question

KeithPalmer-4440 avatar image
0 Votes"
KeithPalmer-4440 asked KeithPalmer-4440 commented

Exchange 2013 Error when applying CU23 Update

We are trying to update Exchange 2013 with cumulative update 23. As I understand it, we can't apply cu21 and cu22 without first applying cu23. This is to address a vulnerability which is preventing PCI compliance.

All the flagged pre-requisites appear to have been completed, but when running the update we see the error:

89139-exchange-error.jpg



referring to ActiveDirectorySplitPermissions NullReferenceException

I would appreciate any help with this.

office-exchange-server-administration
exchange-error.jpg (70.8 KiB)
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

What CU is Exchange right now?

Did someone mess with the Exchange Security Groups?

1 Vote 1 ·

anonymous userDavid , the current CU is 14. I am going to try the below suggestion from @KaelYao-MSFT, as the OU has been moved as you suggested. Thanks for your response.

0 Votes 0 ·

1 Answer

KaelYao-MSFT avatar image
1 Vote"
KaelYao-MSFT answered KeithPalmer-4440 commented

Hi @KeithPalmer-4440

As Andy mentioned, please check via Active Directory Users and Computers to see if the default security groups in the Exchange Security Groups OU or the whole OU (supposed to be under the root domain) was moved to another location.

By default you will have the following security groups in the OU:
89392-09.png

If you can find the security groups in another location, please try moving them back and reinstall the update.


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


09.png (11.1 KiB)
· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi @KaelYao-MSFT , thanks for the response. Yes, the OU has been moved to a sub OU containing all the Default Security Groups. Does this mean they ALL have to be in root or just Exchange? Also, ours is called Microsoft Exchange Security Groups - is this not the default and should it be renamed? Appreciate your help!

0 Votes 0 ·

Hi,

Yes the default name of the OU is "Microsoft Exchange Security Groups" and it is under the root domain.
And you will have the following groups in this OU.
89620-13.png


0 Votes 0 ·
13.png (62.2 KiB)

@KaelYao-MSFT Brilliant! That worked. Thank you.

0 Votes 0 ·