Issue with exchange 2013 lync 2013 intergration
When I run the command:
[PS] C:\Program Files\Microsoft\Exchange Server\V15\scripts>.\Configure-EnterprisePartnerApplication.ps1 -AuthMetadataUr
l "https://agile.XYXYX.com.au/metadata/json/1" -ApplicationType Lync
From exchange, I get the following error:
Creating Partner Application <LyncEnterprise-300859a94f154258b7458c1c6d0012ec> using metadata <https://agile.XYXYX.
om.au/metadata/json/1> with linked account <XYXYX.com.au/Users/LyncEnterprise-ApplicationAccount-1-2-3>.
An Active Directory Constraint Violation error occurred on FIREFLY.XYXYX.com.au. Additional information: The name
reference is invalid.
This may be caused by replication latency between Active Directory domain controllers.
Active directory response: 000020B5: AtrErr: DSID-03152817, #1:
0: 000020B5: DSID-03152817, problem 1005 (CONSTRAINT_ATT_TYPE), data 0, Att 8bf37984 (msExchAuthLinkedAccount)
+ CategoryInfo : NotSpecified: (:) [New-PartnerApplication], ADConstraintViolationException
+ FullyQualifiedErrorId : A68B6F35,Microsoft.Exchange.Management.SystemConfigurationTasks.NewPartnerApplication
+ PSComputerName : valkyrie.XYXYX.com.au
Prior to that (in more warnings that will fit on a screen), I also see a lot of:
WARNING: The object ArchiveApplication-LyncEnterprise-ApplicationAccount-1-2-3-4--11 has been corrupted, and it's in an
inconsistent state. The following validation errors happened:
WARNING: The management role assignment ArchiveApplication-LyncEnterprise-ApplicationAccount-1-2-3-4--11 isn't
associated with a role group, assignment policy, user, or universal security group. The role group, assignment policy,
user, or USG might have been deleted. Use the Remove-ManagementRoleAssignment cmdlet to remove this role assignment.
WARNING: The object UserApplication-LyncEnterprise-ApplicationAccount-1-2-3-4-5-6-9 has been corrupted, and it's in an
inconsistent state. The following validation errors happened:
WARNING: The management role assignment UserApplication-LyncEnterprise-ApplicationAccount-1-2-3-4-5-6-9 isn't
associated with a role group, assignment policy, user, or universal security group. The role group, assignment policy,
user, or USG might have been deleted. Use the Remove-ManagementRoleAssignment cmdlet to remove this role assignment.
WARNING: The object ArchiveApplication-LyncEnterprise-ApplicationAccount-1-2-3-4--12 has been corrupted, and it's in an
inconsistent state. The following validation errors happened:
WARNING: The management role assignment ArchiveApplication-LyncEnterprise-ApplicationAccount-1-2-3-4--12 isn't
associated with a role group, assignment policy, user, or universal security group. The role group, assignment policy,
user, or USG might have been deleted. Use the Remove-ManagementRoleAssignment cmdlet to remove this role assignment.
WARNING: The object UserApplication-LyncEnterprise-ApplicationAccount-1-2-3-4-5-6-10 has been corrupted, and it's in an
inconsistent state. The following validation errors happened:
WARNING: The management role assignment UserApplication-LyncEnterprise-ApplicationAccount-1-2-3-4-5-6-10 isn't
associated with a role group, assignment policy, user, or universal security group. The role group, assignment policy,
user, or USG might have been deleted. Use the Remove-ManagementRoleAssignment cmdlet to remove this role assignment.
WARNING: The object ArchiveApplication-LyncEnterprise-ApplicationAccount-1-2-3-4--13 has been corrupted, and it's in an
inconsistent state. The following validation errors happened:
WARNING: The management role assignment ArchiveApplication-LyncEnterprise-ApplicationAccount-1-2-3-4--13 isn't
associated with a role group, assignment policy, user, or universal security group. The role group, assignment policy,
user, or USG might have been deleted. Use the Remove-ManagementRoleAssignment cmdlet to remove this role assignment.
I have been through the AD controllers and deleted all the excess applicationaccount user accounts, before running (from past failed runs), and I have also specified a preferred AD controller... to no avail.... anyone have an
idea what might be creating this issue or where I can look for more info on what to correct.... this is a clean install....
December 24th, 2012 1:08am
Hello,
Do you have multiple DCs? If so, you may check the following article:
http://blogs.technet.com/b/jenstr/archive/2012/10/31/using-configure-enterprisepartnerapplication-ps1-in-a-multi-domain-controller-environment.aspx
Happy New Year!
If you have feedback for TechNet Subscriber Support, contact
tnmff@microsoft.comSimon Wu
TechNet Community Support
Free Windows Admin Tool Kit Click here and download it now
December 26th, 2012 4:44am
Hello,
Do you have multiple DCs? If so, you may check the following article:
http://blogs.technet.com/b/jenstr/archive/2012/10/31/using-configure-enterprisepartnerapplication-ps1-in-a-multi-domain-controller-environment.aspx
Happy New Year!
If you have feedback for TechNet Subscriber Support, contact
tnmff@microsoft.comSimon Wu
TechNet Community Support
December 26th, 2012 12:42pm
Thanks for that... I am afraid that that didnt help - I did run it specifying a DC prior as well...
However, this has sorted itself... on the 9th run it just worked (this time around) so thanks for your help, the issue is now resolved.
Free Windows Admin Tool Kit Click here and download it now
January 6th, 2013 2:54am