2010 sp1 CAS role MS Exchange Active Directory topology services fails to start
CAS role 2010 SP1 already installed was running fine until I installed a couple of Windows updates. Upon reboot the ms exch Active Directory Topology service fails to start.
I've since uninstalled the updates but still the service won't start. Since this a CAS role i don't have any mail security AV/Spam software installed on it. Symantec endpoint protection is installed but is now disabled. A post on this forum
had similiar issues w/Symantec mail security gateway but again its not installed. A few other posts described running into these errors but that was due to either an upgrade or install of exchange. Again this was running fine until reboot after
windows updates. One KB article sugests stopping and restarting the "Remote Procedure Call (RPC)" service but the options to do so are grey out. Manually starting the sevice results in the same error logs below plus a small popup that states:
"Windows could not start the MS Exchange Active Directory topology on excas01. For more info, review the system event log. If this is a non-MS service, contact the service vendor, and refer to service-specific error code -2147024809
Ive tried to set the service w/a delay start, then tried w/manual but still no go.
Upon examination of the app logs the service starts as evidenced by the following events:
FIRST:
Log Name: Application
Source: MSExchange ADAccess
Date: 2/4/2011 1:47:43 PM
Event ID: 2068
Task Category: General
Level: Information
Keywords: Classic
User: N/A
Computer: EXCAS01
Description:
Process MSEXCHANGEADTOPOLOGYSERVICE.EXE (PID=4624). DSAccess initialized successfully.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="MSExchange ADAccess" />
<EventID Qualifiers="16388">2068</EventID>
<Level>4</Level>
<Task>1</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-02-04T21:47:43.000000000Z" />
<EventRecordID>10533</EventRecordID>
<Channel>Application</Channel>
<Computer>EXCAS01</Computer>
<Security />
</System>
<EventData>
<Data>MSEXCHANGEADTOPOLOGYSERVICE.EXE</Data>
<Data>4624</Data>
</EventData>
</Event>
SECOND:
Log Name: Application
Source: MSExchange ADAccess
Date: 2/4/2011 1:47:43 PM
Event ID: 2081
Task Category: Topology
Level: Information
Keywords: Classic
User: N/A
Computer: EXCAS01
Description:
Process MSEXCHANGEADTOPOLOGYSERVICE.EXE (PID=4624). Exchange Active Directory Provider will use the servers from the following list:
Domain Controllers:
dc3
dc1
DC01
Global Catalogs:
dc3
dc1
The Configuration Domain Controller is set to DC01
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="MSExchange ADAccess" />
<EventID Qualifiers="16388">2081</EventID>
<Level>4</Level>
<Task>3</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-02-04T21:47:43.000000000Z" />
<EventRecordID>10534</EventRecordID>
<Channel>Application</Channel>
<Computer>EXCAS01</Computer>
<Security />
</System>
<EventData>
<Data>MSEXCHANGEADTOPOLOGYSERVICE.EXE</Data>
<Data>4624</Data>
<Data>dc3
dc1
DC01
</Data>
<Data>dc3
dc1
</Data>
<Data>DC01</Data>
</EventData>
</Event>
THIRD:
Log Name: Application
Source: MSExchange ADAccess
Date: 2/4/2011 2:04:13 PM
Event ID: 2080
Task Category: Topology
Level: Information
Keywords: Classic
User: N/A
Computer: EXCAS01
Description:
Process MSEXCHANGEADTOPOLOGYSERVICE.EXE (PID=1376). Exchange Active Directory Provider has discovered the following servers with the following characteristics:
(Server name | Roles | Enabled | Reachability | Synchronized | GC capable | PDC | SACL right | Critical Data | Netlogon | OS Version)
In-site:
dc3 CDG 1 7 7 1 0 1 1 7 1
dc1 CDG 1 7 7 1 0 1 1 7 1
DC01 CDG 1 7 7 1 0 1 1 7 1
Out-of-site:
seadc3 CDG 1 7 7 1 0 1 1 7 1
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="MSExchange ADAccess" />
<EventID Qualifiers="16388">2080</EventID>
<Level>4</Level>
<Task>3</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-02-04T22:04:13.000000000Z" />
<EventRecordID>10574</EventRecordID>
<Channel>Application</Channel>
<Computer>EXCAS01</Computer>
<Security />
</System>
<EventData>
<Data>MSEXCHANGEADTOPOLOGYSERVICE.EXE</Data>
<Data>1376</Data>
<Data>dc3 CDG 1 7 7 1 0 1 1 7 1
dc1 CDG 1 7 7 1 0 1 1 7 1
DC01 CDG 1 7 7 1 0 1 1 7 1
</Data>
<Data>seadc3 CDG 1 7 7 1 0 1 1 7 1
</Data>
</EventData>
</Event>
LAST but not least....:
Log Name: Application
Source: MSExchange ADAccess
Date: 2/4/2011 2:04:15 PM
Event ID: 2600
Task Category: General
Level: Error
Keywords: Classic
User: N/A
Computer: EXCAS01
Description:
Process MSEXCHANGEADTOPOLOGY (PID=1376). DSAccess could not initiate a remote procedure call (RPC) - Call=RegisterRPCProtseqsAndAuth Error code=80070057.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="MSExchange ADAccess" />
<EventID Qualifiers="49156">2600</EventID>
<Level>2</Level>
<Task>1</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-02-04T22:04:15.000000000Z" />
<EventRecordID>10575</EventRecordID>
<Channel>Application</Channel>
<Computer>EXCAS01</Computer>
<Security />
</System>
<EventData>
<Data>MSEXCHANGEADTOPOLOGY</Data>
<Data>1376</Data>
<Data>RegisterRPCProtseqsAndAuth</Data>
<Data>80070057</Data>
</EventData>
</Event>
Any ideas would be greatly appreciated.
thanks!
February 5th, 2011 1:15am
Hello
Make sure that you have local administrator rights on Exchange server.
Run the Dcdiag and post the results.
Thanks Mhussain
Free Windows Admin Tool Kit Click here and download it now
February 6th, 2011 3:25pm
Can you check the registry for the following key: HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc\Internet
If you have it, can you back up that key, delete it, then reboot your server?Tim Harrington | MVP: Exchange | MCITP: EMA 2007/2010, MCITP: Server 2008, MCTS: OCS | Blog: http://HowDoUC.blogspot.com | Twitter: @twharrington
February 6th, 2011 6:44pm
Please try the suggestion from Tim, the symptom can appear if the related registry isn’t correct
James Luo
TechNet Subscriber Support
in forum
If you have any feedback on our support, please contact
tngfb@microsoft.com
Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
February 7th, 2011 6:39am
Waiting for the update...
It should work..Gulab | MCTS-MCITP: 2007 | MCTS-MCITP: 2010 | Skype: gulab.mallah
February 7th, 2011 4:29pm
WooHoo! that was it! Services are up. Thanks
So why would this cause a prob?
Tim or James can either one of you elaborate?
Can you check the registry for the following key: HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc\Internet
If you have it, can you back up that key, delete it, then reboot your server?
Tim Harrington | MVP: Exchange | MCITP: EMA 2007/2010, MCITP: Server 2008, MCTS: OCS | Blog: http://HowDoUC.blogspot.com | Twitter: @twharrington
Free Windows Admin Tool Kit Click here and download it now
February 7th, 2011 7:48pm