{"id":1513,"date":"2018-10-09T15:00:55","date_gmt":"2018-10-09T15:00:55","guid":{"rendered":"http:\/\/help.sealionshipping.co.uk\/?p=1513"},"modified":"2018-10-09T15:00:55","modified_gmt":"2018-10-09T15:00:55","slug":"upgrading-exchange-server","status":"publish","type":"post","link":"http:\/\/gardiner.tech\/bluebook\/blog\/2018\/10\/09\/upgrading-exchange-server\/","title":{"rendered":"Upgrading Exchange Server"},"content":{"rendered":"

\t\t\t\tWhen upgrading the Exchange server we can come across this error.<\/p>\n

 <\/p>\n\n\n\n
Error:<\/span>
\nThe following error was generated when “$error.Clear();<\/span>
\n$name = [Microsoft.Exchange.Management.RecipientTasks.EnableMailbox]::DiscoveryMailboxUniqueName;<\/span>
\n$dispname = [Microsoft.Exchange.Management.RecipientTasks.EnableMailbox]::DiscoveryMailboxDisplayName;<\/span>
\n$dismbx = get-mailbox -Filter {name -eq $name} -IgnoreDefaultScope -resultSize 1;<\/span>
\nif( $dismbx -ne $null)<\/span>
\n{<\/span>
\n$srvname = $dismbx.ServerName;<\/span>
\nif( $dismbx.Database -ne $null -and $RoleFqdnOrName -like “$srvname.*” )<\/span>
\n{<\/span>
\nWrite-ExchangeSetupLog -info “Setup DiscoverySearchMailbox Permission.”;<\/span>
\n$mountedMdb = get-mailboxdatabase $dismbx.Database -status | where { $_.Mounted -eq $true };<\/span>
\nif( $mountedMdb -eq $null )<\/span>
\n{<\/span>
\nWrite-ExchangeSetupLog -info “Mounting database before stamp DiscoverySearchMailbox Permission…”;<\/span>
\nmount-database $dismbx.Database;<\/span>
\n}$mountedMdb = get-mailboxdatabase $dismbx.Database -status | where { $_.Mounted -eq $true };<\/span>
\nif( $mountedMdb -ne $null )<\/span>
\n{<\/span>
\n$dmRoleGroupGuid = [Microsoft.Exchange.Data.Directory.Management.RoleGroup]::DiscoveryManagement_InitInfo.WellKnownGuid;<\/span>
\n$dmRoleGroup = Get-RoleGroup -Identity $dmRoleGroupGuid -DomainController $RoleDomainController -ErrorAction:SilentlyContinue;<\/span>
\nif( $dmRoleGroup -ne $null )<\/span>
\n{<\/span>
\ntrap [Exception]<\/span>
\n{<\/span>
\nAdd-MailboxPermission $dismbx -User $dmRoleGroup.Name -AccessRights FullAccess -DomainController $RoleDomainController -ErrorAction SilentlyContinue;<\/span>
\ncontinue;<\/span>
\n}Add-MailboxPermission $dismbx -User $dmRoleGroup.Identity -AccessRights FullAccess -DomainController $RoleDomainController -WarningAction SilentlyContinue;<\/span>
\n}<\/span>
\n}<\/span>
\n}<\/span>
\n}<\/span>
\n” was run: “Microsoft.Exchange.Data.Common.LocalizedException: Couldn’t resolve the user or group “SealionNet.com\/Microsoft Exchange Security Groups\/Discovery Management.” If the user or group is a foreign forest principal, you must have either a two-way trust or an outgoing trust. —> System.SystemException: The trust relationship between the primary domain and the trusted domain failed.at System.Security.Principal.NTAccount.TranslateToSids(IdentityReferenceCollection sourceAccounts, Boolean& someFailed)<\/span>
\nat System.Security.Principal.NTAccount.Translate(IdentityReferenceCollection sourceAccounts, Type targetType, Boolean forceSuccess)<\/span>
\nat System.Security.Principal.NTAccount.Translate(Type targetType)<\/span>
\nat Microsoft.Exchange.Configuration.Tasks.SecurityPrincipalIdParameter.GetUserSidAsSAMAccount(SecurityPrincipalIdParameter user, TaskErrorLoggingDelegate logError, TaskVerboseLoggingDelegate logVerbose)<\/span>
\n— End of inner exception stack trace —<\/span>
\nat Microsoft.Exchange.Configuration.Tasks.Task.ThrowError(Exception exception, ErrorCategory errorCategory, Object target, String helpUrl)<\/span>
\nat Microsoft.Exchange.Configuration.Tasks.Task.WriteError(Exception exception, ErrorCategory category, Object target)<\/span>
\nat Microsoft.Exchange.Configuration.Tasks.SecurityPrincipalIdParameter.GetUserSidAsSAMAccount(SecurityPrincipalIdParameter user, TaskErrorLoggingDelegate logError, TaskVerboseLoggingDelegate logVerbose)<\/span>
\nat Microsoft.Exchange.Configuration.Tasks.SecurityPrincipalIdParameter.GetSecurityPrincipal(IRecipientSession session, SecurityPrincipalIdParameter user, TaskErrorLoggingDelegate logError, TaskVerboseLoggingDelegate logVerbose)<\/span>
\nat Microsoft.Exchange.Management.RecipientTasks.SetMailboxPermissionTaskBase.InternalValidate()<\/span>
\nat Microsoft.Exchange.Management.RecipientTasks.AddMailboxPermission.InternalValidate()<\/span>
\nat Microsoft.Exchange.Configuration.Tasks.Task.<ProcessRecord>b__b()<\/span>
\nat Microsoft.Exchange.Configuration.Tasks.Task.InvokeRetryableFunc(String funcName, Action func, Boolean terminatePipelineIfFailed)”.<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

This is due to the Discovery Search mailbox.<\/p>\n

The resolution is to:-<\/p>\n

    \n
  1. \n
      \n
    1. Delete the \u00a0Discovery Search mailbox user from Active Directory. \u00a0Start your Active Directory Users and Computers mmc and look for your Discovery Search Mailbox user. Default this user will be placed in the Users organizational unit. It will be named something like: DiscoverySearchMailbox{D919BA05-46A6-415f-80AD-7E09334BB852}.<\/li>\n
    2. After deletion you can restart the installation of your Exchange Service Pack. It will not show the error anymore.<\/li>\n
    3. To recreate the user use:\u00a0setup \/PrepareAD \/IAcceptExchangeServerLicenseTerms\u00a0<\/em>from the Exchange Powershell window.<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"

      When upgrading the Exchange server we can come across this error.   Error: The following error was generated when “$error.Clear(); $name = [Microsoft.Exchange.Management.RecipientTasks.EnableMailbox]::DiscoveryMailboxUniqueName; $dispname = [Microsoft.Exchange.Management.RecipientTasks.EnableMailbox]::DiscoveryMailboxDisplayName; $dismbx = get-mailbox -Filter {name -eq $name} -IgnoreDefaultScope -resultSize 1; if( $dismbx -ne $null) { $srvname = $dismbx.ServerName; if( $dismbx.Database -ne $null -and $RoleFqdnOrName -like “$srvname.*” ) { Write-ExchangeSetupLog -info “Setup DiscoverySearchMailbox Permission.”; $mountedMdb = get-mailboxdatabase $dismbx.Database -status | where { $_.Mounted -eq $true }; if( $mountedMdb -eq $null […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[83],"tags":[],"_links":{"self":[{"href":"http:\/\/gardiner.tech\/bluebook\/wp-json\/wp\/v2\/posts\/1513"}],"collection":[{"href":"http:\/\/gardiner.tech\/bluebook\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/gardiner.tech\/bluebook\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/gardiner.tech\/bluebook\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/gardiner.tech\/bluebook\/wp-json\/wp\/v2\/comments?post=1513"}],"version-history":[{"count":0,"href":"http:\/\/gardiner.tech\/bluebook\/wp-json\/wp\/v2\/posts\/1513\/revisions"}],"wp:attachment":[{"href":"http:\/\/gardiner.tech\/bluebook\/wp-json\/wp\/v2\/media?parent=1513"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/gardiner.tech\/bluebook\/wp-json\/wp\/v2\/categories?post=1513"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/gardiner.tech\/bluebook\/wp-json\/wp\/v2\/tags?post=1513"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}