KDB Systems

Installing Exchange 2010 Client Access Role

I decided to bite the bul­let and not worry about not being able to install Exchange 2007 after Exchange 2010 is installed. I’ve got good back­ups for my SBS 2003 server so it’s time to start. I’m going to start slow. I’m just installing the Client Access Role today. First I have to pre­pare the server. I went to the Exchange Server Deploy­ment Assis­tant site, answered a few ques­tions then down­loaded a PDF file with basic instruc­tions on how to pro­ceed. I read over the Exchange stuff on Tech­Net once again just to be sure I hadn’t missed any­thing. I found a great site with a very quick guide to installing all the pre­req­ui­sites. Thank you Pow­er­Shell and netometer.com. A quick check once again on the health of Active Direc­tory and I was ready to go. I can’t stress enough that when installing any ver­sion of Exchange you need a healthy Active Direc­tory. Next up was updat­ing the Schema, Active Direc­tory, and the domain. This all appeared to work with­out a hitch. I waited for the changes to repli­cate then ran the Exchange setup and picked the Client Access Role. It installed just fine. I exited the instal­la­tion and checked the instal­la­tion logs, event logs, and fired up the Exchange Man­age­ment Con­sole. Every­thing looked great. One tip I’d like to pass along is don’t install Exchange from the dis­tri­b­u­tion media. Copy the media to a folder on the server you’re installing Exchange on. You can then copy any Exchange Rollups into the Update folder and they’ll get installed dur­ing the Exchange installation.

The next step involves installing a cer­tifi­cate. I haven’t decided if I’m going to use my own cer­tifi­cate or pur­chase one. I’m lean­ing towards the pub­lic cert. In any case I’ve got to get back to work that pays so I’m going to take a break here.

The next morn­ing my daily report from the SBS 2003 server con­tained a sur­prise. There were over 2,000 errors in the Direc­tory Ser­vice event log. The error was:

Event Type: Error
Event Source: NTDS Gen­eral
Event Cat­e­gory: DS Schema
Event ID: 1136
Date: 4/6/2010
Time: 10:03:44 AM
User: NT AUTHORITY\ANONYMOUS LOGON
Com­puter: SBS-SERVER
Descrip­tion: Active Direc­tory failed to cre­ate an index for the fol­low­ing attribute.
Attribute iden­ti­fier: 2515870862
Attribute name: msEx­chOb­jec­tID
A schema cache update will occur 5 min­utes after the log­ging of this event and will attempt to cre­ate an index for the attribute.
Addi­tional Data
Error value: –1403 JET_errIndexDuplicate, Index is already defined

There were sev­eral AD attrib­utes with this error every five min­utes. A quick Google/Bing found the prob­lem had to do with the regional set­tings. Both servers were set to the Canada region, Cana­dian Eng­lish, and a US key­board. That’s pretty much how I always set up Win­dows. Appar­ently this com­bi­na­tion, and many oth­ers, can cause prob­lems with AD updates. I reset every­thing to US, rebooted and the errors con­tin­ued. Fur­ther search­ing found a needed reg­istry change. I found it on the Microsoft sup­port forums here. The value for US Eng­lish is 0x409 Hex by the way. It took a while to find that as well. After another reboot all the errors stopped. I’m sure I could have fig­ured out how to use Cana­dian Eng­lish but I don’t really care. Set­ting every­thing in the domain to US regional set­tings actu­ally makes many things work bet­ter. Lots of appli­ca­tions just assume US set­tings. Date sorts and dis­plays are often borked up if you use any­thing other than US set­tings so I’m just going to live with Win­dows think­ing I’m in the US J

SBS 2003 to Win­dows Server 2008 R2 and Exchange 2010 Migra­tion (Part 1)
SBS 2003 to Win­dows Server 2008 R2 and Exchange 2010 Migra­tion (Part 2)
SBS 2003 to Win­dows Server 2008 R2 and Exchange 2010 Migra­tion (Part 3)
SBS 2003 to Win­dows Server 2008 R2 and Exchange 2010 Migra­tion (Part 4)
SBS 2003 to Win­dows Server 2008 R2 and Exchange 2010 Migra­tion (Part 5) Com­ing soon

Prepar­ing to move DHCP

As part of the project I have to move the DHCP server from the SBS server to a new server. With Win­dows Server 2008 R2 Enter­prise you get what is called one plus four licens­ing. You can install it on phys­i­cal hard­ware. That’s the one license. If this instal­la­tion is only used as a Hyper-V par­ent you can then install four child par­ti­tions with the same license. So far I’ve used two of these licenses, one for the domain con­troller and one for the future Exchange server. I want to run a Ter­mi­nal Server for the third license. This leaves me with one spare license. I plan to exper­i­ment with Direct Access so I’ll prob­a­bly need the last license for that. Long story short, DHCP would have to go on one of the exist­ing servers. I decided to put it on the domain con­troller. Dur­ing the changeover I’ll be run­ning DHCP on the SBS server and the new domain con­troller. The rea­son for this is one or the other may be down for a while when mak­ing changes. This isn’t nor­mally a big deal as long as none of the exist­ing leases expire or no new com­put­ers get con­nected to the net­work. My prob­lem is I have many dif­fer­ent com­put­ers com­ing and going. I may have cus­tomer com­put­ers I’m work­ing on that would need a new lease. This means two DHCP servers. I installed The DHCP server role on the new domain con­troller, con­fig­ured both the exist­ing DHCP on the SBS server and the new DHCP with the same scope but dif­fer­ent exclu­sions so they wouldn’t be try­ing to give out the same addresses. Once fin­ished I autho­rised the new DHCP server in Active Direc­tory and logged off. The next morn­ing there was a sur­prise wait­ing for me in the daily SBS report. One ser­vice was not run­ning. I logged on to the SBS server and saw that DHCP was not run­ning. I’d for­got­ten one of SBS’s quirks. If another DHCP server is run­ning it will shut down its own DHCP server. A quick Bing/Google search found the reg­istry change and all was well with DHCP run­ning on both servers. One more check­point done on the migra­tion from SBS 2003 to Server 2008 R2 and Exchange 2010.

SBS 2003 to Win­dows Server 2008 R2 and Exchange 2010 Migra­tion (Part 1)
SBS 2003 to Win­dows Server 2008 R2 and Exchange 2010 Migra­tion (Part 2)
SBS 2003 to Win­dows Server 2008 R2 and Exchange 2010 Migra­tion (Part 3)
SBS 2003 to Win­dows Server 2008 R2 and Exchange 2010 Migra­tion (Part 4)

Through the Microsoft MVP pro­gram I’ve been involved with many dif­fer­ent prod­uct groups over the past few years. I’ve always thought that the com­pe­ti­tion for resources between prod­uct groups was some­times coun­ter­pro­duc­tive. Some­times it gets down­right ugly. As I’m just on the periph­ery it’s been hard to get the big pic­ture and fully form my opin­ions as to exactly what’s going on. Here’s an arti­cle by a for­mer Microsoft employee that paints the big pic­ture quite well.

http://www.nytimes.com/2010/02/04/opinion/04brass.html

My hope is that Microsoft will change. I’ve met some bril­liant peo­ple dur­ing my vis­its there. Because they are stuck in a silo most of their ideas seem to fall by the way­side or when imple­mented get changed so much in order to get accepted by the other silos they bear lit­tle resem­b­lence to the orig­i­nal idea. I think Microsoft realises this and is strug­gling to change. Let’s hope it hap­pens. Despite Microsoft’s many detrac­tors I believe they were at one time an inno­v­a­tive leader of the com­puter indus­try and did much more good than harm.

Update: Here’s Microsoft’s response.

http://blogs.technet.com/microsoft_blog/archive/2010/02/04/measuring-our-work-by-its-broad-impact.aspx