Exchange setup error: the attribute () points to an invalid DN or a deleted object

 Issue:

we closed the last exchange server on Prem, and run a script to delete the AD remnant,
when we try to download Exchange Mangement tools we get the following error:

The well-known object entry B:32:A1C2016C84D003458132789127B84:CN=Exchange Servers\0ADEL:b2360aad-5e45-40ae-a52a-22397689104a,CN=Deleted Objects,DC=contoso,DC=lab on the otherWellKnownObjects attribute in the container object CN=Configuration,DC=contoso,DC=lab points to an invalid DN or a deleted object.  Remove the entry, and then rerun the task.

Cause:

After deletion of ADSI remnants of exchange server, some attribute transferred to deleted object container but is still added to otherWellKnownObjects attribute.

Solution:

1. Log on a Domain Controller with Domain Admin permissions
2. Run ldp.exe -- the LDAP GUI pops up
3. Click on the Connection menu item and choose the "Connect" item. Leave everything as it is. DO NOT ENTER THE SERVER. Click OK
The right side panel populates with domain info.
4. Click on the Connection menu item and choose the "Bind" item. Make sure that 'Bind as currently logged on user' radio button is selected (it is the default option). Click OK

5. Click on the 'View' Menu item and choose 'Tree' > 'Tree View' > BaseDN drop down menu. Choose CN=Configuration,DC=contoso,DC=lab same as the one mentioned in the error message.The Configuration context shows up on the Left Side Panel
6. Expand the Configuration Context by clicking on the + sign
7. Choose CN=Configuration,DC=contoso,DC=lab and doubleclick to expand it.
8. Right-Click on CN=Configuration,DC=contoso,DC=lab and choose 'Modify'. 
In the Edit Entry Attribute type: 
otherWellKnownObjects
In the Operation Radio Button Box choose 'Delete'
On the right panel, look for otherWellKnownObjects in the information generated by double-clicking 'CN=Configuration,DC=contoso,DC=lab
Identify the entry to remove. It starts with B: and ends with ";" (which does not need to be included). In this example it is B:32:A1C2016C84D003458132789127B84:CN=Exchange Servers\0ADEL:b2360aad-5e45-40ae-a52a-22397689104a,CN=Deleted Objects,DC=contoso,DC=lab
Enter it in the "Values" text box.
Hit the Enter button
The Entry list is populated with an entry starting with: "[DELETE]otherWellKnownObjects:B:32:..."
Select it.
Hit the Run Button.
If the Right Side panel does not show an error message, it means that the operation was successful. 
9. Exit LDP.exe 
10. On the Exchange server, run again:
e:\setup.exe /PrepareAD /IAcceptExchangeServerLicenseTerms
This time the operation should be successful.


Other information:

The paths are color coded, and can be replaced from the error to the solution.


Comments

Popular posts from this blog

Can't find msexchHideFromAddressLists Attribute

Outlook on prem prompts for O365 Password

After March24 SU Search issue in Outlook (cached mode)