DAG File Share Witness Permissions

Status
Not open for further replies.
R

RBUK

We are in the process of doing a fresh install of Exchange 2010 in a newly built AD Domain and are running into problems with creating a DAG using a File Share Witness.

We have added the Exchange Trusted Subsystem to the local administrators group on the FSW server (this isn't a domain controller).

When trying to create the DAG we get an error saying that the Exchange group isn't a member of local administrators, when it is!! We can even do remote computer management from the Exchange Server back to the FSW server and verify from there that the Exchange Trusted Subsystem universal group has been added to the local administrators group on the FSW server. As a consequence of this, Exchange cannot create the FSW shared folder and errors.

All servers can ping each other etc and are able to query Active Directory. However, for some reason the Exchange servers cannot verify that the Exchange Trusted Subsystem group is a member of the local admin group on the FSW server.

Any helpful pointers would be gratefully received!
 
C

Chinthaka Shameera

Hello,

I have faced for the same problem with the same error on virtual Labs (hyper-v). But I was able to continue the DAG creating process and abled to finish. I noticed the file share had created in the witness server after creating the DAG. Failover process also worked as charm. So i suggest to create the DAG and see whether File share created or not.

Regards

Chinthaka Shameera | MCITP: EA | MCSE: M | http://howtoexchange.wordpress.com/
 
J

James-Luo

Could you provide the exact error information?

Please also check the DAG log

Location: %SystemDrive%\ExchangeSetupLogs\DagTasks

Format: dagtask_<Date>_<Time>_<Task name>.log

James Luo

 
M

Michel de Rooij

Verify the FSW is created and assuming you've added the ETS account to the local admins group on the server hosting the FSW you should be good. Try set-databaseavailabilitygroup DAG -witnessserver SERVER &ndash; witnessdirectory FOLDER; if you receive any warnings or errors regarding permissions etc.

Also look here for manually creating the FSW:
http://www.thecabal.org/2010/08/manually-creating-a-dag-fsw-for-exchange-2010/

In addition, also see this topic:
http://social.technet.microsoft.com/Forums/en-US/exchange2010/thread/64d461c9-1e39-49a7-8bf1-14e540d51976
Michel de Rooij,
MCITP Ent.Msg 2007+2010| MCTS W2008, Ex2007+2010 Conf, OCS2007 Conf | MCSE+Msg2k3 | MCSE+Inet2k3 | Prince2 Fnd | ITIL
I blog on http://eightwone.wordpress.com/ and tweet on http://twitter.com/mderooijMichel de Rooij,
MCITP Ent.Msg 2007+2010| MCTS W2008, Ex2007+2010 Conf, OCS2007 Conf | MCSE+Msg2k3 | MCSE+Inet2k3 | Prince2 Fnd | ITIL
I blog on http://eightwone.wordpress.com/ and tweet on http://twitter.com/mderooij
 
Status
Not open for further replies.
Top