This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(57.599999999999994, 3%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJ%3C/text%3E%3C/svg%3E)
R:unning CU 19 update on exchange 2016 on server 2012r2 Failed on step 13 of 17 The following error was generated when "$error.Clear(); if (!$RoleIsDatacenter -and !$RoleIsDatacenterDedicated) { $arbUsers = @(get-user -Filter {lastname -eq "MSExchApproval 1f05a927-3be2-4fb9-aa03-b59fe3b56f4c"} -IgnoreDefaultScope -ResultSize 1); if ($arbUsers.Length -ne 0) { $mbxname = $arbUsers[0].name; $mbxs = @( get-mailbox -arbitration -Filter {name -eq $mbxname} -IgnoreDefaultScope -resultSize 1 ); if ( $mbxs.length -eq 0) { $dbs = @(get-MailboxDatabase -Server:$RoleFqdnOrName -DomainController $RoleDomainController); if ($dbs.Length -ne 0) { enable-mailbox -Arbitration -identity $arbUsers[0] -database $dbs[0].Identity; } } } } " was run: "Microsoft.Exchange.Data.DataValidationException: ExternalEmailAddress is mandatory on MailUser. at Microsoft.Exchange.Data.Directory.ADDataSession.Save(ADObject instanceToSave, IEnumerable1 properties, Boolean bypassValidation) at Microsoft.Exchange.Data.Directory.Recipient.ADRecipientObjectSession.Save(ADRecipient instanceToSave, String callerFilePath, Int32 callerFileLine, String memberName) at Microsoft.Exchange.Data.Directory.Recipient.ADRecipientObjectSession.Microsoft.Exchange.Data.IConfigDataProvider.Save(IConfigurable instance, String callerFilePath, Int32 callerFileLine, String memberName) at Microsoft.Exchange.Management.RecipientTasks.EnableMailbox.PrepareRecipientObject(ADUser& user) at Microsoft.Exchange.Management.RecipientTasks.EnableRecipientObjectTask2.PrepareDataObject() at Microsoft.Exchange.Configuration.Tasks.SetTaskBase1.InternalValidate() at Microsoft.Exchange.Configuration.Tasks.RecipientObjectActionTask2.InternalValidate() at Microsoft.Exchange.Management.RecipientTasks.EnableMailbox.InternalValidate() at Microsoft.Exchange.Configuration.Tasks.Task.<ProcessRecord>b__91_1() at Microsoft.Exchange.Configuration.Tasks.Task.InvokeRetryableFunc(String funcName, Action func, Boolean terminatePipelineIfFailed)".
This is a hybrid setup
I can't even submit a pay per incident support request with microsoft. It keeps asking me for a contract number. Any ideas. The phone number does not help either 800-642-7676
Can you check MSExchApproval 1f05a927-3be2-4fb9-aa03-b59fe3b56f4c has a mailbox database assigned check in user attributes or via adding adsiedit
It did not. I had put it in some other ones, but somehow missed that. I will try to run it again. Will take me a bit as I have to restore a few things
I re-ran setup and after preparing Files completed it got stuck on copying exchange files at 16% for a very long time. I'm still waiting. This did not happen the first couple of times.
Hang in there this can take a couple of hours to complete
Make sure you disable any anti-malware software if that is installed on the server
Yes, Thank you. that was my first issue when I started and it wouldn't unload - was told to run an uninstall which crashed the whole server and had to restore from back up. The trend people had to be involved to remove it.
Mailbox role: Client Access service FAILED The following error was generated when $error.Clear(); if (get-service MSExchangeServiceHost* | where {$_.name -eq "MSExchangeServiceHost"}) { if ($RoleDatacenterIsTestEnv) { Stop-Process -Name
"Microsoft.Exchange.ServiceHost" -Force
Stop-service MSExchangeServiceHost }
Start-service MSExchangeServiceHost }" was run: "Microsoft.PowerShell.Commands.ServiceCommandException: Service
'Microsoft Exchange Service Host (MSExchangeServiceHost)' cannot be started due
to the following error: Cannot start service MSExchangeServiceHost on computer
wouldn't all fit: Any ideas?
'.'. ---> System.InvalidOperationException: Cannot start service
MSExchangeServiceHost on computer '.'. --->
System.ComponentModel.Win32Exception: The service did not respond to the start
or control request in a timely fashion --- End of inner exception stack trace---
at System.ServiceProcess.ServiceController.Start(String[] args) at
Microsoft.PowerShell.Commands.ServiceOperationBaseCommand.DoStartService(Service
Can you check that all the dependences have started including the Microsoft Exchange active directory topology service, and make they are all set to automatic start
None of the services started. I wasn't sure if I was to start them. I'm trying to start them now.
I was able to start them all but nothing will open on the exchange side. Toolbox, ESM etc. without errors. Do I need to to anything else to finish the setup?
If you run this in a window behind
While (1 -le 2) { Sleep 1 ; Get-Service | Where { $_.DisplayName -Like ‘Microsoft Exchange*’ } | Set-Service –StartupType ‘Automatic’ }
And rerun the update
Once it gets past the previous section where it failed to start the service Stop the script with Ctrl + C
Ok I will try that thank you!
Got past that and failed at Mailbox Role Mailbox service
The following error was generated when "$error.Clear();
If ($RoleProductPlatform -eq "amd64") {
try { # Need to configure the ETL
traces before the fast service is installed. This will ensure that when the
service comes up # it will have the necessary trace session setting available
to read from the registry $fastPerfEtlTraceFolderPath = Join-Path -Path
$RoleBinPath -ChildPath "\Search\Ceres\Diagnostics\ETLTraces"
$fastDiagnosticTracingRegKeyPath = 'HKLM:\SOFTWARE\Microsoft\Office
Server\16.0\Search\Diagnostics\Tracing' if(-not(Test-Path -Path
$fastPerfEtlTraceFolderPath)) { $null = New-Item $fastPerfEtlTraceFolderPath
-Type 'Directory' -Force }
if (-not(Test-Path -Path $fastDiagnosticTracingRegKeyPath)) { $null = New-Item -Path $fastDiagnosticTracingRegKeyPath -Force }
Could you try running the update via and elevated command prompt?
if (-not(Test-Path -Path $fastDiagnosticTracingRegKeyPath)) {
$null = New-Item -Path $fastDiagnosticTracingRegKeyPath -Force }
$null = New-ItemProperty -Path $fastDiagnosticTracingRegKeyPath -Name 'TracingPath' -PropertyType 'string' -Value $fastPerfEtlTraceFolderPath -Force $null = New-ItemProperty -Path
$fastDiagnosticTracingRegKeyPath -Name 'TracingFileName' -PropertyType 'string'
-Value 'DocumentProcessingTrace' -Force $null = New-ItemProperty -Path
$fastDiagnosticTracingRegKeyPath -Name 'DocumentParserSuccessLogMessage'
-PropertyType 'Dword' -Value 1 -Force $null = New-ItemProperty -Path $fastDiagnosticTracingRegKeyPath -Name 'DocumentParserLoggingNoInitialisation'
-PropertyType 'Dword' -Value 1 -Force # Max trace folder size 50 * 100 =
5GB $null = New-ItemProperty -Path $fastDiagnosticTracingRegKeyPath -Name
'MaxTraceFileSize' -PropertyType 'Dword' -Value 50 -Force $null =
New-ItemProperty -Path $fastDiagnosticTracingRegKeyPath -Name
'MaxTraceFileCount' -PropertyType 'Dword' -Value 100 -Force
$null = New-ItemProperty -Path $fastDiagnosticTracingRegKeyPath -Name
'UseGeneralSwitch' -PropertyType 'Dword' -Value 1 -Force
$null = New-ItemProperty -Path $fastDiagnosticTracingRegKeyPath -Name 'GeneralSwitch'
-PropertyType 'Dword' -Value 0 -Force } catch { # ETl tracing is not
critical. Info only log Write-ExchangeSetupLog -Info ("An exception ocurred
while trying to Configure the FAST ETL traces. Exception: " +
$_.Exception.Message); } try { $fastFusionRegKeyPath =
'HKLM:\SOFTWARE\Microsoft\Office Server\16.0\Search\FlightControl' if
(Test-Path -Path $fastFusionRegKeyPath) { Remove-ItemProperty -Path
$fastFusionRegKeyPath -Name 'fusion_new_enabled' -Force -ErrorAction
Sorry its a super long error and you have gone above and beyond but I figured I might as well throw it out there anyway to see if you know
There is more. I'm trying to figure out how I can post it all togther
That is how I ran it. So annoying. I'm sorry. I can try to run it again
Different error in the same place: if(!$RoleIsDatacenter -and !$RoleIsDatacenterDedicated
$arbUsers =@(get-user -Filter {lastname -eq "MSExchApproval
1f05a927-3be2-4fb9-aa03-b59fe3b56f4c"} -IgnoreDefaultScope -ResultSize 1)
if($arbUsers.Length -ne 0) $mbxname = $arbUsers[0].name; $mbxs = @(
get-mailbox -arbitration -Filter {name -eq $mbxname} -IgnoreDefaultScope
-resultSize 1 ); if ( $mbxs.length -eq 0) { $dbs = @(get-MailboxDatabase -Server:$RoleFqdnOrName -DomainController $RoleDomainController); if($dbs.Length -ne 0) { enable-mailbox -Arbitration -identity $arbUsers[0]-database $dbs[0].Identity was run "Microsoft.Exchange.Management.Tasks.RecipientTaskException: The user's Active
Directory account must be logon-disabled for linked, shared, or resource
mailbox. at Microsoft.Exchange.Configuration
Tasks.Task.ThrowError(Exception
exception, ErrorCategory errorCategory, Object target, String helpUrl) at
Microsoft.Exchange.Management.RecipientTasks.EnableMailbox.PrepareRecipientObjec
t(ADUser&user)atMicrosoft.Exchange.Management.RecipientTasks.EnableRecipientObjectTask2.Prepare DataObject() at Microsoft.Exchange.Configuration.Tasks.SetTaskBase1.InternalValidate()
atMicrosoft.Exchange.Configuration.Tasks.RecipientObjectActionTask`2.InternalValid
ate() atMicrosoft.Exchange.Management.RecipientTasks.EnableMailbox.InternalValidate()
at Microsoft.Exchange.Configuration.Tasks.Task.<ProcessRecord>b__91_1
atMicrosoft.Exchange.Configuration.Tasks.Task.InvokeRetryableFunc(String
funcName, Action func, Boolean terminatePipelineIfFailed
Hi @jennylee ,
Did you run setup /prepareAD before running the setup? Looks like issue with the arbitration mailbox.
Run the command in Exchange management shell,
Get-Mailbox –Arbitration | Select Name,Database
there would be a warning for one of the system mailboxes, if yes, run the below command to set the database to that system mailbox
Set-Mailbox "System Mailbox xxxxx" –Database "DB Name" –Arbitration
If the above suggestion helps, please click on "Accept Answer" and upvote it.
I did run /prepare AD and I cannot get EMS to come up to run that. All kinds of errors
Mailbox role: Mailbox service FAILED
The following error was generated when "$error.Clear();
If ($RoleProductPlatform -eq "amd64") {
try { # Need to configure the ETL
traces before the fast service is installed. This will ensure that when the
service comes up # it will have the necessary trace session setting available
to read from the registry $fastPerfEtlTraceFolderPath = Join-Path -Path
$RoleBinPath -ChildPath "\Search\Ceres\Diagnostics\ETLTraces"
$fastDiagnosticTracingRegKeyPath = 'HKLM:\SOFTWARE\Microsoft\Office
Server\16.0\Search\Diagnostics\Tracing' if(-not(Test-Path -Path
$fastPerfEtlTraceFolderPath)) { $null = New-Item $fastPerfEtlTraceFolderPath
-Type 'Directory' -Force }
if (-not(Test-Path -Path $fastDiagnosticTracingRegKeyPath)) {
$null = New-Item -Path $fastDiagnosticTracingRegKeyPath -Force }
$null = New-ItemProperty -Path $fastDiagnosticTracingRegKeyPath -Name 'TracingPath' -PropertyType 'string' -Value $fastPerfEtlTraceFolderPath -Force $null = New-ItemProperty -Path
$fastDiagnosticTracingRegKeyPath -Name 'TracingFileName' -PropertyType 'string'
-Value 'DocumentProcessingTrace' -Force $null = New-ItemProperty -Path
$fastDiagnosticTracingRegKeyPath -Name 'DocumentParserSuccessLogMessage'
-PropertyType 'Dword' -Value 1 -Force $null = New-ItemProperty -Path
$fastDiagnosticTracingRegKeyPath -Name 'DocumentParserLoggingNoInitialisation'
-PropertyType 'Dword' -Value 1 -Force # Max trace folder size 50 * 100 =
5GB $null = New-ItemProperty -Path $fastDiagnosticTracingRegKeyPath -Name
'MaxTraceFileSize' -PropertyType 'Dword' -Value 50 -Force $null =
New-ItemProperty -Path $fastDiagnosticTracingRegKeyPath -Name
'MaxTraceFileCount' -PropertyType 'Dword' -Value 100 -Force
$null = New-ItemProperty -Path $fastDiagnosticTracingRegKeyPath -Name
'UseGeneralSwitch' -PropertyType 'Dword' -Value 1 -Force
$null = New-ItemProperty -Path $fastDiagnosticTracingRegKeyPath -Name 'GeneralSwitch'
-PropertyType 'Dword' -Value 0 -Force } catch { # ETl tracing is not
critical. Info only log Write-ExchangeSetupLog -Info ("An exception ocurred
while trying to Configure the FAST ETL traces. Exception: " +
$_.Exception.Message); } try { $fastFusionRegKeyPath =
'HKLM:\SOFTWARE\Microsoft\Office Server\16.0\Search\FlightControl' if
(Test-Path -Path $fastFusionRegKeyPath) { Remove-ItemProperty -Path
$fastFusionRegKeyPath -Name 'fusion_new_enabled' -Force -ErrorAction
SilentlyContinue Remove-ItemProperty -Path $fastFusionRegKeyPath -Name
'fusion_old_enabled' -Force -ErrorAction SilentlyContinue
Remove-ItemProperty -Path $fastFusionRegKeyPath -Name 'fusion_compare_outputs' -Force -ErrorAction SilentlyContinue } } catch { # Removing new fusion keys is not critical.
Info only log Write-ExchangeSetupLog -Info ("An exception ocurred while trying
to remove the fast new fusion reg keys. Exception: " + $.Exception.Message);
} $fastInstallConfigPath = Join-Path -Path $RoleBinPath -ChildPath
"Search\Ceres\Installer"; $command = Join-Path -Path $fastInstallConfigPath
-ChildPath "InstallConfig.ps1"; $dataFolderPath = Join-Path -Path $RoleBinPath
-ChildPath "Search\Ceres\HostController\Data"; # Remove previous
SearchFoundation configuration &$command -action u -silent; try { if
([System.IO.Directory]::Exists($dataFolderPath)) {
[System.IO.Directory]::Delete($dataFolderPath, $true); } } catch {
$deleteErrorMsg = "Failure cleaning up SearchFoundation Data folder. - " +
$dataFolderPath + " - " + $.Exception.Message;
Write-ExchangeSetupLog -Error $deleteErrorMsg; }
Try { # the BasePort value MUST be kept in sync with
dev\Search\src\OperatorSchema\SearchConfig.cs
&$command -action i -baseport
3800 -dataFolder $dataFolderPath -silent; } catch {
$errorMsg = "Failure configuring SearchFoundation through installconfig.ps1 - " +
$_.Exception.Message; Write-ExchangeSetupLog -Error $errorMsg;
&$command -action u -silent; try { if ([System.IO.Directory]::Exists($dataFolderPath)) {
[System.IO.Directory]::Delete($dataFolderPath, $true); } } catch {
$deleteErrorMsg = "Failure cleaning up SearchFoundation Data folder. - " +
$dataFolderPath + " - " + $_.Exception.Message;
Write-ExchangeSetupLog -Error
$deleteErrorMsg; } }
"HKLM:\SOFTWARE\Microsoft\PowerShell\1\PowerShellSnapIns\";
$FastSnapinNames =
@("EnginePSSnapin", "HostControllerPSSnapIn", "InteractionEnginePSSnapIn",
"JunoPSSnapin", "SearchCorePSSnapIn");
$officePublicKey = "71E9BCE111E9429C";
$exchangePublicKey = "31bf3856ad364e35";
foreach ($fastSnapinName in
$FastSnapinNames) {
$fastSnapinPath = $PowerShellSnapinsPath +
$fastSnapinName; $assemblyNameProperty = Get-ItemProperty -Path
$fastSnapinPath -Name "AssemblyName" -ErrorAction SilentlyContinue;
If ($assemblyNameProperty -ne $null -and (-not
[string]::IsNullOrEmpty($assemblyNameProperty.AssemblyName))) {
$newAssemblyName = $assemblyNameProperty.AssemblyName -ireplace
($officePublicKey, $exchangePublicKey);
Set-ItemProperty -Path $fastSnapinPath
-Name "AssemblyName" -Value $newAssemblyName; } } } catch { # Info only
Log Write-ExchangeSetupLog -Info ("An exception ocurred while configuring
Search Foundation PowerShell Snapin. Exception: " + $_.Exception.Message);
} } " was run: "System.Exception: Failure cleaning up SearchFoundation Data
folder. - C:\Program Files\Microsoft\Exchange
Server\V15\Bin\Search\Ceres\HostController\Data - Exception calling "Delete"
with "2" argument(s): "Access to the path
'Microsoft.ClientResourceView.FlowService.dll' is denied."
At Microsoft.Exchange.Configuration.Tasks.Task.ThrowError(Exception exception,
ErrorCategory errorCategory, Object target, String helpUrl)
atMicrosoft.Exchange.Management.Deployment.WriteExchangeSetupLog.InternalProcessR
cord() at Microsoft.Exchange.Configuration.Tasks.Task.<ProcessRecord>b__91_1()
at Microsoft.Exchange.Configuration.Tasks.Task.InvokeRetryableFunc(String
funcName, Action func, Boolean terminatePipelineIfFailed)".
The Exchange Server setup operation didn't complete. More details can be found
in ExchangeSetup.log located in the <SystemDrive>:\ExchangeSetupLogs folder.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(246.4, 22%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKY%3C/text%3E%3C/svg%3E)
Hi, @jennylee
Since you have marked an answer to the question,did the problem get resolved?
He solved the first 2 errors I got so I get a little further everytime, but getting a new error I’ll have to try to fix in the morning.
So he solved my original question. Still getting new errors
Sorry to hear that.
According to the error message "Access to the path 'Microsoft.ClientResourceView.FlowService.dll' is denied.",
I suppose that the file may be locked by some services or anti-virus software(which you should have disabled)
Would you use Process Explorer to check which service is using this dll file?
You may download this tool and search for the name of the dll file.
I had to post in answer, reply won't take the whole error.
I was in the process of running it again before I went to bed, I stopped backup services, antivirus was already stopped. Here are the errors: I can't put in reply it won't fit: Mailbox role: Mailbox service 100% FAILED
Mailbox role: Mailbox service 100%
FAILED
The following error was generated when "$error.Clear();
If (!$RoleIsDatacenter -and !$RoleIsDatacenterDedicated) {
$arbUsers = @(get-user -Filter {lastname -eq "MSExchApproval
1f05a927-3be2-4fb9-aa03-b59fe3b56f4c"} -IgnoreDefaultScope -ResultSize 1);
If ($arbUsers.Length -ne 0) { $mbxname = $arbUsers[0].name;
$mbxs = @( get-mailbox -arbitration -Filter {name -eq $mbxname} -IgnoreDefaultScope
-resultSize 1 ); if ( $mbxs.length -eq 0) { $dbs = @(get-MailboxDatabase
-Server:$RoleFqdnOrName -DomainController $RoleDomainController);
If ($dbs.Length -ne 0) { enable-mailbox -Arbitration -identity $arbUsers[0]
-database $dbs[0].Identity; } } } } " was run: "Microsoft.Exchange.Data.DataValidationException: ExternalEmailAddress is mandatory on MailUser. At Microsoft.Exchange.Data.Directory.ADDataSession.Save(ADObject instanceToSave,
IEnumerable1 properties, Boolean bypassValidation) at icrosoft.Exchange.Data.Directory.Recipient.ADRecipientObjectSession.Save(ADReci Pient instanceToSave, String callerFilePath, Int32 callerFileLine, String memberName) At Microsoft.Exchange.Data.Directory.Recipient.ADRecipientObjectSession.Microsoft.E xchange.Data.IConfigDataProvider.Save(IConfigurable instance, String callerFilePath, Int32 callerFileLine, String memberName) at Microsoft.Exchange.Management.RecipientTasks.EnableMailbox.PrepareRecipientObjec t(ADUser& user) at Microsoft.Exchange.Management.RecipientTasks.EnableRecipientObjectTask2.Prepare
DataObject() at Microsoft.Excha ge.Configuration.Tasks.SetTaskBase1.InternalValidate() At Microsoft.Exchange.Configuration.Tasks.RecipientObjectActionTask2.InternalValid
ate() at Microsoft.Exchange.Management.RecipientTasks.EnableMailbox.InternalValidate()
at Microsoft.Exchange.Configuration.Tasks.Task.<ProcessRecord>b__91_1()
at Microsoft.Exchange.Configuration.Tasks.Task.InvokeRetryableFunc(String
funcName, Action func, Boolean terminatePipelineIfFailed)".
Hi, @jennylee
I noticed that you have created a new thread here: https://learn.microsoft.com/answers/questions/304339/exchange-2016-cu-19-update-failed-on-mailbox-servi.html
Please follow up on the new thread.
I did follow up. I had to post my response in the Answer area because it wouldn't take my response.
Since Comments have a limit of 1000 characters, please post a new answer if the text is over 1000.
Sorry for the inconvenience.
And hope your issue will be resolved soon.