Exchange server 2007 setup fails with global catalog cannot be found.
I've got an existing active directory domain witha domain controller that is Server 2003 R2 SP2 and exchange server 2003 which is working normally. I'm now trying to install exchange server 2007on a new X64 server and going nowherefast. I get a message that a GC cannot be found during setup . DCDIAG, NETDIAG, and NLTEST all report everything is working correctly. I've read through a lot of articles and none have helped me resolve the issue. The new X64 server is a domain member and I was able to complete the domain prep operations from the domain controller itself. Anyone have an idea of how to troubleshoot the problem?
December 29th, 2008 1:21am

Is there any type of firewall or IPSEC that could be blocking it from the GC. How many DCs do you have and how many of them are GCs? Mark Morowczynski MCSE 2003:Messaging, Security MCTS:Vista, Windows Mobile Admin http://almostdailytech.com
Free Windows Admin Tool Kit Click here and download it now
December 29th, 2008 2:35am

Check your Sites and Services, I would look at how you have those setup. You need a GC in the same AD site as Exchange 2007. The other thing is teh GC needs to be Windows 2003 SP1 at least, Windows 2000 native, and the Schema master has to be W2K3 SP1.BP
December 29th, 2008 4:55am

Hi,1. Please check event log and post the error event here. You can run eventvwr from a command prompt to open event viewer. Meanwhile, please hit Event Viewer(local) and then click Action Connect to another computer. There please try to browse your GC and connect. If any error occur, please post the detail information here. Besides, if you find event 2080,then please try to run secpol.msc from a command prompt and then check if Exchange Server enable under Users Rights Assignment - Manage Auditing andSecurity Log.2. Please ensure that RPC and Net logon Service have enabled on GC.(Note: You can run Services.msc from a command prompt to open service manager.)Related article for your reference: How to Prepare Active Directory and Domains http://technet.microsoft.com/en-us/library/bb125224.aspx Regards, Xiu
Free Windows Admin Tool Kit Click here and download it now
December 29th, 2008 12:20pm

I started with one domain controller which is GC enabled. All testing indicates the GC is operational. I can access the GC with no problem. There is only one domain in the entire site. The Domain controlleris running Windows Server 2003 R2 SP2 and the functional domain level is 2003. There are no firewalls operating on any of the servers. After the install failed, I created a second domain controller, and enabled the GC role on it. I tried disabling the GC on the first domain controller but the results were unchanged. I can perform dns queries, run NETDIAG, DCDIAG, NLTEST and all testing shows nothing wrong.I created a span port on my Cisco switch and put a packet sniffer on the network. I have noticed that the server I created for Exchange (Windows 2008 SP1), does not even perform any dns lookups or ldap queries against the domain during the exchange setup and I get the failure message.
December 30th, 2008 3:02am

Validate your IP settings to verify that DNS is configured correctly. Are you registering in DNS correctly? Can you ping the DCs from the Exchange server by using the DC name, what about FQDN? What is the Forest Functional Level?What version of Exchange? SP 1 or RTM? Also, do you have IPv6 enabled? What is the Exchange 2003 functional level? Is your AD environment flat or an empty root with a child domain?Did you run 'X:\setup /pl' to prepare the legacy exchange permissions and then 'X:\setup /p' to prepare the domain? BP
Free Windows Admin Tool Kit Click here and download it now
December 30th, 2008 6:38am

DNS is registered correctly. I can ping domain controllers using netbios, dns, or fqdn values.The forest functional level is 2003Exchange Server 2007 SP1IPV6 is installed on the Exchange 2008 server, but it is not bound to the adapter. It is not installed on the Windows 2003 Domain Controller.Exchange 2003 functional level is Native Mode (no pre-Exchange 2000 servers)AD is Flat, one domain in one forest.I ran the setup /pl and setup /p commands from the 2008 server and suucess was reported for each operation.Regards,Charles
December 30th, 2008 6:57am

Can you look at the Exchangesetup logs and paste the exact error please? I have seen this issue about six months ago but it was with Exchange 2007 RTM and W2K8.....A thought, have you run the Exchange BPA Readiness check? How are the AD Sites and Services? Multiple Sites or a single AD site? Subnets configured properly? Are the Domain Controllers in the Domain Controller OU in AD? BP
Free Windows Admin Tool Kit Click here and download it now
December 30th, 2008 6:59am

Hi, First please disable IPv6 and then test the issue. 1. Enable IPv6 in Local Area Connection on the Windows Server 2008-based computer. 2. Use Registry Editor to completely disable IPv6 on a Windows Server 2008-based computer. 3. To completely disable IPv6 on a Windows Server 2008-based computer, follow these steps: a. Open Registry Editor. b. Locate the following registry subkey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters c. In the details pane, click New, and then click DWORD Value. d. Type DisabledComponents, and then press ENTER. e. Double-click DisabledComponents, and then type 0xffffffff in Hexadecimal or 4294967295 in Decimal. Then Please disable TCP Chimney offload and NetDMA on DC. You can follow the steps in the article below: Windows 2003 Scalable Networking pack and its possible effects on Exchange http://msexchangeteam.com/archive/2007/07/18/446400.aspx Please use NLtest on Windows Server 2008 to check if you can find Global Catalog from Exchange Server.Open a command prompt and then run command below and then post here. nltest /dsgetdc:domain.com /gc /force nltest /dnsgetdc:domain.com /gc /force Besides, please help to collect the information listing below and send to us. 1. Please download MPSRPT_Exchange.EXE from here and then generate mps report. 2. Run ipconfig /all from DC and Exchange Server. 3. Please send the exchangesetuplog, MPS report and output from command(ipconfig /all) to Xiu Zhang for further troubleshooting. Regards, Xiu
December 30th, 2008 11:27am

Here are the results from the nltest commands.D:\>nltest /dsgetdc:sevenlakes.tzo.com /gc /force DC: \\email.sevenlakes.tzo.com Address: \\10.80.1.11 Dom Guid: 924ffcb3-ff95-4a7e-81a0-10d1601387f0 Dom Name: sevenlakes.tzo.com Forest Name: sevenlakes.tzo.comDc Site Name: Default-First-Site-NameOur Site Name: Default-First-Site-Name Flags: PDC GC DS LDAP KDC TIMESERV WRITABLE DNS_DC DNS_DOMAIN DNS_FORESTCLOSE_SITEThe command completed successfully D:\>nltest /dnsgetdc:sevenlakes.tzo.com /gc /forceList of DCs in pseudo-random order taking into account SRV priorities and weights:Non-Site specific: email.sevenlakes.tzo.com 10.80.1.11The command completed successfully D:\>IPV6 has been disabled per your request.The TCP Chimney offload and NETDMA registry keys did exist and they were all set to 0 already.I will submit the results of the MSRPT_Exchange tool to your email account as well.
Free Windows Admin Tool Kit Click here and download it now
December 31st, 2008 5:28am

I have setup a environment to try to reproduce this issue. Please try to check if setup media is OK.I found event 8026 in the log. You can follow the steps below to correct the issue. Before we move on troubleshooting this issue, please prompt another Domain Controller and force AD replication. Do not disable the first DC. 1. Open Exchange System Manager. 2. Expand the Recipients container, and then click Recipient Update Services. 3. Double-click each Recipient Update Service, and then change the Windows domain controller setting to the new Windows domain controller in the domain. After that please try to install Exchange again.Please send setup log to me.Regards,Xiu
December 31st, 2008 11:10am

Xiu, I created a new domain controller and made the changes. I did notice that the recipient update services were pointing to a domain controller that was decommisioned a few years ago. Unfortunately, setup is still failing. I did not demote the old domain controller, but both DC's are nowGlobal Catalog Servers. I mailed the results of the setup log to you.
Free Windows Admin Tool Kit Click here and download it now
December 31st, 2008 4:19pm

Is the old DC still listed under sites and services? Is it set to be a GC?You may need to use Adsiedit to remove the DC from your AD objects.It is possible that Exchnage things this server is still there and trying to communicate with it.there is also a flag you can use to specify the configuration DC:http://technet.microsoft.com/en-us/library/bb124273.aspxNot sure that will help or not but worht a shot.BP
December 31st, 2008 5:22pm

The old server was properly decommisioned using DCPROMO. There are no references to it anywhere that I can find but in the exchange recipient container. I used NTDSUTIL as well and could not find any traces of it.
Free Windows Admin Tool Kit Click here and download it now
December 31st, 2008 5:29pm

I tried to run the ExBPA tool but server 2008warns of compatibility problems when I attempt to install .net framework 1.1 which is required for the BPA tool. I wanted to run the BPA tool without launching exchange setup. I am trying not to modify the environment while we attempt to debug the problem.I'm not really sure that exchange setup is performing any DNS lookups against the active directory when setup is performing the setup checks. I've got a packet sniffer running and nothing comes across the wire in the form of any DNS queries during the validation phase. This may be expected behavior, but I personally do not think so.
January 1st, 2009 4:54am

I believe is you install the System Management tools it will include the BPA in the tool box.You can also install the System Management tools on a WinXP system. This Linkhttp://www.microsoft.com/downloads/details.aspx?FamilyID=44C66AD6-F185-4A1D-A9AB-473C1188954C&displaylang=enhas the 32bit version of Exchange for testing and installation of the Mgmt tools. YOu will need to install the required componets.or you can install the BPA on a WinXP system with the .net framework and required componets.BP
Free Windows Admin Tool Kit Click here and download it now
January 1st, 2009 7:04pm

Bardapony said: Can you look at the Exchangesetup logs and paste the exact error please? I have seen this issue about six months ago but it was with Exchange 2007 RTM and W2K8.....A thought, have you run the Exchange BPA Readiness check? How are the AD Sites and Services? Multiple Sites or a single AD site? Subnets configured properly? Are the Domain Controllers in the Domain Controller OU in AD? BP Could you please post this log as Bardapony requested? They are located in a folder at the root of your C: drive.Mike Crowley: MCT, MCSE, MCTS, MCITP: Enterprise Messaging Administrator
January 1st, 2009 8:51pm

I was trying to use the BPA tool on the Windows 2008 server that is the target for the exchange installation. Every diagnostic test I have run including NLTEST, NETDIAG, DCDIAG, and NSLOOKUP all indicate everything is working properly. I have an existing exchange 2003 server in the organization that is running just fine and has been for five years.Domain Controller 1: Windows Server 2003 R2 Standard SP2. Forest and Domain functional level is 2003.This server is running server 2003 R2 SP2and Exchange 2003 SP2. This is a lab environment with two users. I know they should be separate, but this is my learning system.The new server is a Systemax with two Quad core Xeon processors.Config:Windows Server 2008 Enterprise with Hyper-V role onlyVirtual Server 1: Windows Server 2008 withDomain Controller role (tested and fully operational, including DNS and replication) installed per a request from an earlier message in this thread.Virtual Server 2: Windows Server 2008 (this will hopefully be exchange 2007 one day)Virtual Server 3: Windows Server 2008 with Microsoft SQL Server 2008Virtual Server 4: Windows Server 2003 with Blackberry Enterprise Server 4.6I do know the problem is with my existing domain configuration. I isolated the Systemax server, created a duplicate domain, on HV instance 1, and got exchange to install on instance number two on the first try. Everything in the existing domain works flawlessly, so I'm not sure what to make of it.The question is, what the heck is wrong. I've included the setup log which has no useful information whatsoever.At this point the 2008 domain controller has the FSMO infrastructure role and the 2003 domain controller is the GC server. I've tried reversing the GC and FSMO infrastructure role owners to no avail.[1/1/2009 2:30:46 PM] [0] **********************************************[1/1/2009 2:30:46 PM] [0] Starting Microsoft Exchange 2007 Setup[1/1/2009 2:30:46 PM] [0] **********************************************[1/1/2009 2:30:46 PM] [0] Operating System version: Microsoft Windows NT 6.0.6001 Service Pack 1.[1/1/2009 2:30:46 PM] [0] Setup version: 8.1.240.6.[1/1/2009 2:30:46 PM] [0] Logged on user: SEVENLAKES\cdfif_admin.[1/1/2009 2:30:46 PM] [0] Command Line Parameter Name='mode', Value='Install'.[1/1/2009 2:30:46 PM] [0] Command Line Parameter Name='sourcedir', Value='D:\'.[1/1/2009 2:30:46 PM] [0] Command Line Parameter Name='fromsetup', Value=''.[1/1/2009 2:30:46 PM] [0] ExSetupUI was started with the following command: '-mode:install -sourcedir:D:" /FromSetup'.[1/1/2009 2:30:47 PM] [0] Setup is choosing the domain controller to use[1/1/2009 2:30:47 PM] [0] Setup is choosing a local domain controller...[1/1/2009 2:30:48 PM] [0] [ERROR] Setup encountered a problem while validating the state of Active Directory: Could not find any Global Catalog in forest sevenlakes.tzo.com.[1/1/2009 2:30:48 PM] [0] [ERROR] Could not find any Global Catalog in forest sevenlakes.tzo.com.[1/1/2009 2:30:48 PM] [0] [ERROR] Global catalog not found in forest "sevenlakes.tzo.com".[1/1/2009 2:30:48 PM] [0] Setup will use the domain controller ''.[1/1/2009 2:30:48 PM] [0] Setup will use the global catalog ''.[1/1/2009 2:30:48 PM] [0] No Exchange configuration container was found for the organization. Message: 'Could not find any Global Catalog in forest sevenlakes.tzo.com.'.[1/1/2009 2:30:48 PM] [0] The following roles are unpacked: [1/1/2009 2:30:48 PM] [0] The following roles are installed: [1/1/2009 2:30:48 PM] [0] The local server does not have any Exchange files installed.[1/1/2009 2:30:48 PM] [0] Setup will use the path 'D:\' for installing Exchange.[1/1/2009 2:30:48 PM] [0] The server is cluster type: 'None'.[1/1/2009 2:30:48 PM] [0] The requested cluster type: 'None'.[1/1/2009 2:30:48 PM] [0] The installation mode is set to: 'Install'.[1/1/2009 2:30:48 PM] [0] Exchange organization name is required for this mode.[1/1/2009 2:30:48 PM] [0] Active Directory Initialization status : 'False'.[1/1/2009 2:30:48 PM] [0] Schema Update Required Status : 'False'.[1/1/2009 2:30:48 PM] [0] Organization Configuration Update Required Status : 'False'.[1/1/2009 2:30:48 PM] [0] Domain Configuration Update Required Status : 'False'.[1/1/2009 2:30:48 PM] [0] Applying default role selection state[1/1/2009 2:30:48 PM] [0] Setup is determining what organization-level operations to perform.[1/1/2009 2:30:48 PM] [0] Setup will run from path 'D:\Setup\ServerRoles\Common'.[1/1/2009 2:30:48 PM] [0] InstallModeDataHandler has 3 DataHandlers[1/1/2009 2:30:48 PM] [0] Setup is determining what organization-level operations to perform.[1/1/2009 2:30:48 PM] [0] Setup will run from path 'D:\Setup\ServerRoles\Common'.[1/1/2009 2:30:48 PM] [0] InstallModeDataHandler has 4 DataHandlers[1/1/2009 2:30:48 PM] [0] Setup is determining what organization-level operations to perform.[1/1/2009 2:30:48 PM] [0] Setup will run from path 'D:\Setup\ServerRoles\Common'.[1/1/2009 2:30:48 PM] [0] InstallModeDataHandler has 5 DataHandlers[1/1/2009 2:30:48 PM] [0] Setup is determining what organization-level operations to perform.[1/1/2009 2:30:48 PM] [0] Setup will run from path 'D:\Setup\ServerRoles\Common'.[1/1/2009 2:30:48 PM] [0] InstallModeDataHandler has 5 DataHandlers[1/1/2009 2:30:48 PM] [0] RootDataHandler has 1 DataHandlers[1/1/2009 2:30:55 PM] [0] Validating options for the 0 requested roles[1/1/2009 2:30:56 PM] [0] Validating options for the 0 requested roles[1/1/2009 2:30:58 PM] [0] **************[1/1/2009 2:30:58 PM] [0] Setup will run the task 'test-setuphealth'[1/1/2009 2:30:58 PM] [1] Setup launched task 'test-setuphealth -DomainController $null -DownloadConfigurationUpdates $true -ExchangeVersion '8.1.240.6' -Roles 'Bridgehead' -ScanType 'PrecheckInstall' -SetupRoles 'AdminTools','Bridgehead','ClientAccess','Mailbox' -TargetDir 'C:\Program Files\Microsoft\Exchange Server' -ADInitError 'Setup encountered a problem while validating the state of Active Directory: Could not find any Global Catalog in forest sevenlakes.tzo.com.'' [1/1/2009 2:30:58 PM] [1] Beginning processing.[1/1/2009 2:31:03 PM] [1] Beginning processing.[1/1/2009 2:31:03 PM] [1] [ERROR] Could not find any Global Catalog in forest sevenlakes.tzo.com.[1/1/2009 2:31:03 PM] [1] [ERROR] Global catalog not found in forest "sevenlakes.tzo.com".[1/1/2009 2:31:03 PM] [1] Ending processing.[1/1/2009 2:31:04 PM] [1] [ERROR] Setup encountered a problem while validating the state of Active Directory: Could not find any Global Catalog in forest sevenlakes.tzo.com.[1/1/2009 2:31:04 PM] [1] [ERROR] Cannot find at least one global catalog server running Windows Server 2003 Service Pack 1 or later in the local Active Directory site.[1/1/2009 2:31:04 PM] [1] [ERROR] Setup cannot continue because one or more SMTP/Send connectors have invalid settings: Could not find any Global Catalog in forest sevenlakes.tzo.com.[1/1/2009 2:31:04 PM] [1] Ending processing.[1/1/2009 2:31:04 PM] [0] **************[1/1/2009 2:31:04 PM] [0] Setup will run the task 'test-setuphealth'[1/1/2009 2:31:04 PM] [1] Setup launched task 'test-setuphealth -DomainController $null -DownloadConfigurationUpdates $false -ExchangeVersion '8.1.240.6' -Roles 'ClientAccess' -ScanType 'PrecheckInstall' -SetupRoles 'AdminTools','Bridgehead','ClientAccess','Mailbox' -TargetDir 'C:\Program Files\Microsoft\Exchange Server' -IISInstalled $true -ADInitError 'Setup encountered a problem while validating the state of Active Directory: Could not find any Global Catalog in forest sevenlakes.tzo.com.'' [1/1/2009 2:31:04 PM] [1] Beginning processing.[1/1/2009 2:31:07 PM] [1] [ERROR] Setup encountered a problem while validating the state of Active Directory: Could not find any Global Catalog in forest sevenlakes.tzo.com.[1/1/2009 2:31:07 PM] [1] [ERROR] Cannot find at least one global catalog server running Windows Server 2003 Service Pack 1 or later in the local Active Directory site.[1/1/2009 2:31:07 PM] [1] Ending processing.[1/1/2009 2:31:07 PM] [0] **************[1/1/2009 2:31:07 PM] [0] Setup will run the task 'test-setuphealth'[1/1/2009 2:31:07 PM] [1] Setup launched task 'test-setuphealth -DomainController $null -DownloadConfigurationUpdates $false -ExchangeVersion '8.1.240.6' -Roles 'Mailbox' -ScanType 'PrecheckInstall' -SetupRoles 'AdminTools','Bridgehead','ClientAccess','Mailbox' -CreatePublicDB $false -TargetDir 'C:\Program Files\Microsoft\Exchange Server' -IISInstalled $true -ADInitError 'Setup encountered a problem while validating the state of Active Directory: Could not find any Global Catalog in forest sevenlakes.tzo.com.'' [1/1/2009 2:31:07 PM] [1] Beginning processing.[1/1/2009 2:31:09 PM] [1] [ERROR] Setup encountered a problem while validating the state of Active Directory: Could not find any Global Catalog in forest sevenlakes.tzo.com.[1/1/2009 2:31:09 PM] [1] [ERROR] Cannot find at least one global catalog server running Windows Server 2003 Service Pack 1 or later in the local Active Directory site.[1/1/2009 2:31:09 PM] [1] Ending processing.[1/1/2009 2:31:12 PM] [0] End of Setup[1/1/2009 2:31:12 PM] [0] **********************************************
Free Windows Admin Tool Kit Click here and download it now
January 1st, 2009 10:37pm

coulbournc said: I do know the problem is with my existing domain configuration. I isolated the Systemax server, created a duplicate domain, on HV instance 1, and got exchange to install on instance number two on the first try. Everything in the existing domain works flawlessly, so I'm not sure what to make of it.The question is, what the heck is wrong.What do you mean you've duplicated the domain? Now I'm curious to know about DNS and service records. Do you have these domains isolated at a network level? Mike Crowley: MCT, MCSE, MCTS, MCITP: Enterprise Administrator / Messaging Administrator
January 2nd, 2009 7:30pm

I took the new server and installed Hyper-V. I then created a virtual domain controller anda virtual exchange server. I named the domain controller and the exchange server as well as the domain to match the existing production domain.All server instances are server 2008 standard edition. I then prepped the DC and installed exchange and it worked fine.At this point, I've been trying to fix it for a week. I'm going to use exmerge and pull the messages from the original domain and bring them into the new one. Once completed, I'll shut down the original domain and run off the new one. I just do not have any more time to try and resolve the problem.
Free Windows Admin Tool Kit Click here and download it now
January 2nd, 2009 10:18pm

can you look in DNS and verify the gc record is present? (gc._msdcs.DnsForestName)Mike Crowley: MCT, MCSE, MCTS, MCITP: Enterprise Administrator / Messaging Administrator
January 2nd, 2009 10:42pm

Man, I would love to take a poke at your environment to see waht is going on.Can you do a screen shot of your sites and services? See how your subnets are configured and make sure Exchange 2007 is in the same site/subnet range as your domain controllers?How many DCs do you have in your envionrment? Is your domain flat meaning you have one domain or do you have an empty forest root? I'm leaning toward a problem with your AD Sites or DNS. Check the IP config setting for the 07 server and make sure it fits your subnets in your AD sites.Again, you did do a setup /pl and a setup /p right? This will configure legacy exchange permissons and prepare the DC, and you did this as an Enterprise/Schema admin right?BP
Free Windows Admin Tool Kit Click here and download it now
January 2nd, 2009 11:26pm

Hi, Sorry for the delay. I have got the log. There I did not find any special error. The main problem could be the AD deployment in physical machine and virtual machine in Hyper-V. From your previous post, I note that GC is in the virtual server, Microsoft recommends you locate critical server roles on domain controllers that are installed directly on physical hardware. These include Global Catalog servers, Domain Name System (DNS) servers, Flexible Single Master Operations (FSMO) roles and replication bridgeheads. Considerations when hosting Active Directory domain controller in virtual hosting environments http://support.microsoft.com/kb/888794 Running Domain Controllers in Hyper-V http://technet.microsoft.com/en-us/library/dd363553.aspx Besides, for better AD deployment, I recommend you to use Windows Server 2008 forum to get better help. http://social.technet.microsoft.com/Forums/en-US/winserverhyperv/threads/ Regards, Xiu
January 5th, 2009 6:23am

Hi,Just one thing I would like to share here that are able to telnet 3268, Syntax is telnet Server IP 3268.If your telnet is successful that means you GC has no issues.Abhishek
Free Windows Admin Tool Kit Click here and download it now
March 10th, 2009 1:35pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics