locked
Problems with installing exchange during sequencing RRS feed

  • Question

  • Hello,

    I am trying to sequence the exchange management console 2010 using App-V. I end up getting the following error during installation

    "$error.clear set- local permissions was run: attempted to perform an unauthorized operation"

    details from the exchange log

    [06/04/2012 14:29:21.0219] [1] Setup has finished updating MFL files.
    [06/04/2012 14:29:21.0219] [1] Ending processing install-Languages
    [06/04/2012 14:29:21.0235] [0] **************
    [06/04/2012 14:29:21.0235] [0] Setup will run the task 'Install-AdminToolsRole'
    [06/04/2012 14:29:21.0235] [1] Setup launched task 'Install-AdminToolsRole -DomainController '*******************' -updatesdir 'D:\Updates''  
    [06/04/2012 14:29:21.0250] [1] Active Directory session settings for 'Install-AdminToolsRole' are: View Entire Forest: 'True', Configuration Domain Controller: '*******************', Preferred Global Catalog: '*******************', Preferred Domain Controllers: '{ ******************* }'
    [06/04/2012 14:29:21.0250] [1] Beginning processing Install-AdminToolsRole -DomainController:'*******************' -UpdatesDir:'D:\Updates'
    [06/04/2012 14:29:21.0329] [1] Attempting Install for AdminToolsRole.
    [06/04/2012 14:29:21.0344] [1] The following roles are installed:
    [06/04/2012 14:29:21.0344] [1] The following roles are current:
    [06/04/2012 14:29:24.0735] [1] Reading components for the role 'AdminToolsRole' from 'res://AdminToolsRoleDefinition.xml'
    [06/04/2012 14:29:24.0766] [1] Found 5 components
    [06/04/2012 14:29:24.0766] [1] Loaded component 'All Roles Common First - Run Once' with 2 task information blocks from 'res://AllRolesCommonFirst_RunOnce.xml'
    [06/04/2012 14:29:24.0766] [1] Loaded component 'All Roles Common First' with 8 task information blocks from 'res://AllRolesCommonFirst.xml'
    [06/04/2012 14:29:24.0829] [1] Loaded component 'Datacenter File Copy Component' with 1 task information blocks from 'res://DatacenterFileCopyComponent.xml'
    [06/04/2012 14:29:24.0844] [1] Loaded component 'Datacenter Admin Tools Component' with 1 task information blocks from 'res://DatacenterAdminToolsComponent.xml'
    [06/04/2012 14:29:24.0844] [1] Loaded component 'All Roles Common Last' with 6 task information blocks from 'res://AllRolesCommonLast.xml'
    [06/04/2012 14:29:24.0860] [1] Adding unique component 'All Roles Common First - Run Once'
    [06/04/2012 14:29:24.0860] [1] Adding 'All Roles Common First' because it's marked AlwaysExecute.
    [06/04/2012 14:29:24.0860] [1] Adding 'Datacenter File Copy Component' because it's marked AlwaysExecute.
    [06/04/2012 14:29:24.0860] [1] Adding unique component 'Datacenter Admin Tools Component'
    [06/04/2012 14:29:24.0860] [1] Adding 'All Roles Common Last' because it's marked AlwaysExecute.
    [06/04/2012 14:29:25.0172] [1] The following roles are installed:
    [06/04/2012 14:29:25.0172] [1] Loaded 7 parameters from the configuration file "C:\Windows\Temp\ExchangeSetup\bin\EnterpriseServiceEndpointsConfig.xml".
    [06/04/2012 14:29:25.0172] [1] Writing informational script to 'C:\ExchangeSetupLogs\Install-AdminToolsRole-20120604-10292501721824684767.ps1'
    [06/04/2012 14:29:25.0172] [1] Executing: $RoleBinPath = 'Q:\EMC2010\Bin'
    [06/04/2012 14:29:25.0172] [1] Executing: $RoleDatacenterPath = 'Q:\EMC2010\Datacenter'
    [06/04/2012 14:29:25.0172] [1] Executing: $RoleDatacenterServiceEndpointABCHContactService = '<ServiceEndpoint><Url>http://pvt-contacts.msn.com/abservice/abservice.asmx</Url></ServiceEndpoint>'
    [06/04/2012 14:29:25.0172] [1] Executing: $RoleDatacenterServiceEndpointDomainPartnerManageDelegation = '<ServiceEndpoint><Url>https://domains.live.com/service/managedelegation.asmx</Url></ServiceEndpoint>'
    [06/04/2012 14:29:25.0172] [1] Executing: $RoleDatacenterServiceEndpointDomainPartnerManageDelegation2 = '<ServiceEndpoint><Url>https://domains.live.com/service/managedelegation2.asmx</Url></ServiceEndpoint>'
    [06/04/2012 14:29:25.0172] [1] Executing: $RoleDatacenterServiceEndpointLiveFederationMetadata = '<ServiceEndpoint><Url>https://nexus.passport.com/FederationMetadata/2006-12/FederationMetadata.xml</Url></ServiceEndpoint>'
    [06/04/2012 14:29:25.0172] [1] Executing: $RoleDatacenterServiceEndpointLiveGetUserRealm = '<ServiceEndpoint><Url>https://login.live.com/GetUserRealm.srf</Url></ServiceEndpoint>'
    [06/04/2012 14:29:25.0172] [1] Executing: $RoleDatacenterServiceEndpointLiveServiceLogin2 = '<ServiceEndpoint><Url>https://login.live.com/RST2.srf</Url></ServiceEndpoint>'
    [06/04/2012 14:29:25.0188] [1] Executing: $RoleDatacenterServiceEndpointMsoFederationMetadata = '<ServiceEndpoint><Url>https://nexus.microsoftonline-p.com/FederationMetadata/2006-12/FederationMetadata.xml</Url></ServiceEndpoint>'
    [06/04/2012 14:29:25.0188] [1] Executing: $RoleDomainController = '*******************'
    [06/04/2012 14:29:25.0188] [1] Executing: $RoleFqdnOrName = 'AppV2-PC.*******.*******.*******'
    [06/04/2012 14:29:25.0188] [1] Executing: $RoleInstallationMode = 'Install'
    [06/04/2012 14:29:25.0188] [1] Executing: $RoleInstallPath = 'Q:\EMC2010\'
    [06/04/2012 14:29:25.0188] [1] Executing: $RoleInvocationID = '20120604-10292501721824684767'
    [06/04/2012 14:29:25.0188] [1] Executing: $RoleIsDatacenter = $False
    [06/04/2012 14:29:25.0188] [1] Executing: $RoleIsPartnerHosted = $False
    [06/04/2012 14:29:25.0188] [1] Executing: $RoleIsServerSbs = $False
    [06/04/2012 14:29:25.0188] [1] Executing: $RoleLanguagePacksPath = 'D:\'
    [06/04/2012 14:29:25.0188] [1] Executing: $RoleLoggedOnUser = '*******\user1'
    [06/04/2012 14:29:25.0188] [1] Executing: $RoleLoggingPath = 'Q:\EMC2010\Logging'
    [06/04/2012 14:29:25.0188] [1] Executing: $RoleNetBIOSName = 'AppV2-PC'
    [06/04/2012 14:29:25.0188] [1] Executing: $RolePreviousVersion = $null
    [06/04/2012 14:29:25.0204] [1] Executing: $RoleProductPlatform = 'amd64'
    [06/04/2012 14:29:25.0204] [1] Executing: $RoleRoleName = 'AdminToolsRole'
    [06/04/2012 14:29:25.0204] [1] Executing: $RoleSetupLoggingPath = 'C:\ExchangeSetupLogs'
    [06/04/2012 14:29:25.0204] [1] Executing: $RoleTargetVersion = '14.01.0218.015'
    [06/04/2012 14:29:25.0204] [1] Executing: $RoleUpdatesDir = 'D:\Updates'
    [06/04/2012 14:29:25.0204] [1] 12 tasks were found to execute.
    [06/04/2012 14:29:25.0204] [1] Processing component 'All Roles Common First - Run Once' (Configuring the server.).
    [06/04/2012 14:29:25.0204] [1] Executing:
              Set-WERRegistryMarkers;
            
    [06/04/2012 14:29:25.0204] [2] Active Directory session settings for 'Set-WERRegistryMarkers' are: View Entire Forest: 'True', Configuration Domain Controller: '*******************', Preferred Global Catalog: '*******************', Preferred Domain Controllers: '{ ******************* }'
    [06/04/2012 14:29:25.0204] [2] Beginning processing Set-WERRegistryMarkers
    [06/04/2012 14:29:26.0610] [2] Ending processing Set-WERRegistryMarkers
    [06/04/2012 14:29:26.0610] [1] Executing:
              Set-EnvironmentVariable -Name "ExchangeInstallPath" -Value "$RoleInstallPath" -Target Machine;
            
    [06/04/2012 14:29:26.0625] [2] Active Directory session settings for 'Set-EnvironmentVariable' are: View Entire Forest: 'True', Configuration Domain Controller: '*******************', Preferred Global Catalog: '*******************', Preferred Domain Controllers: '{ ******************* }'
    [06/04/2012 14:29:26.0625] [2] Beginning processing Set-EnvironmentVariable -Name:'ExchangeInstallPath' -Value:'Q:\EMC2010\' -Target:'Machine'
    [06/04/2012 14:29:26.0704] [2] Ending processing Set-EnvironmentVariable
    [06/04/2012 14:29:26.0704] [1] Processing component 'All Roles Common First' (Creating the Exchange server configuration object in Active Directory.).
    [06/04/2012 14:29:26.0704] [1] Executing:
              & $RoleBinPath\ServiceControl.ps1 EnableServices $RoleRoleName.Replace('Role','')
            
    [06/04/2012 14:29:26.0766] [2] [ServiceControl.ps1] -----------------------------------------------
    [06/04/2012 14:29:26.0782] [2] [ServiceControl.ps1] * ServiceControl.ps1: 6/4/2012 10:29:26 AM
    [06/04/2012 14:29:26.0782] [2] [ServiceControl.ps1] Performing service control with options:
    [06/04/2012 14:29:26.0782] [2] [ServiceControl.ps1] AdminTools is a known role
    [06/04/2012 14:29:26.0797] [2] [ServiceControl.ps1] Will enable services for the roles: AdminTools.
    [06/04/2012 14:29:26.0797] [2] [ServiceControl.ps1] Enabling services for 'AdminTools'...
    [06/04/2012 14:29:26.0797] [2] [ServiceControl.ps1] Service registry data file not present: C:\ExchangeSetupLogs\ServiceStartupMode14.01.0218.015.xml
    [06/04/2012 14:29:26.0844] [2] [ServiceControl.ps1] Enabling service 'RemoteRegistry'.
    [06/04/2012 14:29:26.0860] [2] [WARNING] 'RemoteRegistry' did not exist, this is not an error as the sevice might have just been installed
    [06/04/2012 14:29:26.0860] [2] [ServiceControl.ps1] Enabling service 'WinMgmt'.
    [06/04/2012 14:29:26.0860] [2] [WARNING] 'WinMgmt' did not exist, this is not an error as the sevice might have just been installed
    [06/04/2012 14:29:26.0860] [2] [ServiceControl.ps1] Script completed succesfully.
    [06/04/2012 14:29:26.0875] [1] Executing:
              if ($RoleRoles)
              {
                & $RoleBinPath\ServiceControl.ps1 EnableServices $RoleRoles.Replace('Role','').Split(',')
              }
            
    [06/04/2012 14:29:26.0875] [1] Executing:
        Start-SetupService -ServiceName RemoteRegistry


    [06/04/2012 14:29:26.0875] [2] Active Directory session settings for 'start-SetupService' are: View Entire Forest: 'True', Configuration Domain Controller: '*******************', Preferred Global Catalog: '*******************', Preferred Domain Controllers: '{ ******************* }'
    [06/04/2012 14:29:26.0875] [2] Beginning processing Start-SetupService -ServiceName:'RemoteRegistry'
    [06/04/2012 14:29:26.0875] [2] Ending processing Start-SetupService
    [06/04/2012 14:29:26.0875] [1] Executing:
              if(Get-Service winmgmt* | ?{ $_.Name -ieq "winmgmt" })
              {
                Start-SetupService -ServiceName winmgmt
              }
            
    [06/04/2012 14:29:26.0891] [2] Active Directory session settings for 'start-SetupService' are: View Entire Forest: 'True', Configuration Domain Controller: '*******************', Preferred Global Catalog: '*******************', Preferred Domain Controllers: '{ ******************* }'
    [06/04/2012 14:29:26.0891] [2] Beginning processing Start-SetupService -ServiceName:'winmgmt'
    [06/04/2012 14:29:26.0891] [2] Ending processing Start-SetupService
    [06/04/2012 14:29:26.0891] [1] Executing:
        Set-LocalPermissions


    [06/04/2012 14:29:26.0938] [2] Active Directory session settings for 'Set-LocalPermissions' are: View Entire Forest: 'True', Configuration Domain Controller: '*******************', Preferred Global Catalog: '*******************', Preferred Domain Controllers: '{ ******************* }'
    [06/04/2012 14:29:26.0938] [2] Beginning processing Set-LocalPermissions
    [06/04/2012 14:29:27.0204] [2] [ERROR] Unexpected Error
    [06/04/2012 14:29:27.0266] [2] [ERROR] Attempted to perform an unauthorized operation.
    [06/04/2012 14:29:27.0313] [2] Ending processing Set-LocalPermissions
    [06/04/2012 14:29:27.0313] [1] The following 1 error(s) occurred during task execution:
    [06/04/2012 14:29:27.0313] [1] 0.  ErrorRecord: Attempted to perform an unauthorized operation.
    [06/04/2012 14:29:27.0313] [1] 0.  ErrorRecord: System.UnauthorizedAccessException: Attempted to perform an unauthorized operation.
       at System.Security.AccessControl.Win32.SetSecurityInfo(ResourceType type, String name, SafeHandle handle, SecurityInfos securityInformation, SecurityIdentifier owner, SecurityIdentifier group, GenericAcl sacl, GenericAcl dacl)
       at System.Security.AccessControl.NativeObjectSecurity.Persist(String name, SafeHandle handle, AccessControlSections includeSections, Object exceptionContext)
       at System.Security.AccessControl.NativeObjectSecurity.Persist(String name, AccessControlSections includeSections, Object exceptionContext)
       at System.Security.AccessControl.FileSystemSecurity.Persist(String fullPath)
       at Microsoft.Exchange.Management.Deployment.SetLocalPermissions.SetDirectorySecurity(String path, DirectorySecurity directorySecurity)
       at Microsoft.Exchange.Management.Deployment.SetLocalPermissions.ChangePermissions[TTarget,TSecurity,TAccessRule,TRights](XmlNode targetNode, Dictionary`2 rightsDictionary, GetTarget`1 getTarget, GetOrginalPermissionsOnTarget`2 getOrginalPermissionsOnTarget, SetPermissionsOnTarget`2 setPermissionsOnTarget, CreateAccessRule`2 createAccessRule, AddAccessRule`2 addAccessRule, RemoveAccessRuleAll`1 removeAccessRuleAll)
       at Microsoft.Exchange.Management.Deployment.SetLocalPermissions.SetPermissionsOnCurrentLevel[TTarget,TSecurity,TAccessRule,TRights](XmlNode permissionSetNode, String targetType, Dictionary`2 rightsDictionary, GetTarget`1 getTarget, GetOrginalPermissionsOnTarget`2 getOrginalPermissionsOnTarget, SetPermissionsOnTarget`2 setPermissionsOnTarget, CreateAccessRule`2 createAccessRule, AddAccessRule`2 addAccessRule, RemoveAccessRuleAll`1 removeAccessRuleAll)
       at Microsoft.Exchange.Management.Deployment.SetLocalPermissions.SetPermissionsOnCurrentLevel(XmlNode permissionSetNode)
       at Microsoft.Exchange.Management.Deployment.SetLocalPermissions.InternalProcessRecord()
    [06/04/2012 14:29:27.0313] [1] [ERROR] The following error was generated when "$error.Clear();
        Set-LocalPermissions

    " was run: "Attempted to perform an unauthorized operation.".
    [06/04/2012 14:29:27.0313] [1] [ERROR] Attempted to perform an unauthorized operation.
    [06/04/2012 14:29:27.0313] [1] [ERROR-REFERENCE] Id=AllRolesCommonFirst___00573a17b6e34c26842a6646830d57fa Component=EXCHANGE14:\Current\Release\Shared\Datacenter\Setup
    [06/04/2012 14:29:27.0313] [1] Setup is stopping now because of one or more critical errors.
    [06/04/2012 14:29:27.0313] [1] Finished executing component tasks.
    [06/04/2012 14:29:27.0407] [1] Ending processing Install-AdminToolsRole
    [06/04/2012 14:29:27.0407] [0] The Exchange Server setup operation didn't complete.  More details can be found in ExchangeSetup.log located in the <SystemDrive>:\ExchangeSetupLogs folder.
    [06/04/2012 14:29:27.0422] [0] End of Setup
    [06/04/2012 14:29:27.0422] [0] **********************************************

    Monday, June 4, 2012 3:03 PM

Answers

All replies

  • Did you ensure all pre-requisites were taken care of on the sequencing machine before you started? Did you run the installation as Admin?

    PLEASE MARK ANY ANSWERS TO HELP OTHERS Blog: rorymon.com Twitter: @Rorymon

    • Marked as answer by JoshC703 Monday, June 4, 2012 5:42 PM
    • Unmarked as answer by JoshC703 Monday, June 4, 2012 5:42 PM
    Monday, June 4, 2012 5:40 PM
  • Did you ensure all pre-requisites were taken care of on the sequencing machine before you started? Did you run the installation as Admin?

    PLEASE MARK ANY ANSWERS TO HELP OTHERS Blog: rorymon.com Twitter: @Rorymon

    Yes, Actually I run a Batch file to kick off the installation (D:\setup.com /R:MT /TargetDir:Q:\EMC2010\) and it works fine when i run without the sequencer, but if the sequencer is running i get that same local permissions error every time, and that is after all the prereqs are met.


    • Edited by JoshC703 Monday, June 4, 2012 5:47 PM spelling
    Monday, June 4, 2012 5:45 PM
  • I'll check my notes tomorrow when I get into office but I did install Office 2010 tools. I did not do it though a batch file and also I installed it to the C:\

    I forget the exact pre-reqs. I think I needed to install IIS or enable something else on the sequencing machine before I began.... I'll try and get a more exact answer tomorrow.


    PLEASE MARK ANY ANSWERS TO HELP OTHERS Blog: rorymon.com Twitter: @Rorymon

    Tuesday, June 5, 2012 1:05 AM
  • Okay, I appreciate the help
    Tuesday, June 5, 2012 1:06 AM
  • If it works without a sequencer and not when you sequence, try with a sequencer that doesn't have any windows updates installed.
    I have the same problem all the time, which is why I have a dedicated sequencer without updates that is never updated. 

    Tuesday, June 5, 2012 5:07 AM
  • Hello,

    See these links for Exchange Management Tools 2007 - some knowledge may be applicable for the new version

    http://www.ingmarverheij.com/2009/01/exchange-2007-management-tools-sequence/

    http://zenshaze.com/wp/?p=296


    Nicke Källén | The Knack| Twitter: @Znackattack

    • Marked as answer by JoshC703 Monday, June 11, 2012 11:47 AM
    Monday, June 11, 2012 6:36 AM
  • Nicke,

    The second link is very close to the process you have to follow.

    Monday, June 11, 2012 11:49 AM