question

JustinMicheal-7973 avatar image
0 Votes"
JustinMicheal-7973 asked ZhengqiLou-MSFT commented

uNABLE TO INSTALL

I cannot install exchange 2019 on server 2019
Firewall does not appear to be an issue according to the network engineer. All ports are open. Also a newly static IP address does not solve the issue.

office-exchange-server-connectivity
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

kinda hard to answer with no information.

What are the errors exactly? Where does it fail?

1 Vote 1 ·

1 Answer

ZhengqiLou-MSFT avatar image
0 Votes"
ZhengqiLou-MSFT answered ZhengqiLou-MSFT commented

Hi @JustinMicheal-7973 ,

Have you run the preparation tasks? See this topic: https://docs.microsoft.com/en-us/exchange/plan-and-deploy/prerequisites?view=exchserver-2019#exchange-2019-mailbox-servers-on-windows-server-2019
That means you should install these softwares before installing the Exchange server.

And also if you gonna install Exchange with unattendant mode, you should first make your AD environment prepared.
https://docs.microsoft.com/en-us/exchange/plan-and-deploy/prepare-ad-and-domains?view=exchserver-2019

Best regards,
Lou


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

· 5
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

I’ve got good new. I’ve got both servers running after I had the policy changed enabling the Computer Configuration -> Windows Settings -> Security Settings -> Local Policies/Security Options
Network Security: Configure encryption types allowed for Kerberos RC4_HMAC_MD5 cypher in the policy.

This solved all our problems.



I have only one question left; can you explain this behaviour?

0 Votes 0 ·

I’ve got good new. I’ve got both servers running after I had the policy changed enabling the Computer Configuration -> Windows Settings -> Security Settings -> Local Policies/Security Options
Network Security: Configure encryption types allowed for Kerberos RC4_HMAC_MD5 cypher in the policy.

This solved all our problems.

I have only one question left; can you explain this behaviour?

0 Votes 0 ·

Hi @JustinMicheal-7973 ,

Glad to know your issue is resolved now.

Well it's hard to say, I don't know much about the cyphers, but for sure the Exchange server uses Kerberos for the authentication with AD.

Seems like the Kerberos is the default or a preferred choice:
https://www.calcomsoftware.com/kerberos-tickets-and-authentication-in-active-directory/
Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.

Best regards,
Lou

0 Votes 0 ·

Yes I would like to know if this should be enabled by default or not.

0 Votes 0 ·
Show more comments