Hi there,
After migrating from websitepanel to solidcp I can not create organization units anymore.
My environment:
1 Exchange 2013 (CU12)
1 DC
1 Portal / SQL Server
The error when creating a new organizational unit is: Server what unable to processRequest. —> Execution result does not contain any object
When I look at my logs from the Exchange I see:
“”Microsoft.Exchange.Data.ApplicationLogic.AuditLogAccessDeniedException: The requesting account doesn’t have permission to access the audit log. —> System.Web.Services.Protocols.SoapException: Das anfordernde Konto ist nicht berechtigt, Token zu serialisieren.
at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall)
at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
at Microsoft.Exchange.SoapWebClient.EWS.ExchangeServiceBinding.GetFolder(GetFolderType GetFolder1)
at Microsoft.Exchange.Data.ApplicationLogic.EwsAuditClient.CallEwsWithRetries(LID lid, Func`1 delegateEwsCall, Func`3 responseMessageProcessor, Func`3 responseErrorProcessor)
— End of inner exception stack trace —
at Microsoft.Exchange.Data.ApplicationLogic.EwsAuditClient.CallEwsWithRetries(LID lid, Func`1 delegateEwsCall, Func`3 responseMessageProcessor, Func`3 responseErrorProcessor)
at Microsoft.Exchange.Data.ApplicationLogic.EwsAuditClient.CheckAndCreateWellKnownFolder(DistinguishedFolderIdNameType parentFolder, DistinguishedFolderIdNameType targetFolder, FolderIdType& targetFolderId)
at Microsoft.Exchange.ProvisioningAgent.EwsAuditLogger.InitializeAdminAuditLogsFolder()
at Microsoft.Exchange.ProvisioningAgent.AuditLoggerFactory.Create(ExchangePrincipal principal, ArbitrationMailboxStatus status)
at Microsoft.Exchange.ProvisioningAgent.ConfigWrapper.get_MailboxLogger()
at Microsoft.Exchange.ProvisioningAgent.AdminLogProvisioningHandler.WriteAuditRecord(Stopwatch stopwatch) ”
I’ve checked The permissions but they seem to be ok. Further I went through the guides provided here and followed all the steps. Unfortunately no success.
Strangely it works with existing users / customers and creating new e-mail addresses for them. If I do so and create new mailboxes and so on, I can see the new usern in active directoy and can use the mailbox but when I add a new customer (which works) an then create the organization it fails. Also the organisation unit in active directory is not been created then.
Any help I would be grateful
Thanks in advance
Hello,
If it works on existing organizations but can not create new organizations the settings is most likely different.
If you come from older Websitepanels: do know that in the later wsp 2.1's Active Directory Powershell and Group Policy management are required mmc's to function.
Das anfordernde Konto ist nicht berechtigt, Token zu serialisieren. <-- does give the indication that your current Hosted ORg user lacks some form of permissions.
You can consult the Event log for further details or additional warnings.
Regards,
Marco
Hey,
thanks for your quick reply! I upgraded from wsp 2.1 regarding your migration guide.
As mentioned the part of log I posted was found in exchange event viewer. SolidCP portal only says "execution result does not contain and object".
I checked the permissions but they seem correct (dom-admins, administrators, enterprise admins, dom-users, iis_user, organization-mgmt) for my wspserver server.
'Sadly' I could not find other failures in the event viewer.
Quiet unsure where else I could do a look at. But I'm gonna check that problem tomorrow again to see if I'll get it to work.
Thanks again so far.
Greetings,
mark
Hey,
thanks for your quick reply! I upgraded from wsp 2.1 regarding your migration guide.
As mentioned the part of log I posted was found in exchange event viewer. SolidCP portal only says "execution result does not contain and object".
I checked the permissions but they seem correct (dom-admins, administrators, enterprise admins, dom-users, iis_user, organization-mgmt) for my wspserver server.
'Sadly' I could not find other failures in the event viewer.
Quiet unsure where else I could do a look at. But I'm gonna check that problem tomorrow again to see if I'll get it to work.
Thanks again so far.
Greetings,
mark
No solution so far...
When I check the application logs (SolidCP) of exchange I can see a warning:
"WARNING: HostedSolution Invoke error: The specified module 'grouppolicy' was not loaded because no valid module file was found in any module directory."
andeverytime I try create an organisation it generates an error that says:
"Can't CreateOrganization 'Hosted Organizations' provider
System.DirectoryServices.DirectoryServicesCOMException (0x8007202B): Eine Referenzauswertung wurde vom Server zurückgesendet.
at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)
at System.DirectoryServices.DirectoryEntry.Exists(String path)
at SolidCP.Providers.HostedSolution.OrganizationProvider.OrganizationExistsInternal(String organizationId)
at SolidCP.Server.Organizations.OrganizationExists(String organizationId)"
Maybe that could be a hint for one of you? I'm lost an dont know where else to look and what to try. For possible conclusions I'd be very thankful 🙂
Well, a bit earlier i mentioned that the mmc Group policy management + AD Powershell is required, did you install them yet? (as from the warning above it doesn't appear like it 😉 )
for the rest it's rather a generic error so hard to tell whats not correct, but it seems to fall over making the OU --> So i would check if you setup the Hosted Organization service correctly.
your ad server ad1.mydomain.local , the OU (Capital Sensetive) CustomersExchange (for example) Active Directory settings -> root domain (mydomain.local) auth none.
thats about it
"your ad server ad1.mydomain.local , the OU (Capital Sensetive) CustomersExchange (for example) Active Directory settings -> root domain (mydomain.local) auth non" -> seems correct
"Well, a bit earlier i mentioned that the mmc Group policy management + AD Powershell is required, did you install them yet?" -> I feel kind of stupid to ask but are they not installed anyway? Of course I can open powershell and grup policy management on every server?! Before migrating things also the creation of organisations worked.. Either I'm kind of blind at the moment or I missed a huge thing in your tutorials. Anyway I'm just gonna ask: How do I install them?
But you are right, it fails to create the ou.
Again thank you very much for help!
no group policy management and Active Directory powershell is not installed by default, the group policy management is installed on the AD DC by default but generally not on any other server.
Before you migrated it would of been depending on which version of wsp 2.1 you had only in the later versions (700 and up i think) it started to require those things.
To install them you just open up the Add roles and features screen --> click next on roles --> and find Group policy management under features, the Active Directory powershell is below Remote tools or something like it --> Active Directory section then Active Directory Powershell
Still no luck for me after installing both components. Guess I'm gonna try restarting my servers tonight.
