Wednesday 8 February 2017

Exchange 2016 Installer Issue

ERROR :
Error:
The following error was generated when "$error.Clear();
Set-LocalPermissions

" was run: "System.Security.AccessControl.PrivilegeNotHeldException: The process does not possess the 'SeSecurityPrivilege' privilege which is required for this operation.
   at Microsoft.Exchange.Configuration.Tasks.Task.ThrowError(Exception exception, ErrorCategory errorCategory, Object target, String helpUrl)
   at Microsoft.Exchange.Configuration.Tasks.Task.WriteError(Exception exception, ErrorCategory category, Object target)
   at Microsoft.Exchange.Management.Deployment.SetLocalPermissions.InternalProcessRecord()
   at Microsoft.Exchange.Configuration.Tasks.Task.<ProcessRecord>b__c()
   at Microsoft.Exchange.Configuration.Tasks.Task.InvokeRetryableFunc(String funcName, Action func, Boolean terminatePipelineIfFailed)".



I faced this error during the Exchange 2016 Installation:
The issue is due to a permission which was not given to the user i was using to install Exchange 2016.
The permission was controlled by GPO Policy.
The exact permission was "Manage Auditing & Security Log", you can find it by going to Group Policy Editor "Computer Configuration->Windows Setting -> Security Setting-> Local Policies -> User Rights Assignments -> Manage Auditing & Security Log"

SOLUTION:
Go to the Domain Controller 
Open the Default Policy or the Policy which is changing this security setting described above, and add the user to the list of allowed users. 

Once done, add update the group policy on the Exchange Server and restart your PC. 
The Exchange Installation should work fine.



6 comments:

  1. I tried this and still didn't work. However, on a whim, I went to account management and turned off User Account Control. Voila! That did it.

    ReplyDelete
  2. worked - just gpupdate /force on exchange server and restart this system

    ReplyDelete
  3. Side-note, if you're just trying to add management console and tools to your Windows 10 PC, and you're getting this error, you'll have to run it as an account with those permissions the OP mentioned. If you have a Domain Admin account (you're managing exchange, this isn't out of the ordinary), run it as that for a successfull installation (providing that domain admin account is in the proper groups the OP mentioned).

    ReplyDelete
  4. I think that everything posted was actually very reasonable. But, think about this, suppose you were to write a killer title? I am not suggesting your information is not good., however suppose you added a headline that grabbed people's attention? I mean %BLOG_TITLE% is kinda plain. You ought to glance at Yahoo's home page and note how they write article titles to grab viewers interested. You might add a related video or a picture or two to get people excited about what you've written. Just my opinion, it could bring your website a little livelier.

    ReplyDelete
  5. WOW just what I was searching for. Came here by searching for %keyword%

    ReplyDelete