Exchange | Exchange Server | Management
The administration and maintenance of Microsoft Exchange Server to ensure secure, reliable, and efficient email and collaboration services across an organization.
Exchange 2016 Mailbox Database Redundancy and RPC issues after CU23 install
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(41.6, 82%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA5%3C/text%3E%3C/svg%3E)
AdamBarnes-5693
0
Reputation points
We have two Exchange 2016 servers in a DAG running on Server 2016. We installed CU23 this weekend and have been experiencing some issues since then. Initially we were unable to activate any databases on server 2 and were getting the following error:
An Active Manager operation failed. Error: The database action failed. Error: An error occurred while trying to validate the specified database copy for possible activation. Error: server2: A server-side administrative operation has failed. The Microsoft Exchange Replication service may not be running on server server2.mydomain.local. Specific RPC error message: Error 0x6ba (The RPC server is unavailable) from cli_RpcsGetCopyStatusWithHealthState [Server: server2.mydomain.local] [Database: My DB02, Server: server1.mydomain.local]
After restarting the Microsoft Exchange replication service on both servers I was able to activate databases on server 2 again but once they had been activated on that server, users with mailboxes on those databases were not able to open Outlook. Activating all of the mailboxes on server 1 and blocking activation on server 2 made them accessible again.
There are repeated Security-Kerberos errors in the System log on server 1:
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server server1$. The target name used was HTTP/server2.mydomain.local. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Ensure that the target SPN is only registered on the account used by the server. This error can also happen if the target service account password is different than what is configured on the Kerberos Key Distribution Center for that target service. Ensure that the service on the server and the KDC are both configured to use the same password. If the server name is not fully qualified, and the target domain (mydomain.LOCAL) is different from the client domain (mydomain.LOCAL), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.
The SPNs look OK to me and there are no duplicates.
Get-MailboxDatabaseCopyStatus shows that there are healthy copies of all databases on both servers but there are numerous errors in the Application log on server 1 with ID 4374 from MSExchangeRepl saying:
Database availability health check failed.
Database copy: My DB04
Redundancy count: 1
Error: There were database availability check failures for database 'My DB04' that may be lowering its availability. Availability Count: 1. Expected Availability Count: 2. Detailed error(s):
server2:
The RPC to retrieve the status of database copy 'My DB04\Server2' failed. Error: A server-side administrative operation has failed. The Microsoft Exchange Replication service may not be running on server server2.mydomain.local. Specific RPC error message: Error 0x6ba (The RPC server is unavailable) from RpccGetCopyStatusEx4 [Server: server2.mydomain.local]
Any ideas on what could be causing this and making us unable to activate mailboxdatabases on server2?
Exchange | Exchange Server | Management
{count} votes
-
Andy David - MVP 159.7K Reputation points MVP Volunteer Moderator2023-03-13T16:45:49.9466667+00:00 Can you check server and cluster health? Get-ServerComponentState -Identity Exch1 test-servicehealth <server> Test-ReplicationHealth -Identity MBX1 -
Xuyan Ding - MSFT 7,601 Reputation points2023-03-17T10:14:16.7366667+00:00 Hi @AdamBarnes-5693 ,
Is there any update on this thread?
Have you performed the above tests? How is the result?
If you have any progress you can feel free to post back.
-
Xuyan Ding - MSFT 7,601 Reputation points
2023-03-21T09:50:11.3166667+00:00 Hi @AdamBarnes-5693 ,
I noticed that it has been a while, are you still working on this issue now? Have you got your issue fixed yet?
If the issue still continues and you still would like to further research about that, it would be so nice of you if you can share your current process with me.
-
AdamBarnes-5693 0 Reputation points
2023-05-13T09:58:04.5533333+00:00 Hi,
Thanks for your responses. I did not get any notification that anybody had responded.
The original issue was fixed by a couple of reboots, not sure what had caused it. I have just installed updates again this month and the same thing has happened again and rebooting has not done any good.
Get-ServerComponentState shows all active for both servers except ForwardSyncDaemon and ProvisioningRps
Test-ServiceHealth shows RequiredServicesRunning on all roles for both servers
Test-ReplicationHealth shows pass result for all checks on both servers.
Sign in to comment
Sign in to answer