DAG2016 cannot add members

Question

DAG2016 cannot add members

Ozz Lioi 41

When I try to add member servers to this brand new DAG, I get the following error.
"A server-side database availability group administrative operation failed. Error The operation failed. CreateCluster errors may result from incorrectly configured static addresses. Error: An error occurred while attempting a cluster operation. Error: Cluster API failed: "CreateCluster() failed with 0x5. Error: Access is denied"."

Servers are as follow:
Windows Server 2016 Standard
16 GB RAM

Exchange 2016
Mailbox
Version 15.1 ‎(Build 2176.2)‎
Enterprise

Both have IP addresses in different subnets and static IPs.

Jame Xu-MSFT 4,191 Reputation points

2022-06-24T06:33:34.993+00:00

Hi, I'm here to confirm with you if your issue has been resolved. If the problem is successfully solved, you can share your solution and mark them or the helpful reply as answer, this will make answer searching in the forum easier and be beneficial to other community members as well.
Ozz Lioi 41 Reputation points

2022-06-24T15:01:46.337+00:00

Not resolved yet, I lost access to the EAC and the server still does have issues connecting to the cluster.
I have reopened a ticket we had with support to get EAC working again.
Once that is resolved I will focus on adding the server to DAG. I did follow all the steps above including rebuilding the DAG with new name and creating the CNO manually then adding the permissions required.
Jame Xu-MSFT 4,191 Reputation points

2022-06-29T09:21:46.423+00:00

Hi @Ozz Lioi ,
You said to deal with the problem of EAC, is it solved now? Is there progress on the issue of DAG?
Ozz Lioi 41 Reputation points

2022-06-29T15:27:49.767+00:00

Sorry for not being clear.
The EAC came back to life on the server EX9 and I was able to make the DAG work using the changes that were proposed here, but had to manually create the cluster in Failover Cluster Manager, then the DAG accepted both servers. Thank you all for the assistance, saved me having to open a new ticket!
Emad Al Zohaily (ADNOC Global Trading) 0 Reputation points

2024-01-29T11:21:30.6266667+00:00

i disabled the CNO in AD and added both exchange servers computer account with full permission and Exchange trusted subsystems then added the nodes successfully.
Emad Al Zohaily (ADNOC Global Trading) 0 Reputation points

2024-01-29T11:23:44.3466667+00:00

added full permission for both mailbox servers computers and Exchange trusted subsystems to the security of CNO in AD (just to clarify).

Accepted answer

4 additional answers

Your answer

Jame Xu-MSFT 4,191 Reputation points

2022-06-24T06:33:34.993+00:00

Hi, I'm here to confirm with you if your issue has been resolved. If the problem is successfully solved, you can share your solution and mark them or the helpful reply as answer, this will make answer searching in the forum easier and be beneficial to other community members as well.
Ozz Lioi 41 Reputation points

2022-06-24T15:01:46.337+00:00

Not resolved yet, I lost access to the EAC and the server still does have issues connecting to the cluster.
I have reopened a ticket we had with support to get EAC working again.
Once that is resolved I will focus on adding the server to DAG. I did follow all the steps above including rebuilding the DAG with new name and creating the CNO manually then adding the permissions required.
Jame Xu-MSFT 4,191 Reputation points

2022-06-29T09:21:46.423+00:00

Hi @Ozz Lioi ,
You said to deal with the problem of EAC, is it solved now? Is there progress on the issue of DAG?
Ozz Lioi 41 Reputation points

2022-06-29T15:27:49.767+00:00

Sorry for not being clear.
The EAC came back to life on the server EX9 and I was able to make the DAG work using the changes that were proposed here, but had to manually create the cluster in Failover Cluster Manager, then the DAG accepted both servers. Thank you all for the assistance, saved me having to open a new ticket!
Emad Al Zohaily (ADNOC Global Trading) 0 Reputation points

2024-01-29T11:21:30.6266667+00:00

i disabled the CNO in AD and added both exchange servers computer account with full permission and Exchange trusted subsystems then added the nodes successfully.
Emad Al Zohaily (ADNOC Global Trading) 0 Reputation points

2024-01-29T11:23:44.3466667+00:00

added full permission for both mailbox servers computers and Exchange trusted subsystems to the security of CNO in AD (just to clarify).

Answer 1

Hi @ OzzLioi-3713,
I checked some materials and found the same error information. The problem may be as @Andy David - MVP said . Here is a forum post and corresponding solutions:
https://social.technet.microsoft.com/Forums/WINDOWS/en-US/e426dc16-5733-4d90-9c3c-85efaedbd855/dag-createcluster-errors?forum=exchangesvravailabilityandisasterrecovery
https://learn.microsoft.com/en-us/Exchange/high-availability/manage-ha/pre-stage-dag-cnos?redirectedfrom=MSDN&view=exchserver-2019
In addition, there are two similar cases for your reference:

https://bhargavs.com/index.php/2012/11/26/createcluster-failed-with-0x5-adding-members-to-dag-in-exchange-2013/

https://adamtheautomator.com/exchange-database-availability-group/
Microsoft provides third-party contact information to help you find additional information about this topic. This contact information may change without notice. Microsoft does not guarantee the accuracy of third-party contact information.

If an Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Andy David - MVP 157.8K MVP Volunteer Moderator

Is the cluster object created?
Can you verify that Exchange Trusted Subsystem group has full permissions to it?

Answer 3

"A server-side database availability group administrative operation failed. Error The operation failed. CreateCluster errors may result from incorrectly configured static addresses. Error: An error occurred while attempting a cluster operation. Error: Cluster API failed: "AddClusterNode() (MaxPercentage=12) failed with 0x800706d3. Error: The authentication service is unknown". [Server: server-fqdn]"

After adding full permissions on the DAG object it still errors out with the above error.
Thank you so much for taking the time to answer.

Answer 4

I missed one detail, apparently it added one server only.
Once I tried to add the second server this error came up:
A server-side database availability group administrative operation failed. Error The operation failed. CreateCluster errors may result from incorrectly configured static addresses. Error: An error occurred while attempting a cluster operation. Error: Cluster API failed: "AddClusterNode() (MaxPercentage=12) failed with 0x800706d3. Error: The authentication service is unknown". [Server: server-fqdn]

Answer 5

Ozz Lioi 41

Now it seems like this broke EAC on one of the servers...
No access via EAC.

Share via

DAG2016 cannot add members

4 additional answers

Your answer