNING: Exchange 2019 AD Level Failed. Mismatch detected.
WARNING: DN Value: 'CN=company,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=domain,DC=local' - Version: 16757
WARNING: DN Value: 'CN=ms-Exch-Schema-Version-Pt,CN=Schema,CN=Configuration,DC=domain,DC=local' - Version: 17002
WARNING: DN Value: 'CN=Microsoft Exchange System Objects,DC=domain,DC=local' - Version: 13240
I have domain and forest at windows 2016 functional level so not sure why ad level failed
those are the right number for cu9
Note tried to upload a file that had results and got error "no such upload " so truncated version
Hi,
Sorry I forgot to ask:
What is the current CU version of your Exchange server?
If you are using CU3 or previous versions, you may need to make sure Microsoft .NET Framework 4.8 is installed on the server before you upgrade to CU8.
And since CU9 is released, you may also try upgrading to CU9 to see if the problem persists.
Though there isn't a schema update between CU8 and CU9, running prepareSchema/AD/Domain before upgrading won't do harm to your environment.
Hello
yes I have intalled .net framework 4.8,
I am trying to go to cu9 from cu3
ran this powershell script
$PSVersionTable.CLRVersion
gci 'HKLM:\SOFTWARE\Microsoft\NET Framework Setup\NDP' -recurse | gp -name Version,Release -EA 0 | where { $_.PSChildName -match '^(?!S)\p{L}'} | select PSChildName, Version, Release
Major Minor Build Revision
4 0 30319 42000
4 0 30319 42000
PSChildName : Client
Version : 4.8.03761
Release : 528049
PSChildName : Full
Version : 4.8.03761
Release : 528049
PSChildName : Client
Version : 4.0.0.0
Release :
used windows10.0-kb4486153-x64_43ee33b302bfdba470542a128a9ee0b58faa5412.msu to get 4.8 installed
and I look at update history that kb4486153 is there
Regards,
Eric
Hi, Eric.
I am writing here to confirm with you how thing going now?
Did CU9 work for you?
Hello KaelYao,
no I am still getting the error
The Mailbox server role isn't installed on this computer
is there some way I could try an earlier cu?
or I am stuck with cu9 because I have updated the schema and active directory
Hello KaelYao
I want to run this by you,
when the zero day happened I ran the ExchangeMitigations.ps1 script and turned things off, I have installed the windows update for my cu version, so it is patched, but I never ran ExchangeMitigations.ps1 to undo the stuff that was turned off, I wanted to wait until I had the newest cu installed before I did this, just in case.
do you think this might be the cause of my issue?
Regards,
Eric Hendrickson
Hi Eric,
Thanks for the information!
However, I tested it in my lab(run the script and upgrade to Exchange 2019 CU9) and it didn't cause such a problem.
I suppose that the problem may still be with MDC.
Is the MDC(with the FSMO roles) in the same domain and same site as the Exchange server?
Hello KaelYao,
yes the MDC is in the same domain and same site, only have the one domain,
is there a way to get a lower cu? from what I have read I will probably have the same issue but just thought I would ask
Regards,
Eric Hendrickson
Hi Eric.
You may need to access Microsoft Volume Licensing Center if you need a previous CU version.
I am also not sure if it will work but you may have a try.
Besides, is it possible to setup a new Exchange 2019 server in your environment?
If installing CU9 succeeds without any problems on the new device, I think you may migrate all the mailboxes to the new server and decommission the old one as a workaround.
Besides,if you are still not able to update the Exchange server,
you may also try installing Security Update For Exchange Server 2019 Cumulative Update 3 (KB5000871) as a temporary workaround.
The download link is contained in this link: Description of the security update for Microsoft Exchange Server 2019, 2016, and 2013: March 2, 2021 (KB5000871)
Hi, Eric.
I am writing here to confirm with you how thing going now?
Did the issue get resolved?
Hello KaelYao,
I got that patch installed the day it came out,
I have a invalid cert in my cert list, do think that might be causing the issue?
the valid cert is there with services imap,pop,iis,smtp
the invalid cert still has these service imap,pop,smtp
I have tried removing the invalid cert but it will not let me says it is in use by connectors even though I told those connectors to use a different cert
regards
Eric
Hi Eric.
Sorry for the late reply.
While I suppose the mail flow and EAC/EMS should be still working fine after the cert expires.
If so, the server should be using another valid cert and it may not be the cause of the issue.
To confirm it, please access IIS manager.
Right click on Default Web Site and Exchange Back End, select "Edit Bindings".
Check if the certificate bind to port 443(Default Web Site) is a valid third-party commercial certificate and the one bind to port 444(Exchange Back End) is the "Microsoft Exchange" certificate issued by the Exchange server.