question

BR0KK avatar image
0 Votes"
BR0KK asked ·

Exchange 16 with CU14 and NET 4.7.2 no Premissions to Update ti New CU

HI

i wanted to Update one of my Servers with onPrem Exchnage to the new CU19. I ran into premission Problems when i try to update to a new CU

This is My Server:

SRV 16 with Exch. 16 and CU14
NET 4.7.2

I had to retsore the Server to get it running again ....

What i tried so far:

NET FW Update to 4.8 worked and the Exch. is still running after this.
Upgrade directly to CU 19 doesn't work it fails right after the the check for preinstall requirements
Upgrade to CU 15 fails at step 5 after the file copy goes through

The Logs Show these errors:

 [03.10.2021 10:27:33.0852] [1] Installing a new product. Package: G:\exchangeserver.msi. Property values: DISABLEERRORREPORTING=1 PRODUCTLANGUAGELCID=1033 DEFAULTLANGUAGENAME=ENU DEFAULTLANGUAGELCID=1033 INSTALLCOMMENT="Installierte Sprache für dieses Produkt: English (United States)" REINSTALLMODE=amus REBOOT=ReallySuppress TARGETDIR="C:\Program Files\Microsoft\Exchange Server\V15" ADDLOCAL=AdminTools,Bridgehead,ClientAccess,UnifiedMessaging,Mailbox,FrontendTransport,Cafe,AdminToolsNonGateway
 [03.10.2021 10:29:41.0997] [1] [ERROR] Installing product G:\exchangeserver.msi failed. Schwerwiegender Fehler bei der Installation. Error code is 1603. Last error reported by the MSI package is 'The installer has insufficient privileges to access this directory: C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\15.1.1913.  The installation cannot continue.  Log on as administrator or contact your system administrator.'.
 [03.10.2021 10:29:41.0997] [1] [ERROR] Schwerwiegender Fehler bei der Installation
 [03.10.2021 10:29:42.0000] [1] [ERROR] Installing product G:\exchangeserver.msi failed. Schwerwiegender Fehler bei der Installation. Error code is 1603. Last error reported by the MSI package is 'The installer has insufficient privileges to access this directory: C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\15.1.1913.  The installation cannot continue.  Log on as administrator or contact your system administrator.'.
 [03.10.2021 10:29:42.0000] [1] [ERROR] Schwerwiegender Fehler bei der Installation
 [03.10.2021 10:29:42.0019] [1] [ERROR] Installing product G:\exchangeserver.msi failed. Schwerwiegender Fehler bei der Installation. Error code is 1603. Last error reported by the MSI package is 'The installer has insufficient privileges to access this directory: C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\15.1.1913.  The installation cannot continue.  Log on as administrator or contact your system administrator.'.
 [03.10.2021 10:29:42.0019] [1] [ERROR] Schwerwiegender Fehler bei der Installation

And this:

 === Logging started: 10.03.2021  11:27:34 ===
 Error 1303. The installer has insufficient privileges to access this directory: C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\15.1.1913.  The installation cannot continue.  Log on as administrator or contact your system administrator.


But.... i'm Admin .... i should be able to go through witrh that install ...

I found this when i went to the folder this message is talking about:
76412-fehlerberechtigung.jpg



This is true for all of the folders under this path. There is only one User "Everyone" with the right to "read"...
On a different Exchange i can see that there are more entries in that specific folder.

So what am i supposed to do now ....

I can not find much about this error and the few sources i've found tell me to reinstall and moove the exchage :/


office-exchange-server-administration
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

BR0KK avatar image
0 Votes"
BR0KK answered ·

That failed .

I restored the Ex and AD to a test ESXI and tried to set the premmisions by hand. After that i clould update the exchange to CU 19 and the ....871 Update

Than did the exactly the same on the production server and it worked

The access to two folders was restricted to "Everyon - Readonly"

Im now curious if that entails a compromised inviroment since bteh bsi forwarded this website:
https://www.frankysweb.de/hafnium-veraenderte-verzeichnisberechtigungen-verhindern-update/

And that loooks like the problem i had!!!

· 1 ·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

You should have a complete scan for your server then.
Would you accept it as answer to help other community members, thanks in advance.

0 Votes 0 ·
EricYin-MSFT avatar image
0 Votes"
EricYin-MSFT answered ·

Hi,
What kind of admin do you mean?
In my lab its permission looks like:

76459-3.png

And the account that I use when installing is the administrator of the domain. Is that same for you?
Did you prepare schema/AD/domain before running the setup? Follow the doc here if you didn't: https://docs.microsoft.com/en-us/exchange/plan-and-deploy/prepare-ad-and-domains?view=exchserver-2019
You can also try updating via powershell:

 E:\Setup.exe /IAcceptExchangeServerLicenseTerms /Mode:Upgrade [/DomainController:<ServerFQDN>] [/EnableErrorReporting]




If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.



3.png (36.9 KiB)
· 2 ·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

The bog standard Admin that is there wehn i installed that damn server :D

It's a domain Admin and i can do everything with it.

I ran the setup as administrator. CU19 just Quits with an error and CU15 goes through the fisrt steps and quits after step 5 with that error.

The screenshot you provided shows more users with rights. In my screenshot there is only "everyone" with "read" premissions .... I do not understand how thats possible

The Exchange is running fine after the restore

thx

0 Votes 0 ·

See if you will fail in the three steps:

Run setup.exe /PrepareSchema /IAcceptExchangeServerLicenseTerms (requires Enterprise Admins and Schema Admins permissions, and must be performed in the same AD Site as the Schema Master on a server with the RSAT-ADDS-Tools feature installed – the Schema Master itself would meet these requirements)

Run setup.exe /PrepareAD /IAcceptExchangeServerLicenseTerms

Run setup.exe /PrepareDomain /IAcceptExchangeServerLicenseTerms in each domain in your forest that contains Exchange servers or mailboxes. If you have a single domain, the previous step has already done this for you.

And then upgrade with powershell:

E:\Setup.exe /IAcceptExchangeServerLicenseTerms /Mode:Upgrade [/DomainController:<ServerFQDN>] [/EnableErrorReporting]


0 Votes 0 ·
BR0KK avatar image
0 Votes"
BR0KK answered ·

How is that even Possible ... on all my other exchanges the premissions are set correctly. Is this maybe a sighn of intrusion; someone fiddled with the exchange ?

·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.