none
Set-OrganizationConfig -DomainController Fails (Attribute Not Legal For Class) RRS feed

  • Question

  • While installing the Mailbox Role I get the below error installing Mailbox Service. I cannot find any logs that point to the object that needs to be updated or what attribute it is.

    Is the source code for this command viewable to see what Attribute is trying to be updated and on what object?

    Prepare Schema and PrepareAD both ran successfully. CAS Role is already installed.

    Error:
    The following error was generated when "$error.Clear();
              $count=0;
              $ExchangeServers = Get-ExchangeServer -DomainController $RoleDomainController;

              $minVersion = New-Object -typeName Version -argumentlist "8.0.642.0";

              foreach ($server in  $ExchangeServers)
              {
                $currentVersion = [Version]$server.AdminDisplayVersion;
                if (($currentVersion -ge $minVersion) -and ($server.IsMailboxServer -eq $true))
                {
                  $count++;
                }
              }

              if ($count -eq 1)
              {
                Set-OrganizationConfig -DomainController $RoleDomainController;
              }
            " was run: "Microsoft.Exchange.Data.Directory.ADOperationException: Active Directory operation failed on DOMAINCONTROLLER. This error is not retriable. Additional information: An attempt was made to modify an object to include an attribute that is not legal for its class.
    Active directory response: 0000207D: UpdErr: DSID-031517D5, problem 6002 (OBJ_CLASS_VIOLATION), data 1376259
     ---> System.DirectoryServices.Protocols.DirectoryOperationException: An object class violation occurred.
       at System.DirectoryServices.Protocols.LdapConnection.ConstructResponse(Int32 messageId, LdapOperation operation, ResultAll resultType, TimeSpan requestTimeOut, Boolean exceptionOnTimeOut)
       at System.DirectoryServices.Protocols.LdapConnection.SendRequest(DirectoryRequest request, TimeSpan requestTimeout)
       at Microsoft.Exchange.Data.Directory.PooledLdapConnection.SendRequest(DirectoryRequest request, LdapOperation ldapOperation, Nullable`1 clientSideSearchTimeout, IActivityScope activityScope, String callerInfo)
       at Microsoft.Exchange.Data.Directory.ADDataSession.ExecuteModificationRequest(ADObject entry, DirectoryRequest request, ADObjectId originalId, Boolean emptyObjectSessionOnException, Boolean isSync)
       --- End of inner exception stack trace ---
       at Microsoft.Exchange.Data.Directory.ADDataSession.AnalyzeDirectoryError(PooledLdapConnection connection, DirectoryRequest request, DirectoryException de, Int32 totalRetries, Int32 retriesOnServer)
       at Microsoft.Exchange.Data.Directory.ADDataSession.ExecuteModificationRequest(ADObject entry, DirectoryRequest request, ADObjectId originalId, Boolean emptyObjectSessionOnException, Boolean isSync)
       at Microsoft.Exchange.Data.Directory.ADDataSession.Save(ADObject instanceToSave, IEnumerable`1 properties, Boolean bypassValidation)
       at Microsoft.Exchange.Data.Directory.Recipient.ADRecipientObjectSession.Save(ADRecipient instanceToSave)
       at Microsoft.Exchange.Management.SystemConfigurationTasks.SetOrganizationConfig.InternalProcessRecord()
       at Microsoft.Exchange.Configuration.Tasks.Task.<ProcessRecord>b__b()
       at Microsoft.Exchange.Configuration.Tasks.Task.InvokeRetryableFunc(String funcName, Action func, Boolean terminatePipelineIfFailed)".

    Sunday, October 27, 2019 8:29 PM

All replies