Exchange CU23 install fails step 1

Question

has anyone come across this error during setup of Exchange 2013 CU23?

FAILEDAT STEP 1 OF 18

Error: The following error was generated when "$error.Clear(); initialize-ExchangeUniversalGroups -DomainController $RoleDomainController -ActiveDirectorySplitPermissions $RoleActiveDirectorySplitPermissions

" was run: "Microsoft.Exchange.Management.Tasks.InvalidWKObjectTargetException: The well-known object entry with the GUID "bec6ddb3-3b2a-4be8-97eb-2dce9477e389", which is on the "CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=DOMAIN,DC=ca" container object's otherWellKnownObjects attribute, refers to a group "CN=Help Desk,OU=Information Technology,DC=DOMAIN,DC=ca" of the wrong group type. Either delete the well-known object entry, or promote the target object to "Universal, SecurityEnabled". at Microsoft.Exchange.Configuration.Tasks.Task.ThrowError(Exception exception, ErrorCategory errorCategory, Object target, String helpUrl) at Microsoft.Exchange.Management.Tasks.InitializeExchangeUniversalGroups.CreateGroup(ADOrganizationalUnit usgContainer, String groupName, Int32 groupId, Guid wkGuid, String groupDescription, GroupTypeFlags groupType, Boolean createAsRoleGroup) at Microsoft.Exchange.Management.Tasks.InitializeExchangeUniversalGroups.CreateRoleGroup(ADOrganizationalUnit usgContainer, RoleGroupDefinition roleGroup) at Microsoft.Exchange.Management.Tasks.InitializeExchangeUniversalGroups.CreateAndValidateRoleGroups(ADOrganizationalUnit usgContainer, RoleGroupCollection roleGroups) at Microsoft.Exchange.Management.Tasks.InitializeExchangeUniversalGroups.InternalProcessRecord() at Microsoft.Exchange.Configuration.Tasks.Task.<ProcessRecord>b__b() at Microsoft.Exchange.Configuration.Tasks.Task.InvokeRetryableFunc(String funcName, Action func, Boolean terminatePipelineIfFailed)".

Answer 1

Hi @dirkdigs ,

was run: "Microsoft.Exchange.Management.Tasks.InvalidWKObjectTargetException: The well-known object entry with the GUID "bec6ddb3-3b2a-4be8-97eb-2dce9477e389", which is on the "CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=DOMAIN,DC=ca" container object's otherWellKnownObjects attribute, refers to a group "CN=Help Desk,OU=Information Technology,DC=DOMAIN,DC=ca" of the wrong group type. Either delete the well-known object entry, or promote the target object to "Universal, SecurityEnabled".

According to the error information, please open the ADUC, and enable Advanced Features, locate to Microsoft Exchange Security Groups, right-click Help Desk.
Please make sure the following points:

1. It's an Universal, SecurityEnabled group.
2. The otherWellKnownObjects is empty.
   
   

----------

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.