[mobius2011]

SID errors usually indicate a problem with the machine account, rather than the user account. Has this machine been built from a clone or anything?

Yes it has. I saw a bunch of posts elsewhere where people didnt run a sysprep, but I did actually run a sysprep.

Maybe somehow it didn't work, or was interrupted, or some other thing?

Am I best to cut my losses & start a new VM & run sysprep all over again? If I run it now, I imagine it will royally screw the server wont it?

[mobius2011]

Another post I saw described my problem exactly, but didn't resolve it.

Outlook Anywhere rejects correct login and writes Event 4625 in Security log

http://www.experts-exchange.com/Soft..._25813572.html

[Sembee]

Originally Posted by mobius2011

Yes it has. I saw a bunch of posts elsewhere where people didnt run a sysprep, but I did actually run a sysprep.

Maybe somehow it didn't work, or was interrupted, or some other thing?

Am I best to cut my losses & start a new VM & run sysprep all over again? If I run it now, I imagine it will royally screw the server wont it?

If you run it now, then you are going to break Exchange.
I see little point in using images these days, particularly for production machines. When I can install a fresh copy of Windows 2008 R2 from an ISO in toa VM in less than 15 minutes, the time saving is minimal.

I would suggest that you build a new VM and migrate across, then remove the original.

Simon.

[mobius2011]

Thinking back on it, I'm sure I ran sysprep, but I can't be certain I ticked the generalize button. This error seems to indicate I didn't.

I would suggest that you build a new VM and migrate across, then remove the original.

It's not in production as yet and the PDC is on another server. So I guess the only issue is the cert, otherwise I can pretty much delete & re-create from new.

[Sembee]

Originally Posted by mobius2011

Thinking back on it, I'm sure I ran sysprep, but I can't be certain I ticked the generalize button. This error seems to indicate I didn't.



It's not in production as yet and the PDC is on another server. So I guess the only issue is the cert, otherwise I can pretty much delete & re-create from new.

Errr no.
You cannot do that with Exchange. Exchange is heavily integrated with the AD. You need to remove Exchange correctly, otherwise you will have a huge mess on your hands. Due to the SID errors there is no gurantee that any other measure, such as a reinstall with the recoverserver switch will work.

Either migrate to another Exchange server and uninstall, or attempt to undo the Exchange installation. The former may well be easier.

Simon.

[mobius2011]

Either migrate to another Exchange server and uninstall

Is there a procedure for that somewhere?

There is no actual data on the new exchange server. There are mailboxes, but no mail in them. So provision the new vm. service pack. dcpromo. Install exchange. Then what?

What is the problem with uninstalling the old exchange, dcpromo to remove from domain? If I name the new server something completely different.

[Sembee]

Uninstalling Exchange is a matter of using add/remove programs. The uninstaller will tell you whether there is anything left on the server.

You will need to mail disable all users and delete what you can if you aren't going to migrate.

The problem with just doing an uninstall is that you have to remove everything, whereas if you migrate, you don't have to remove everything because the new server can pick it up.

You are also aware that isn't recommended to install Exchange on to a domain controller? If there are other DCs in the domain then install it on to a member server. It will also make DR more straight forward.

Simon.

[mobius2011]

Why do the accounts authenitcate just using straight outlook on the TS if there is a sid problem? That I don't get.

Not sure why i said dcpromo. Lack of sleep. It wasn't installed.

[Sembee]

Inside the LAN, Exchange isn't handling the authentication.
Outside the LAN, the authentication is going through Exchange. I would expect to see problems with other methods of accessing the server as well - for example RDP.

Simon.

[mobius2011]

Ok, just thought I would drop back in for an update.

Sembee, thanks for the advice on building a new VM. I blew away the old one and started again.

Can I just say that it was a bit of a mission to uninstall exchange 2010. All roles uninstall fine except the mailbox role. Something that I didn't expect or know about was arbitration mailboxes.

I didn't want to create a new exchange VM and migrate anything across. I just wanted to completely remove all remnants of the failed one and remove any reference to it from AD and start again.

On trying to remove the mailbox role I got an error about needing to remove arbitration mailboxes as well. You can only either move them to a new exchange , or delete them using adsi edit. I chose adsi & this helped me.

http://social.technet.microsoft.com/...-fa00b47d415f/

I made sure to sysprep the new VM with the generalize option & all is good now. Flawless. Everything works.

I love the installation & backup of certs in exchange 2010. Such an easy process now compared to previous versions. It used to be a screw around with power shell commands & mucking around in IIS7. Now its a one stop shop in the gui as far as creating, exporting, importing & setting services. Love it.