Tuesday, 14 February 2012

Exchange 2010 SP2 Upgrade

Hey all It’s been a while.

In the last week had decided to upgrade my companies Exchange 2010 environment from Service Pack 1 to Service pack 2

My environment consists of 2 active directory sites each with 1 CAS/HUB transport server and 1 Mailbox role. So 4 exchange servers altogether. The Mailbox servers make up a DAG group.

Server 2008 R2 SP1 Exchange was SP1 + Rollup update 4 v2 on all servers.

14.1.0323.003 (console version number)

14.1.218.15 (registry version number)

Before upgrading I made sure I had decent backups of DC’s and Exchange servers. Because mine is a virtual environment (VMware) I took snapshots of all four exchange servers and one DC per site.

I followed the instructions found here on upgrading.

http://technet.microsoft.com/en-us/library/bb629560.aspx

The first part upgrading the CAS and HUB transport servers went like a dream.

When it came to upgrading the Mailbox role servers again I followed the instructions above migrated all stores. Made sure the server wasn’t the active DAG member. I then ran the maintenance script and I got the following error.

Error 1

Some controls aren’t valid. Setup previously failed while performing the action “Install”. You can’t resume setup by performing the action “BuildToBuildUpgrade”.

Cause:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ExchangeServer\v14\MailboxRole\Action
Action key is present with value data: Install

This is the solution that I found in places online, like TechNet and experts exchange seemed to have worked for people. So I performed it.

Solution:
Delete Action key under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ExchangeServer\v14\MailboxRole


I followed this advice and this error disappeared and I got the following error.

Error 2

Mailbox role

Error: this server role can't be installed because the following roles aren't current: AdminToolsRole

This is the solution that I found online in the same places as before.

Solution:

1. HKLM\Software\ExchangeServer\V14\AdminTools\ConfiguredVersion

Change ConfiguredVersion from 14.1.218.5 to 14.2.247.5

2. Restart server and start Exchange 2010 SP2 Setup


So I again followed this advice and I got the following error on the next install attempt.

Error 3

The following error was generated when "$error.Clear();
$vdirName = "PowerShell";
$InternalPowerShellUrl="http://" + $RoleFqdnOrName + "/powershell";
new-PowerShellVirtualDirectory $vdirName -InternalUrl $InternalPowerShellUrl -DomainController $RoleDomainController -BasicAuthentication:$false -WindowsAuthentication:$false -RequireSSL:$false;
" was run: "The virtual directory 'PowerShell' already exists under servername.yourdomain/Default Web Site'.
Parameter name: VirtualDirectoryName"


The solution for this took me a while to find.

1. Open ADSIEDIT.msc and navigate to SERVER - PROTOCOLS – HTTP, then delete PowerShell VD.

2. Log onto the server , launch IIS Manger and remove the PowerShell VD.

3.Run this command from the Elevated cmd prompt -> cscript.exe Adsutil.vbs delete w3svc/1/root/PowerShell

4. Restart Server

After Following these steps Installation should move forward.

Step 1 this in configuration, services, microsoft Exchange,Organisation,administrative group, then server ect.

Step 3 to get the adsutil.vbs script you have to install the IIS 6 Scripting Tools and elevated is RUNAS /User:DOMAIN\username

http://social.technet.microsoft.com/Forums/en-US/exchange2010/thread/0eb81c20-9868-4157-94b0-74aee0cbdabd


I restarted and I got error 3 again. At this point I decided to revert back to the snapshot. I made sure the ADSI entry I had removed was back. I had backed it up just in case. I then decided to try the other mailbox server. Followed all the same procedures and got exactly the same process of errors. At this point I rolled back to the snapshot (Don’t you just love virtualisation) and went back to the drawing board.

The first error I decided was my focus point.

“Some controls aren’t valid. Setup previously failed while performing the action “Install”. You can’t resume setup by performing the action “BuildToBuildUpgrade””

What was the problem why was there still a remnant in the registry from a previous install. What was the previous install? Rollup updates don’t count. I had previously installed service pack 1 it was the last thing I could think off. So I re-ran the install for SP1 and straight away I saw that the install couldn’t have completed properly as it was letting me select and unselect the mailbox role. This should be greyed out if already installed.
I ran the install and sure enough the registry entry removed itself. I was then able to run SP2 without any problems.

I hope this helps and I have some posts from another blog which I will start moving into this one shortly.

Tuesday, 4 May 2010

OSPF areas

Ok so I have got a blog gap of three months rather then 6. I'm hoping to get this down to just a week at some point.
The company I work for have orderd a second internet connection, the idea is that this acts as a failover for our current internet connection on one site and serves as a live connection for users on its site.
Confused? Ok let me paint the picture, draw a triangle, put a dot at each corner of that triangle. Those dots are our three sites. The two dots at the bottom are our main sites. Lets label them A and B. The edges of the triangle is our wan connectivity between sites. You have just drawn a network diagram (see how easy my job is).
Now Site A has an internet conection and it currently serves all three sites. The Site B is going to get a connection and this will serve site B primarily. It's secondary function being that it will act as a failover for site A. Site A will serve site A and act as a filover for site B. Now the task at hand is to use OSPF to manage this, currently all three sites are in OSPF area 0. I will keep you updated on this.

I have just set up an asterisks box and am very keen to get playing with my own little VoIP pbx. I have a 7940 cisco handset kindly donated by our companys telecoms provider. I am also going to be putting my Xbox into the cupboard. I know its a sad day, but it does do a wonderous job of being a distraction from my studies. So tonight in the cupboard it will go, maybe I'll have one game of modern warfare first............

Tuesday, 4 August 2009

Unix syntax in windows

Ok so not the greatest first blog but still something worth sharing I thought.
Unix syntax in Windows. I know not the most exciting topic but this completely caught me off guard recently and I spent hours trying to figure out the problem.
So here it is MAC user phones IT support desk folders created from one MAC are inaccessible on another. However Folders are created in a windows share, which is also accessed by 15 PC users or so. PC Users also can not access files.
Initial thought ntfs permissions problem, so pop on to server take a look select folder, right click properties....... No security tab.
Odd right so try the usual taking ownership ect no joy.
Then I notice there is a space after the folder name something a mac will let you do even on a windows share. But syntax that windows doesn't recognise, bit like those system files on a mac that have '.' at the end 'entouragesys.' end up in your windows profile and you can't delete them.
So I googled ignoring folder syntax and eventually found '\\?\' so if you put that in front of the folder name with the rmdir command it works, directory deleted.
rmdir "D:\sytem folder\irrelevant\genius " (notice the space at the end of the folder path) But wait theres more........

I wasn't satisfied with that so tried using '\\?\' with the rename and ren commands no joy. Then decide to browse through the help commands again.
Used the dir command, gave me a list of directories nothing unusual. But I noticed something the dos 8 character name it still exists. When you browse the directories the postcards and certificates directories still come up (16 character names) the syntax isn't recognise so they are not 'registered' if you like.
However force PC DOS to use 8 bit names and suddenly they become postca~1 and certif~1 . The magic command to do this dir /x. However you have to be in the directory to do this.
D:\sytem folder\irrelevant\genius>dir /x
Ok so we can see a list of 8 character folder names now what we still can't access them?
Well I'm glad you asked lets rename them, How? you say. Well read on.....
D:\sytem folder\irrelevant\genius>ren postca~1 postca~2
We rename them using the 8 charcater format.
Once renamed the folder then appears in the explorer window as an 8 character name 'postca~2' so best to rename again to something ledgable from explorer or from PC DOS if you like.
D:\sytem folder\irrelevant\genius>ren postca~1 postca~2
D:\sytem folder\irrelevant\genius>ren postca~2 Postcards
Possible problems only if the folder name is shorter then 8 characters. But then we can still copy content out and remove the directories using '\\?\'.
Could also use /a switch with the dir command to show hidden folders. ">dir /x /a" hope this helps.

Sunday, 2 August 2009

Welcome to the tech know.....

Ok so the name of the blog I could have put a bit more effort in.....
But let me introduce myself I'm Aaron or Aza and I have so many industry colleagues that have a blogspot, I didn't want to be left behind and decided to get one for myself. I'll be blogging on what I'm doing as I do it. Over the last 18 months, I have gone from a network novice or newbie to someone with more advanced knowledge. My IT career started in high school building and repairing PC's still a hardware freak now. But have a few more creds to my name A+, N+, MCSA, MCTS, and am currently working on my MCSE, CCNA and JNCIA-EX. I have spent a few years dealing with desktops and servers and various windows related stuff. However I steped up to fill some shoes (big shoes I might add) about 18 months, Our network guy was leaving for bigger and better things...... you can check the dude out here http://cytraxtech.blogspot.com
Due to staff absence at management level, someone had to feel in until a job advert and interviews could be arrange. My name came out the hat and I stepped up to plate. Anyway three months later advert was put out and I applied under pressure from higher up the chain. Got to be honest didn't think I was up to the task. Got the post permanently and haven't looked back.
So I'm going to put a few posts up over the next couple of weeks on the stuff I have covered over 18 months, here is a taste.
WAN fixed, leased, VPN - you get my vibe
SSL VPN and Microsoft IAG - soon an update on UAG
Juniper Swithches and Junos - Why I think this is great also why we picked it over everything else.
Trapeze wireless implentation and Ringmaster - Not quite finished yet but looking forward to this.
Managed or unmanaged VOIP solutions - Be careful what I put in here could cause a lawsuit
IPV6 alongside IPV4 - you should get this about november I'm working on this one.
Microsoft active directory structure and Group Policy - I'm not going to blog on this til I have spent some time looking at the 2008 version a friend at microsoft tells me this has had some improvement.
Exchange 2010 - I'm running the beta of this but I also want to talk about public folders and whether sql is not a better option then edb? and why microsoft haven't made this move yet.

So lots to look forward to I'll try and get my first blog up by Friday the 7th.