We have two CAS servers and 1 mailbox server.
OHS-EXCHCAS (Client Access, Hub Transport)
SP2 upgrade complete
SP3 upgrade complete
Rollup 9 Update complete
OHS-EXCHFE (Client Access, Hub Transport)
SP2 upgrade complete
SP3 upgrade complete
Rollup 9 Update complete
OHS-EXCHBE (Mailbox )
SP3 UpdateFailed
Rollup 9 not complete
We successfully upgraded OHS-EXCHCAS (Client Access, Hub Transport) and OHS-EXCHFE (Client Access, Hub Transport)
We get the following error while upgrading OHS-EXCHBE (Mailbox )
[04/23/2015 20:35:43.0528] [2] [ERROR] Unexpected Error[04/23/2015 20:35:43.0528] [2] [ERROR] Couldn't resolve the user or group "Mail.orange.k12.nj.us/Microsoft Exchange Security Groups/Discovery Management." If the user or group is a foreign forest principal, you must have either a two-way trust or an outgoing trust.
[04/23/2015 20:35:43.0590] [2] [ERROR] The trust relationship between the primary domain and the trusted domain failed.
[04/23/2015 20:35:43.0590] [2] Ending processing Add-MailboxPermission
[04/23/2015 20:35:43.0590] [1] The following 1 error(s) occurred during task execution:
[04/23/2015 20:35:43.0590] [1] 0. ErrorRecord: Couldn't resolve the user or group "Mail.orange.k12.nj.us/Microsoft Exchange Security Groups/Discovery Management." If the user or group is a foreign forest principal, you must have either a two-way trust or an outgoing trust.
[04/23/2015 20:35:43.0590] [1] 0. ErrorRecord: Microsoft.Exchange.Data.Common.LocalizedException: Couldn't resolve the user or group "Mail.orange.k12.nj.us/Microsoft Exchange Security Groups/Discovery Management." If the user or group is a foreign forest principal, you must have either a two-way trust or an outgoing trust. ---> System.SystemException: The trust relationship between the primary domain and the trusted domain failed.
at System.Security.Principal.NTAccount.TranslateToSids(IdentityReferenceCollection sourceAccounts, Boolean& someFailed)
at System.Security.Principal.NTAccount.Translate(IdentityReferenceCollection sourceAccounts, Type targetType, Boolean forceSuccess)
at System.Security.Principal.NTAccount.Translate(Type targetType)
at Microsoft.Exchange.Configuration.Tasks.SecurityPrincipalIdParameter.GetUserSidAsSAMAccount(SecurityPrincipalIdParameter user, TaskErrorLoggingDelegate logError, TaskVerboseLoggingDelegate logVerbose)
--- End of inner exception stack trace ---
[04/23/2015 20:35:43.0621] [1] [ERROR] The following error was generated when "$error.Clear();
$name = [Microsoft.Exchange.Management.RecipientTasks.EnableMailbox]::DiscoveryMailboxUniqueName;
$dispname = [Microsoft.Exchange.Management.RecipientTasks.EnableMailbox]::DiscoveryMailboxDisplayName;
$dismbx = get-mailbox -Filter {name -eq $name} -IgnoreDefaultScope -resultSize 1;
if( $dismbx -ne $null)
{
$srvname = $dismbx.ServerName;
if( $dismbx.Database -ne $null -and $RoleFqdnOrName -like "$srvname.*" )
{
Write-ExchangeSetupLog -info "Setup DiscoverySearchMailbox Permission.";
$mountedMdb = get-mailboxdatabase $dismbx.Database -status | where { $_.Mounted -eq $true };
if( $mountedMdb -eq $null )
{
Write-ExchangeSetupLog -info "Mounting database before stamp DiscoverySearchMailbox Permission...";
mount-database $dismbx.Database;
}
$mountedMdb = get-mailboxdatabase $dismbx.Database -status | where { $_.Mounted -eq $true };
if( $mountedMdb -ne $null )
{
$dmRoleGroupGuid = [Microsoft.Exchange.Data.Directory.Management.RoleGroup]::DiscoveryManagementWkGuid;
$dmRoleGroup = Get-RoleGroup -Identity $dmRoleGroupGuid -DomainController $RoleDomainController -ErrorAction:SilentlyContinue;
if( $dmRoleGroup -ne $null )
{
Add-MailboxPermission $dismbx -User $dmRoleGroup.Identity -AccessRights FullAccess -DomainController $RoleDomainController -WarningAction SilentlyContinue;
}
}
}
}
" was run: "Couldn't resolve the user or group "Mail.orange.k12.nj.us/Microsoft Exchange Security Groups/Discovery Management." If the user or group is a foreign forest principal, you must have either a two-way trust or an outgoing trust.".
[04/23/2015 20:35:43.0621] [1] [ERROR] Couldn't resolve the user or group "Mail.orange.k12.nj.us/Microsoft Exchange Security Groups/Discovery Management." If the user or group is a foreign forest principal, you must have either a two-way trust or an outgoing trust.
[04/23/2015 20:35:43.0621] [1] [ERROR] The trust relationship between the primary domain and the trusted domain failed.
[04/23/2015 20:35:43.0621] [1] [ERROR-REFERENCE] Id=MailboxServiceControlLast___05b3bbd421504e0c93fefa6d5d1ae590 Component=EXCHANGE14:\Current\Release\Shared\Datacenter\Setup
[04/23/2015 20:35:43.0621] [1] Setup is stopping now because of one or more critical errors.
[04/23/2015 20:35:43.0621] [1] Finished executing component tasks.
[04/23/2015 20:35:43.0684] [1] Ending processing Install-MailboxRole