Configuring DAG cluster quorum (Network Steve Forum)

Configuring DAG cluster quorum

Hello All,

I am in process of installing Exchange 2013 SP1 Server. I have two exchange servers 2013 with combined roles. During DAG configuration I am facing some issues. Adding the node into DAG giving me Error "Some or all identity references could not be translated". I am configuring FSW on my Domain Controller running windows server 2012 R2. The Exchange Operating System is also Windows Server 2012 R2. I followed the below link;

http://exchangeserverpro.com/error-identity-references-translated-exchange-2013-dag/

everything was as it stated but the last command giving me error which configuring Fire share witness

the error is;

"Set-ClusterQuorum : There was an IO error validating share path '\\adds01\dagfsw.abc.com'."

I am attaching the snapshot also.

Please guide..

Edited by Sawag 21 hours 46 minutes ago

February 17th, 2015 9:08am

If you follow these steps your should be good. I used these steps to setup my DAG.

Task 1: Pre-stage the cluster network object for a DAG

1.	click Active Directory Users and Computers.
2.	In Active Directory Users and Computers, on the menu bar, click View, and then click Advanced Features.
3.	In the left pane, expand Adatum.com, click Computers, then right-click Computers, point to New, and then click Computer.
4.	In the New Object Computer dialog box, in the Computer name field, type DAG1, and then click OK.
5.	In the right pane, right-click DAG1, and then click Properties.
6.	In the DAG1 Properties dialog box, click the Security tab.
7.	On the Security tab, click Add, and in the Enter the object names to select field, type Exchange Trusted Subsystem. Click Check Names, and then click OK.
8.	On the Security tab, click Add, and then click Object Types.
9.	In the Object Types dialog box, click Computers, and then click OK.
10.	In the Select Users, Computers, Service Accounts, or Groups window, in the Enter the object names to select field box, type LON-MBX1$, then click Check Names, and then click OK.
11.	On the Security tab, select LON-MBX1 (ADATUM\LON-MBX1$), then in the Allow column in the Permissions for LON-MBX1 list, click Full control.
12.	On the Security tab, select Exchange Trusted Subsystem (ADATUM\Exchange Trusted Subsystem), then in the Allow column in thePermissions for Exchange Trusted Subsystem list, click Full control, and then click OK.
13.	In the Active Directory Users and Computers window, in the right pane, right-click DAG1, and then click Disable Account.
14.	In the warning window, click Yes, and then on the next information window, click OK.

Free Windows Admin Tool Kit Click here and download it now

February 17th, 2015 9:13am

Task 2: Create a DAG and add mailbox servers to the DAG

1.	Switch to LON-CAS1. Open Internet Explorer, and type https://lon-cas1.adatum.com/ecp, and then press Enter.

3.	In the EAC, in the Feature pane, click servers.
4.	On tabs, click database availability groups, and then on the toolbar, click New.
5.	In the New database availability group window, in the Database availability group name field, type DAG1, then click Witness server, and type LON-CAS1 in the Witness server field. Click Witness directory, in the Witness directory field, type C:\FSWDAG1, click Enter an IP address, in Database availability group IP addresses field, and type 172.16.0.33. Then click Add, and then click save.
6.	In the list view, click DAG1, and on the toolbar, click Manage DAG membership.
7.	In the manage database availability group membership window, click Add.
8.	In the Select Server window, click LON-MBX1, click add, and then click LON-MBX2. Click add, and then click ok.
9.	In the manage database availability group membership window, click save.
10.	In the Saving completed successfully window, click close.

February 17th, 2015 9:14am

I highly recommend you do not use a DC as a File Share Witness. To do that, you will have to give the Exchange Trusted Subsystem group Domain Admin access rights. (Adding it to the Domain Admin will be required since there is no local admin group on a DC). I would use a regular server, not a DC.

Free Windows Admin Tool Kit Click here and download it now

February 17th, 2015 9:20am

Thanks for reply. I followed all of your steps. even I used an other server for FSW but result are same. at the end I receive an error while configuring cluster quorum to Node and File Share Majority

"Set-ClusterQuorum : There was an IO error validating share path '\\adds01\dagfsw.abc.com'."

February 17th, 2015 9:59am

Can you access this link directly from a windows explorer? \\adds01\dagfsw.abc.com

Are the permissions setup correctly? Do the exchange servers have full access to the folder? I think there is an issue validating the path of the share.

Free Windows Admin Tool Kit Click here and download it now

February 17th, 2015 10:02am

Yeah it is strange. I created one folder on my DC with the name FSW and inside that folder I created another folder with the name dagfsw.abc.com and shared it with everyone Full Access BUT when I created and configured DAG, the dagfsw.abc.com folder was disappeared. I was able to see from other PC as shared folder but still could not open with Access Denied error message even I added Everyone Full Access. and it is the same case in the link also where he mentioned "And, the file share witness server does not contain a file share witness folder and share for the DAG."

http://exchangeserverpro.com/error-identity-references-translated-exchange-2013-dag/

February 17th, 2015 2:39pm

This topic is archived. No further replies will be accepted.