Hi;

I am running two Ex2013 Std server in DAG mode, recently I found that the witness share in use has problem, when I run

get-DatabaseAvailabilityGroup -Identity EXDAG -status | fl

I got this....

WitnessShareInUse                      : InvalidConfiguration

Name              : EXDAG
Servers           : {EX02, EX01}
WitnessServer     : dc01.company.com
WitnessDirectory  : C:\EXDAG.company.com
WitnessShareInUse : InvalidConfiguration

I browsed internet for two days but cannot find a solution that fit me.  What should

If "dc01" is a domain controller, then you are violating best practice.  You have to grant rights to a server that acts as a file share witness, but to grant rights to a domain controller you must grant the rights to the entire domain.

I would move the FSW to a member server.

Hi,

As what Ed says, it is not recommended to use a domain controller as the file share witness. Please change your Witness Server on something other than a DC to have a try.

Alternatively, please add your domain controllers computer account to Exchange Trusted Subsystem group in AD and add the Exchange Trusted Subsystem group to the Builtin\Administrators group of the domain in ADUC or run:
Add-ADGroupMember Administrators -Members "Exchange Trusted Subsystem"

https://social.technet.microsoft.com/Forums/exchange/en-US/d9ddbaca-d50e-4189-90bc-0a3fec517af0/add-exchange-trusted-subsystem-group-in-local-administrator-group-in-domain-controller-2013?forum=exchangesvrgeneral

http://blogs.technet.com/b/ferris/archive/2009/10/13/dag-fsw-permissions-errors-during-creation-process-try-this.aspx

Regards,

thanks guys for the update.

I tried to change the FSW to another member server like a file server.  I issue a command to change but it is still not working.

I have done this.

1. grant the "Exchange Trusted Subsystem" to the local administrators group on my file server.

2. using this command to change to the FSW

   set-DatabaseAvailiabilityGroup -Identity EXDag -WitnessServer FS01 - WitnessDirectory G:\dag.company.com

once this command issue, I found the following message. 

Also, when I look at the new FSW folder, I do not see any subfolder created automatically by Exchange.

WARNING: An unexpected error has occurred and a Watson dump is being generated: Some or all identity references could not be translated.
Some or all identity references could not be translated.
    + CategoryInfo          : NotSpecified: (:) [Set-DatabaseAvailabilityGroup], IdentityNotMappedException
    + FullyQualifiedErrorId : System.Security.Principal.IdentityNotMappedException,Microsoft.Exchange.Management.Syste
   mConfigurationTasks.SetDatabaseAvailabilityGroup
    + PSComputerName        : ex01.company.com 

http://tinyurl.com/pouhr2k