Hi everyone,
Trying to upgrade our Exchange 2013 SP1 to CU22, need help with the error quoted below.
Is it safe to delete the account Exchange Online-ApplicationAccount in AD?
We have a closed environment here.
Appreciate for any help or suggestion in advance.
------------------------------------------------------------------------------------------------------------------------------
[03/16/2019 07:45:21.0601] [2] Preparing to output objects. The maximum size of the result set is "Unlimited".[03/16/2019 07:45:21.0601] [2] Ending processing Get-ManagementRoleAssignment
[03/16/2019 07:45:21.0601] [1] The following 1 error(s) occurred during task execution:
[03/16/2019 07:45:21.0601] [1] 0. ErrorRecord: Active Directory operation failed on Server.Domain.SG.LOCAL. The object 'CN=Exchange Online-ApplicationAccount,CN=Users,DC=DOMAIN,DC=SG,DC=LOCAL' already exists.
[03/16/2019 07:45:21.0601] [1] 0. ErrorRecord: Microsoft.Exchange.Data.Directory.ADObjectAlreadyExistsException: Active Directory operation failed on Server.Domain.SG.LOCAL. The object 'CN=Exchange Online-ApplicationAccount,CN=Users,DC=DOMAIN,DC=SG,DC=LOCAL' already exists. ---> System.DirectoryServices.Protocols.DirectoryOperationException: The object exists.
at System.DirectoryServices.Protocols.LdapConnection.ConstructResponse(Int32 messageId, LdapOperation operation, ResultAll resultType, TimeSpan requestTimeOut, Boolean exceptionOnTimeOut)
at System.DirectoryServices.Protocols.LdapConnection.SendRequest(DirectoryRequest request, TimeSpan requestTimeout)
at Microsoft.Exchange.Data.Directory.PooledLdapConnection.SendRequest(DirectoryRequest request, LdapOperation ldapOperation, Nullable`1 clientSideSearchTimeout, IActivityScope activityScope, String callerInfo)
at Microsoft.Exchange.Data.Directory.ADDataSession.ExecuteModificationRequest(ADObject entry, DirectoryRequest request, ADObjectId originalId, Boolean emptyObjectSessionOnException, Boolean isSync)
--- End of inner exception stack trace ---
at Microsoft.Exchange.Data.Directory.ADDataSession.AnalyzeDirectoryError(PooledLdapConnection connection, DirectoryRequest request, DirectoryException de, Int32 totalRetries, Int32 retriesOnServer)
at Microsoft.Exchange.Data.Directory.ADDataSession.ExecuteModificationRequest(ADObject entry, DirectoryRequest request, ADObjectId originalId, Boolean emptyObjectSessionOnException, Boolean isSync)
at Microsoft.Exchange.Data.Directory.ADDataSession.Save(ADObject instanceToSave, IEnumerable`1 properties, Boolean bypassValidation)
at Microsoft.Exchange.Data.Directory.Recipient.ADRecipientObjectSession.Save(ADRecipient instanceToSave)
at Microsoft.Exchange.Configuration.Tasks.SetTaskBase`1.InternalProcessRecord()
at Microsoft.Exchange.Configuration.Tasks.NewTaskBase`1.InternalProcessRecord()
at Microsoft.Exchange.Configuration.Tasks.NewADTaskBase`1.InternalProcessRecord()
at Microsoft.Exchange.Management.RecipientTasks.NewLinkedUser.InternalProcessRecord()
at Microsoft.Exchange.Configuration.Tasks.Task.ProcessRecord()
[03/16/2019 07:45:21.0601] [1] [ERROR] The following error was generated when "$error.Clear();
#
# O15# 2844081 - Create PartnerApplication "Exchange Online" in DC and On-Premise
#
$exch = [Microsoft.Exchange.Data.Directory.SystemConfiguration.WellknownPartnerApplicationIdentifiers]::Exchange;
$exchApp = Get-PartnerApplication $exch -ErrorAction SilentlyContinue -DomainController $RoleDomainController | Where { $_.UseAuthServer };
if ($exchApp -eq $null)
{
$exchAppName = "Exchange Online";
$exchApp = New-PartnerApplication -Name $exchAppName -ApplicationIdentifier $exch -Enabled $RoleIsDatacenter -AcceptSecurityIdentifierInformation $false -DomainController $RoleDomainController;
}
# Create application account for Exchange
$appAccountName = $exchApp.Name + "-ApplicationAccount";
$appAccount = Get-LinkedUser -Identity $appAccountName -ErrorAction SilentlyContinue -DomainController $RoleDomainController;
if ($appAccount -eq $null)
{
$appAccountUpn = $appAccountName.Replace(" ", "_") + "@" + $RoleFullyQualifiedDomainName;
$appAccount = New-LinkedUser -Name $appAccountName -UserPrincipalName $appAccountUpn -DomainController $RoleDomainController;
Set-PartnerApplication -Identity $exchApp.Identity -LinkedAccount $appAccount.Identity -DomainController $RoleDomainController;
}
foreach ($roleName in ("UserApplication", "ArchiveApplication", "LegalHoldApplication", "Mailbox Search", "TeamMailboxLifecycleApplication", "MailboxSearchApplication"))
{
$roleIdentity = Get-ManagementRole $roleName -DomainController $RoleDomainController;
$roleAssignment = Get-ManagementRoleAssignment -Role $roleIdentity.Identity -RoleAssignee $appAccount.Identity -DomainController $RoleDomainController;
if ($roleAssignment -eq $null)
{
New-ManagementRoleAssignment -Role $roleName -User $appAccount.Identity -DomainController $RoleDomainController;
}
}
" was run: "Active Directory operation failed on Server.Domain.SG.LOCAL. The object 'CN=Exchange Online-ApplicationAccount,CN=Users,DC=DOMAIN,DC=SG,DC=LOCAL' already exists.".
[03/16/2019 07:45:21.0617] [1] [ERROR] Active Directory operation failed on Server.Domain.SG.LOCAL. The object 'CN=Exchange Online-ApplicationAccount,CN=Users,DC=DOMAIN,DC=SG,DC=LOCAL' already exists.
[03/16/2019 07:45:21.0617] [1] [ERROR] The object exists.
[03/16/2019 07:45:21.0617] [1] [ERROR-REFERENCE] Id=CommonGlobalConfig___907E0EE000AB4117A05F237A81E53AA2 Component=EXCHANGE14:\Current\Release\Shared\Datacenter\Setup
[03/16/2019 07:45:21.0617] [1] Setup is stopping now because of one or more critical errors.
[03/16/2019 07:45:21.0617] [1] Finished executing component tasks.
[03/16/2019 07:45:21.0633] [1] Ending processing Install-ExchangeOrganization
-----------------------------------------------------------------------------------------------------------------------------------------------------------------