Asked by:
Problème Installation Exchange 2016 CU 17

Question
-
Bonjour,
Je suis actuellement entrain de déployer un Exchange 2016 CU17 et je rencontre un grosse erreur qui évidemment en entraîne d'autres en plus...
Beginning processing Write-ExchangeSetupLog Waiting 30 seconds before attempting again. Ending processing Write-ExchangeSetupLog Les paramètres de la session Active Directory pour 'Set-SharedConfigDC' sont les suivants : Afficher la forêt entière : 'True', Configuration du contrôleur de domaine : « AD.DOMAINE », Catalogue global préféré : « AD.DOMAINE », Contrôleurs de domaine préférés : « { AD.DOMAINE } » User specified parameters: -DomainController:'AD.DOMAINE' -ErrorVariable:'setSharedCDCErrors' -ErrorAction:'SilentlyContinue' Beginning processing Set-SharedConfigDC The call to Microsoft Exchange Active Directory Topology service on server 'TopologyClientTcpEndpoint (localhost)' timed out. Error details Cette opération de demande envoyée à net.tcp://localhost:890/Microsoft.Exchange.Directory.TopologyService n'a pas reçu de réponse dans le délai imparti (00:02:00). Le temps alloué à cette opération fait peut-être partie d'un délai d'attente plus long. Ceci peut être dû au fait que le service est toujours en cours de traitement de l'opération ou qu'il n'a pas pu envoyer un message de réponse. Envisagez d'augmenter le délai d'attente de l'opération (en diffusant le canal/proxy vers IContextChannel et en définissant la propriété OperationTimeout) et vérifiez que le service peut se connecter au client. Cette opération de demande envoyée à net.tcp://localhost:890/Microsoft.Exchange.Directory.TopologyService n'a pas reçu de réponse dans le délai imparti (00:02:00). Le temps alloué à cette opération fait peut-être partie d'un délai d'attente plus long. Ceci peut être dû au fait que le service est toujours en cours de traitement de l'opération ou qu'il n'a pas pu envoyer un message de réponse. Envisagez d'augmenter le délai d'attente de l'opération (en diffusant le canal/proxy vers IContextChannel et en définissant la propriété OperationTimeout) et vérifiez que le service peut se connecter au client. The call to Microsoft Exchange Active Directory Topology service on server 'TopologyClientTcpEndpoint (localhost)' timed out. Error details Cette opération de demande envoyée à net.tcp://localhost:890/Microsoft.Exchange.Directory.TopologyService n'a pas reçu de réponse dans le délai imparti (00:02:00). Le temps alloué à cette opération fait peut-être partie d'un délai d'attente plus long. Ceci peut être dû au fait que le service est toujours en cours de traitement de l'opération ou qu'il n'a pas pu envoyer un message de réponse. Envisagez d'augmenter le délai d'attente de l'opération (en diffusant le canal/proxy vers IContextChannel et en définissant la propriété OperationTimeout) et vérifiez que le service peut se connecter au client. Cette opération de demande envoyée à net.tcp://localhost:890/Microsoft.Exchange.Directory.TopologyService n'a pas reçu de réponse dans le délai imparti (00:02:00). Le temps alloué à cette opération fait peut-être partie d'un délai d'attente plus long. Ceci peut être dû au fait que le service est toujours en cours de traitement de l'opération ou qu'il n'a pas pu envoyer un message de réponse. Envisagez d'augmenter le délai d'attente de l'opération (en diffusant le canal/proxy vers IContextChannel et en définissant la propriété OperationTimeout) et vérifiez que le service peut se connecter au client. Ending processing Set-SharedConfigDC Cette opération de demande envoyée à net.tcp://localhost:890/Microsoft.Exchange.Directory.TopologyService n'a pas reçu de réponse dans le délai imparti (00:02:00). Le temps alloué à cette opération fait peut-être partie d'un délai d'attente plus long. Ceci peut être dû au fait que le service est toujours en cours de traitement de l'opération ou qu'il n'a pas pu envoyer un message de réponse. Envisagez d'augmenter le délai d'attente de l'opération (en diffusant le canal/proxy vers IContextChannel et en définissant la propriété OperationTimeout) et vérifiez que le service peut se connecter au client. The call to Microsoft Exchange Active Directory Topology service on server 'TopologyClientTcpEndpoint (localhost)' timed out. Error details Cette opération de demande envoyée à net.tcp://localhost:890/Microsoft.Exchange.Directory.TopologyService n'a pas reçu de réponse dans le délai imparti (00:02:00). Le temps alloué à cette opération fait peut-être partie d'un délai d'attente plus long. Ceci peut être dû au fait que le service est toujours en cours de traitement de l'opération ou qu'il n'a pas pu envoyer un message de réponse. Envisagez d'augmenter le délai d'attente de l'opération (en diffusant le canal/proxy vers IContextChannel et en définissant la propriété OperationTimeout) et vérifiez que le service peut se connecter au client. Ending processing Set-SharedConfigDC Beginning processing Write-ExchangeSetupLog An error ocurred while setting shared config DC. Error: L'appel au service de topologie Active Directory de Microsoft Exchange sur le serveur 'TopologyClientTcpEndpoint (localhost)' a expiré. Détails de l'erreur Cette opération de demande envoyée à net.tcp://localhost:890/Microsoft.Exchange.Directory.TopologyService n'a pas reçu de réponse dans le délai imparti (00:02:00). Le temps alloué à cette opération fait peut-être partie d'un délai d'attente plus long. Ceci peut être dû au fait que le service est toujours en cours de traitement de l'opération ou qu'il n'a pas pu envoyer un message de réponse. Envisagez d'augmenter le délai d'attente de l'opération (en diffusant le canal/proxy vers IContextChannel et en définissant la propriété OperationTimeout) et vérifiez que le service peut se connecter au client.. Ending processing Write-ExchangeSetupLog Beginning processing Write-ExchangeSetupLog Waiting 30 seconds before attempting again. Ending processing Write-ExchangeSetupLog Beginning processing Write-ExchangeSetupLog [ERROR] Unable to set shared config DC. [ERROR] Unable to set shared config DC. Ending processing Write-ExchangeSetupLog The following 1 error(s) occurred during task execution: 0. ErrorRecord: Unable to set shared config DC. 0. ErrorRecord: System.Exception: Unable to set shared config DC. à Microsoft.Exchange.Configuration.Tasks.Task.ThrowError(Exception exception, ErrorCategory errorCategory, Object target, String helpUrl) à Microsoft.Exchange.Management.Deployment.WriteExchangeSetupLog.InternalProcessRecord() à Microsoft.Exchange.Configuration.Tasks.Task.<ProcessRecord>b__91_1() à Microsoft.Exchange.Configuration.Tasks.Task.InvokeRetryableFunc(String funcName, Action func, Boolean terminatePipelineIfFailed) [ERROR] The following error was generated when "$error.Clear(); $maxWait = New-TimeSpan -Minutes 8 $timeout = Get-Date; $timeout = $timeout.Add($maxWait); $currTime = Get-Date; $successfullySetConfigDC = $false; while($currTime -le $timeout) { $setSharedCDCErrors = @(); try { Set-SharedConfigDC -DomainController $RoleDomainController -ErrorVariable setSharedCDCErrors -ErrorAction SilentlyContinue; $successfullySetConfigDC = ($setSharedCDCErrors.Count -eq 0); if($successfullySetConfigDC) { break; } Write-ExchangeSetupLog -Info ("An error ocurred while setting shared config DC. Error: " + $setSharedCDCErrors[0]); } catch { Write-ExchangeSetupLog -Info ("An exception ocurred while setting shared config DC. Exception: " + $_.Exception.Message); } Write-ExchangeSetupLog -Info ("Waiting 30 seconds before attempting again."); Start-Sleep -Seconds 30; $currTime = Get-Date; } if( -not $successfullySetConfigDC) { Write-ExchangeSetupLog -Error "Unable to set shared config DC."; } " was run: "System.Exception: Unable to set shared config DC. à Microsoft.Exchange.Configuration.Tasks.Task.ThrowError(Exception exception, ErrorCategory errorCategory, Object target, String helpUrl) à Microsoft.Exchange.Management.Deployment.WriteExchangeSetupLog.InternalProcessRecord() à Microsoft.Exchange.Configuration.Tasks.Task.<ProcessRecord>b__91_1() à Microsoft.Exchange.Configuration.Tasks.Task.InvokeRetryableFunc(String funcName, Action func, Boolean terminatePipelineIfFailed)".
Je précise que :
- L'installation plante à l'installation du Rôle TransportHub à 97% (etape 6 je crois)
- L'AD n'est pas connecté directement à l'Exchange car un Firewall physique les sépares (L'Exchange et l'AD sont bien deux machines distinctes), mon Exchange arrive très bien à communiquer avec mon AD (les ports LDAP et DNS sont bien forwardés).
Ces trois lignes ci-dessous me paraissent bien étrange.
Cette opération de demande envoyée à net.tcp://localhost:890/Microsoft.Exchange.Directory.TopologyService n'a pas reçu de réponse dans le délai imparti (00:02:00). Le temps alloué à cette opération fait peut-être partie d'un délai d'attente plus long. Ceci peut être dû au fait que le service est toujours en cours de traitement de l'opération ou qu'il n'a pas pu envoyer un message de réponse. Envisagez d'augmenter le délai d'attente de l'opération (en diffusant le canal/proxy vers IContextChannel et en définissant la propriété OperationTimeout) et vérifiez que le service peut se connecter au client. The call to Microsoft Exchange Active Directory Topology service on server 'TopologyClientTcpEndpoint (localhost)' timed out. Error details Cette opération de demande envoyée à net.tcp://localhost:890/Microsoft.Exchange.Directory.TopologyService n'a pas reçu de réponse dans le délai imparti (00:02:00). Le temps alloué à cette opération fait peut-être partie d'un délai d'attente plus long. Ceci peut être dû au fait que le service est toujours en cours de traitement de l'opération ou qu'il n'a pas pu envoyer un message de réponse. Envisagez d'augmenter le délai d'attente de l'opération (en diffusant le canal/proxy vers IContextChannel et en définissant la propriété OperationTimeout) et vérifiez que le service peut se connecter au client. Ending processing Set-SharedConfigDC
Le serveur Exchange se requête tout seul en localhost:890 ?
J'ai déjà testé beaucoup de solution du WEB mais rien ne résout mon problème. Si un expert passe par là, ça serait avec plaisir !
Je vous remercie par avance.
```
- Edited by Neiluj 111 Wednesday, July 1, 2020 2:33 PM
Wednesday, July 1, 2020 2:30 PM
All replies
-
Hi Neiluj,
Good day,
This is an English forum.In order to better solve your problem, please write here in English so that your could get the answers will be faster and more accurate.
Based on the translation of the information you provide, please try to following steps and see if the issue is solved:
1. Please make sure that your DC and Exchange server both enable the IPv6. And make sure the Microsoft Exchange Active Directory Topology service is running on your Exchange server.
2. Please follow steps to change config file:
1) Locate Microsoft.Exchange.Directory.TopologyService.exe.config File , By Default It Should Be Under "C:\Program Files\Microsoft\Exchange Server\V15\Bin"
2) Open NotePad As Administrator & Then Open Microsoft.Exchange.Directory.TopologyService.exe.config File.
3) Locate "Topology MinimumPrefixMatch"
4) Add MinSuitableServer = "1"
5) Save The File & Restart Microsoft Exchange Active Directory Topology Services.
For more information you could refer to:Error "An exception ocurred while setting shared config DC".
3. There may also be this issue caused by GPO permissions. Please added the group “<domain>\Exchange Servers” to the user right assignment “Manage auditing and security log” on the custom GPO with the higher Link Order (precedence) and performing GPO Update on the Domain Controllers.
For more information you could refer to:An exception ocurred while setting shared config DC.
Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
4. About the error “localhost:890”. This error maybe caused by your firewall not opening port 890, which also caused your Microsoft Exchange Active Directory Topology service to stop running. So please check the status of your port.
Regards,
Lucas Liu
Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.
- Proposed as answer by Lucas_ LiuMicrosoft contingent staff Friday, July 3, 2020 8:47 AM
- Unproposed as answer by Neiluj 111 Friday, July 3, 2020 9:34 AM
Thursday, July 2, 2020 5:48 AM -
Hello,
1- My Exchange has IPV6 activated but my DC no. I have FW between them, so i can't let pass IPV6 packet.
2- already tried, no result.
3- I disabled GPO on my Exchange
4- Local FW is disabled
But during checking fw(physical) log i saw that ICMP has been blocked. Does someone know if ICMP is used by Exchange to check if the DC is reachable ?
Thank you.
Friday, July 3, 2020 9:33 AM -
Hi Neiluj,
1. According to my research, the Internet Control Message Protocol (ICMP) is a supporting protocol in the Internet protocol suite. It is used by network devices, including routers, to send error messages and operational information indicating success or failure when communicating with another IP address.
2. You could use the following command in CMD to check the connectivity of Exchange server and DC.
nltest /dsgetdc:
3. I notice that you disable the local firewall, so please try to enable the IPv6 on network adaptor on DC, then restart the computer and try to install Exchange server again.
4. Please make sure the Microsoft Exchange Active Directory Topology service has been running during install Exchange server. If you find it stop, please start the service manually.
Regards,
Lucas Liu
Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.
- Proposed as answer by Lucas_ LiuMicrosoft contingent staff Wednesday, July 8, 2020 9:22 AM
- Unproposed as answer by Neiluj 111 Wednesday, July 8, 2020 2:43 PM
Tuesday, July 7, 2020 8:37 AM -
Hello,
2. I can join my DC with this command
3. I enabled ipv6 and it doesn't work.
4. This service is stuck in "starting" state.
...
- Edited by Neiluj 111 Thursday, July 9, 2020 7:48 AM
Wednesday, July 8, 2020 2:51 PM -
Hi Neiluj,
1. Under normal circumstances, the Microsoft Exchange Active Directory Topology service should be in Running state. Please try to stop it and start it manually after setting the startup type as automatic. And make sure that this service has been running during the installation process, if it stops, please start it manually immediately.
If you still can’t start it , please check if there any error messages pop up or any error message in the Event Viewer. If there is, please share it with us, please note that hide your private information.
Please check if there are other service are not running in the services.
For more information:Overview of Exchange services on Exchange servers.
2. Please make sure that you have met all the prerequisites for installing Exchange, especially the .Net Framework. And also carry out the prepare Schema/AD/domain.
For more information :Exchange Server prerequisites and Prepare Active Directory and domains for Exchange Server.
Regards,
Lucas Liu
Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.
- Proposed as answer by Lucas_ LiuMicrosoft contingent staff Monday, July 13, 2020 8:57 AM
- Unproposed as answer by Neiluj 111 Monday, July 27, 2020 7:47 AM
Friday, July 10, 2020 9:05 AM -
Hello
Tu sais qu'avoir un FW entre ton Exchange et ton AD n'est normalment pas supporté.
Mais je ne dirai rien... on est pareils ici.
Tu devrais vérifier la totalité des ports entre ton/tes Exchange et ton/tes AD.
SI je retrouve la liste de sports nécessaires, je te l'envoie.
In english
You should first check every mandatory ports are allowed (between Exchange and your DC).Florent
Friday, July 10, 2020 11:20 AM -
Hi Neiluj,
Do suggestions above help? If you have any questions or needed further help on this issue, please feel free to post back. If the issue has been resolved, please mark the helpful replies as answers, this will make answer searching in the forum easier.
Thanks for your understanding.
This Exchange Server 2016 - General Discussion Forum will be migrating to a new home on Microsoft Q&A, please refer to this sticky post for more details.
Regards,
Lucas Liu
Exchange Server 2016 - General Discussion forum will be migrating to a new home on Microsoft Q&A! We invite you to post new questions in the new forum.
For more information, please refer to the sticky post.
Wednesday, July 15, 2020 9:53 AM -
Salut,
Merci pour ton retour.
Sais-tu où cette information est mentionné dans les docs Microsoft ?(Ca pourrait bien m'aider)
Rencontres tu la même erreur que moi ?
Merci
In english
Where is mentionned in Microsoft doc that FW between AD and Exchange is not supported ?
Do you expect the same issue as me ?
Monday, July 27, 2020 7:55 AM -
i found this https://techcommunity.microsoft.com/t5/exchange-team-blog/don-039-t-put-cas-in-the-perimeter-network/ba-p/597927 it's pretty interesting.
And if we just want to control flow between AD and Exchange with vm of Firewall, why does it's not supported ?
- Edited by Neiluj 111 Monday, July 27, 2020 3:14 PM
Monday, July 27, 2020 9:13 AM -
Hi Neiluj,
1. About the article you provided, we do not recommend you put the Exchange CAS server in the DMZ. Because of the Exchange CAS servers require full access to all mailboxes in an AD Site, and the Exchange CAS executes a lot of Exchange business logic. If it is placed in the DMZ, it will be easily attacked.
2. According to my research, it supports the deployment of firewalls between Exchange and AD, but there can be no restrictions on the access between Exchange and AD, and all ports required for Exchange communication need to be opened. If improper settings are made, there will be potential impact .
For more information you could refer to:Exchange, Firewalls, and Support.
This Exchange Server 2016 - General Discussion Forum will be migrating to a new home on Microsoft Q&A, please refer to this sticky post for more details.
Regards,
Lucas Liu
Exchange Server 2016 - General Discussion forum will be migrating to a new home on Microsoft Q&A! We invite you to post new questions in the new forum.
For more information, please refer to the sticky post.
Tuesday, July 28, 2020 8:36 AM -
Hi,
Can you tell me exactly what port is needed by Exchange to work Properly ?
Because i opened :
53 123 135 389 636 3268 3269 445 88 464 49152 49153 5000 - 5100 - Edited by Neiluj 111 Tuesday, July 28, 2020 1:22 PM
Tuesday, July 28, 2020 1:16 PM -
Hi Neiluj,
About network ports for clients and mail flow in Exchange, please make sure the following ports are open: 443, 444, 80, 81, 143, 993, 110, 995, 587,25, 53, 50636.
For more information you could refer to: Network ports for clients and mail flow in Exchange.
About the Active Directory please make sure the following ports are open: 389, 636 ,3268 ,3269 ,88 ,53 ,445 ,25 ,135 ,5722 ,123 ,464 ,138 ,9389 ,67 ,2535 ,137 ,139.
About the port required by Active directory you could refer to: Active Directory and Active Directory Domain Services Port Requirements
In addition, we couldn’t recommend disable any ports between Exchange server and Active Directory. Incorrect settings could cause potential impact.
This Exchange Server 2016 - General Discussion Forum will be migrating to a new home on Microsoft Q&A, please refer to this sticky post for more details.
Regards,
Lucas Liu
Exchange Server 2016 - General Discussion forum will be migrating to a new home on Microsoft Q&A! We invite you to post new questions in the new forum.
For more information, please refer to the sticky post.
Wednesday, July 29, 2020 6:35 AM -
Hi,
Thank you for this port list.
Do you know if installing 2 Exchange server at the same time is supported ? (It's maybe from where my problem come from)
Wednesday, July 29, 2020 2:45 PM -
Hi Neiluj,
You could install multiple Exchange servers at the same time. However, it is not recommended, because Exchange server write configured information to DC (domain controller) when Exchange install. If we install multiple Exchange servers, multiple Exchange server will write configured information to DC at the same time, it will have some corrupted items. So we suggest you install Exchange server one by one.
This Exchange Server 2016 - General Discussion Forum will be migrating to a new home on Microsoft Q&A, please refer to this sticky post for more details.
Regards,
Lucas Liu
Exchange Server 2016 - General Discussion forum will be migrating to a new home on Microsoft Q&A! We invite you to post new questions in the new forum.
For more information, please refer to the sticky post.
Thursday, July 30, 2020 8:43 AM -
Thank for the answer.
I really don't from where this problem come from ... i'm lost
Thursday, July 30, 2020 10:16 AM -
[Note] This forum will be locked down, you can continue to post in here before 8/10/2020. It is highly recommended to register the Microsoft Q&A Platform and create new thread in Microsoft Q&A Platform to continue the discussion.
Hi Neiluj,
1. If you install two Exchange servers at the same time, please don’t do this. Please try to install Exchange server one by one.
2. Please do not disable any port between AD and Exchange.
3. Please make sure that you have met all the prerequisites for installing Exchange, especially the .Net Framework. And also carry out the prepare Schema/AD/domain.
In addition, please check if there are any related error logs in Event Viewer when install failed.
This Exchange Server 2016 - General Discussion Forum will be migrating to a new home on Microsoft Q&A, please refer to this sticky post for more details.
Regards,
Lucas Liu
Exchange Server 2016 - General Discussion forum will be migrating to a new home on Microsoft Q&A! We invite you to post new questions in the new forum.
For more information, please refer to the sticky post.
Monday, August 3, 2020 8:39 AM -
Hi,
1 - I already tried
2 - Port is filtered but i dont block AD traffic
3 - i installed all prerequisites
My AD is old, do i forgot something on the AD ?
Wednesday, August 5, 2020 11:46 AM -
[Note] This forum will be locked down, you can continue to post in here before 8/10/2020. It is highly recommended to register the Microsoft Q&A Platform and create new thread in Microsoft Q&A Platform to continue the discussion.
Hi Neiluj,
What do you mean by old AD?
Did you run the following command line to prepare Schema/AD/domain before installation
<Virtual DVD drive letter>:\Setup.exe /IAcceptExchangeServerLicenseTerms /PrepareSchema <Virtual DVD drive letter>:\Setup.exe /IAcceptExchangeServerLicenseTerms /PrepareAD <Virtual DVD drive letter>:\Setup.exe /IAcceptExchangeServerLicenseTerms /PrepareAllDomains
This Exchange Server 2016 - General Discussion Forum will be migrating to a new home on Microsoft Q&A, please refer to this sticky post for more details.
Regards,
Lucas Liu
Exchange Server 2016 - General Discussion forum will be migrating to a new home on Microsoft Q&A! We invite you to post new questions in the new forum.
For more information, please refer to the sticky post.
Friday, August 7, 2020 10:25 AM -
Type Get-AdForest and report the output?
Mariëtte Knap [alumna Microsoft SBS MVP]
www.server-essentials.com | Linkedin | Migrations done the easy way | DNN MVP 2019Friday, August 7, 2020 12:41 PM