Released: June 2021 Quarterly Exchange Updates

Hello m49808 The_Exchange_Team,

it is known that installing CU21/CU10 works in most environments. But here in the thread it is apparent that many upgrades do not work in German environments.

I don't understand that The_Exchange_Team until today is not able to investigate / determine the difference of the setup routines CU20 to CU21 and CU9 to CU10 respectively.

A small personal note, maybe I don't speak for the general public. But:
As a paying Microsoft Enterprise Agreement customer, I am very disappointed with the response time from Microsoft. A Public Sector Goverment colleague has not yet received a solution with his case at Microsoft.

Upgraded 2019 from CU8 over the weekend. schema updates had none of the issues mentioned in this thread. Followed the below.

setup.exe /PrepareSchema /IAcceptExchangeServerLicenseTerms 

setup.exe /PrepareAD /IAcceptExchangeServerLicenseTerms

setup.exe /PrepareAllDomains /IAcceptExchangeServerLicenseTerms

Result of SetupAssist.ps1 for info.
These are the only warnings/errors (except ExecutionPolicy is RemoteSigned)
WARNING: Exchange 2019 AD Level Failed. Mismatch detected.
WARNING: DN Value: 'CN=xx,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=xx,DC=local' - Version: 16756
WARNING: DN Value: 'CN=ms-Exch-Schema-Version-Pt,CN=Schema,CN=Configuration,DC=xx,DC=local' - Version: 17003
WARNING: DN Value: 'CN=Microsoft Exchange System Objects,DC=xx,DC=local' - Version: 13239
I hope this helps somebody have some insight !

PacsoT 

No news about the case ......still under investigation

I had the same /prepareAD error.  I was able to fix it by opening ADSI edit on my DC & migrating to CN=Configuration,DC=<DOMAIN>,DC=<COM>,CN=Services,CN=Microsoft Exchange,CN=<ORGANIZATIONAME>,CN=Hybrid Configuration & changing the security profile on the CN=Hybrid Configuration.  Went to properties & gave network service, exchange & all other keys FULL access.  I then ran /prepareAD and it completed successfully. 

Can across the exact same issue last night, and this thread seems to be the only place where people discuss this error. My org is also English, so probably we can rule out the language part.

GioVin: How is your support ticket holding? Did you got any useful tips?

A little heads up - we have currently a ticket opened with MS as we see MSSyncAppPool crashing around every hour with 5011 WAS error, right after installing CU21 over Exchange 2016 CU20. Still working on the root cause and solution with MS.

I have the identical issue installing CU10 on an up to date CU9 Exchange 2019 servers.  This is also in a hybrid environment.  I have tried all obvious fixes and NONE work.  Come on Microsoft... give us a fix please.

Unfortunately the update doesn't work for us either. We want to update from CU20 to CU21

[07.07.2021 11:07:38.0002] [2] Die Active Directory-Sitzungseinstellungen für 'install-Container' lauten: Vollständige Gesamtstruktur anzeigen: 'True', Konfigurationsdomänencontroller: 'AD01.domain.de', Bevorzugter globaler Katalog: 'AD01.domain.de', Bevorzugte Domänencontroller: '{ AD01.domain.de }'
[07.07.2021 11:07:38.0002] [2] User specified parameters:  -Name:'UM AutoAttendant Container' -DomainController:'AD01.domain.de'
[07.07.2021 11:07:38.0002] [2] Beginning processing install-Container
[07.07.2021 11:07:38.0002] [2] Processing object "UM AutoAttendant Container".
[07.07.2021 11:07:38.0003] [2] Ending processing install-Container
[07.07.2021 11:07:38.0005] [1] Processing component 'CAFE Global AD Configuration' (Globale Clientzugriffseinstellungen werden konfiguriert.).
[07.07.2021 11:07:38.0005] [1] Processing component 'Domain-specific AD Configuration' (Domänen für Exchange werden konfiguriert.).
[07.07.2021 11:07:38.0006] [1] Executing: 
          $createTenantRoot = ($RoleIsDatacenter -or $RoleIsPartnerHosted);
          $createMsoSyncRoot = $RoleIsDatacenter;

          #$RoleDatacenterIsManagementForest is set only in Datacenter deployment; interpret its absense as $false
          [bool]$isManagementForest = ($RoleDatacenterIsManagementForest -eq $true);

          if ($RolePrepareAllDomains)
          {
              initialize-DomainPermissions -AllDomains:$true -CreateTenantRoot:$createTenantRoot -CreateMsoSyncRoot:$createMsoSyncRoot -IsManagementForest:$isManagementForest;
          }
          elseif ($RoleDomain -ne $null)
          {
              initialize-DomainPermissions -Domain $RoleDomain -CreateTenantRoot:$createTenantRoot -CreateMsoSyncRoot:$createMsoSyncRoot -IsManagementForest:$isManagementForest;
          }
          else
          {
              initialize-DomainPermissions -CreateTenantRoot:$createTenantRoot -CreateMsoSyncRoot:$createMsoSyncRoot -IsManagementForest:$isManagementForest;
          }
        
[07.07.2021 11:07:38.0009] [2] Die Active Directory-Sitzungseinstellungen für 'initialize-DomainPermissions' lauten: Vollständige Gesamtstruktur anzeigen: 'True', Konfigurationsdomänencontroller: 'AD01.domain.de', Bevorzugter globaler Katalog: 'AD01.domain.de', Bevorzugte Domänencontroller: '{ AD01.domain.de }'
[07.07.2021 11:07:38.0010] [2] User specified parameters:  -CreateTenantRoot:'False' -CreateMsoSyncRoot:'False' -IsManagementForest:'False'
[07.07.2021 11:07:38.0010] [2] Beginning processing initialize-DomainPermissions
[07.07.2021 11:07:38.0012] [2] Used domain controller AD01.domain.de to read object DC=domain,DC=de.
[07.07.2021 11:07:38.0015] [2] Used domain controller AD01.domain.de to read object CN=Exchange Servers,OU=Microsoft Exchange Security Groups,DC=domain,DC=de.
[07.07.2021 11:07:38.0015] [2] Used domain controller AD01.domain.de to read object CN=Exchange Servers,OU=Microsoft Exchange Security Groups,DC=domain,DC=de.
[07.07.2021 11:07:38.0017] [2] Used domain controller AD01.domain.de to read object CN=Organization Management,OU=Microsoft Exchange Security Groups,DC=domain,DC=de.
[07.07.2021 11:07:38.0017] [2] Used domain controller AD01.domain.de to read object CN=Organization Management,OU=Microsoft Exchange Security Groups,DC=domain,DC=de.
[07.07.2021 11:07:38.0019] [2] Used domain controller AD01.domain.de to read object CN=Public Folder Management,OU=Microsoft Exchange Security Groups,DC=domain,DC=de.
[07.07.2021 11:07:38.0019] [2] Used domain controller AD01.domain.de to read object CN=Public Folder Management,OU=Microsoft Exchange Security Groups,DC=domain,DC=de.
[07.07.2021 11:07:38.0021] [2] Used domain controller AD01.domain.de to read object CN=Exchange Trusted Subsystem,OU=Microsoft Exchange Security Groups,DC=domain,DC=de.
[07.07.2021 11:07:38.0021] [2] Used domain controller AD01.domain.de to read object CN=Exchange Trusted Subsystem,OU=Microsoft Exchange Security Groups,DC=domain,DC=de.
[07.07.2021 11:07:38.0022] [2] Used domain controller AD01.domain.de to read object CN=Exchange Windows Permissions,OU=Microsoft Exchange Security Groups,DC=domain,DC=de.
[07.07.2021 11:07:38.0022] [2] Used domain controller AD01.domain.de to read object CN=Exchange Windows Permissions,OU=Microsoft Exchange Security Groups,DC=domain,DC=de.
[07.07.2021 11:07:38.0025] [2] Used domain controller AD01.domain.de to read object CN=Domänen-Benutzer,CN=Users,DC=domain,DC=de.
[07.07.2021 11:07:38.0027] [2] Used domain controller AD01.domain.de to read object CN=Delegated Setup,OU=Microsoft Exchange Security Groups,DC=domain,DC=de.
[07.07.2021 11:07:38.0027] [2] Used domain controller AD01.domain.de to read object CN=Delegated Setup,OU=Microsoft Exchange Security Groups,DC=domain,DC=de.
[07.07.2021 11:07:38.0035] [2] Used domain controller AD01.domain.de to read object DC=domain,DC=de.
[07.07.2021 11:07:38.0082] [2] Used domain controller AD01.domain.de to read object CN=AdminSDHolder,CN=System,DC=domain,DC=de.
[07.07.2021 11:07:38.0091] [2] [ERROR] Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.
[07.07.2021 11:07:38.0092] [2] [WARNING] An unexpected error has occurred and a Watson dump is being generated: Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.
[07.07.2021 11:07:39.0174] [1] The following 1 error(s) occurred during task execution:
[07.07.2021 11:07:39.0174] [1] 0.  ErrorRecord: Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.
[07.07.2021 11:07:39.0174] [1] 0.  ErrorRecord: System.NullReferenceException: Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.
   bei Microsoft.Exchange.Management.Tasks.SetupTaskBase.LogReadObject(ADRawEntry obj)
   bei Microsoft.Exchange.Management.Tasks.InitializeDomainPermissions.InternalProcessRecord()
   bei Microsoft.Exchange.Configuration.Tasks.Task.<ProcessRecord>b__91_1()
   bei Microsoft.Exchange.Configuration.Tasks.Task.InvokeRetryableFunc(String funcName, Action func, Boolean terminatePipelineIfFailed)
   bei Microsoft.Exchange.Configuration.Tasks.Task.ProcessTaskStage(TaskStage taskStage, Action initFunc, Action mainFunc, Action completeFunc)
   bei Microsoft.Exchange.Configuration.Tasks.Task.ProcessRecord()
   bei System.Management.Automation.CommandProcessor.ProcessRecord()
[07.07.2021 11:07:39.0176] [1] [ERROR] The following error was generated when "$error.Clear(); 
          $createTenantRoot = ($RoleIsDatacenter -or $RoleIsPartnerHosted);
          $createMsoSyncRoot = $RoleIsDatacenter;

          #$RoleDatacenterIsManagementForest is set only in Datacenter deployment; interpret its absense as $false
          [bool]$isManagementForest = ($RoleDatacenterIsManagementForest -eq $true);

          if ($RolePrepareAllDomains)
          {
              initialize-DomainPermissions -AllDomains:$true -CreateTenantRoot:$createTenantRoot -CreateMsoSyncRoot:$createMsoSyncRoot -IsManagementForest:$isManagementForest;
          }
          elseif ($RoleDomain -ne $null)
          {
              initialize-DomainPermissions -Domain $RoleDomain -CreateTenantRoot:$createTenantRoot -CreateMsoSyncRoot:$createMsoSyncRoot -IsManagementForest:$isManagementForest;
          }
          else
          {
              initialize-DomainPermissions -CreateTenantRoot:$createTenantRoot -CreateMsoSyncRoot:$createMsoSyncRoot -IsManagementForest:$isManagementForest;
          }
        " was run: "System.NullReferenceException: Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.
   bei Microsoft.Exchange.Management.Tasks.SetupTaskBase.LogReadObject(ADRawEntry obj)
   bei Microsoft.Exchange.Management.Tasks.InitializeDomainPermissions.InternalProcessRecord()
   bei Microsoft.Exchange.Configuration.Tasks.Task.<ProcessRecord>b__91_1()
   bei Microsoft.Exchange.Configuration.Tasks.Task.InvokeRetryableFunc(String funcName, Action func, Boolean terminatePipelineIfFailed)
   bei Microsoft.Exchange.Configuration.Tasks.Task.ProcessTaskStage(TaskStage taskStage, Action initFunc, Action mainFunc, Action completeFunc)
   bei Microsoft.Exchange.Configuration.Tasks.Task.ProcessRecord()
   bei System.Management.Automation.CommandProcessor.ProcessRecord()".
[07.07.2021 11:07:39.0177] [1] [ERROR] Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.
[07.07.2021 11:07:39.0177] [1] [ERROR-REFERENCE] Id=DomainGlobalConfig___27a706ffe123425f9ee60cb02b930e81 Component=EXCHANGE14:\Current\Release\Shared\Datacenter\Setup
[07.07.2021 11:07:39.0177] [1] Setup is stopping now because of one or more critical errors.
[07.07.2021 11:07:39.0177] [1] Finished executing component tasks.
[07.07.2021 11:07:39.0187] [1] Ending processing Install-ExchangeOrganization
[07.07.2021 11:09:20.0967] [0] CurrentResult setupbase.maincore:396: 0
[07.07.2021 11:09:20.0968] [0] End of Setup
[07.07.2021 11:09:20.0968] [0] **********************************************

LukasSMSFT 

[PS] C:\Scripts>.\SetupAssist.ps1
User is an administrator.
WARNUNG: User is not a member of Domain Admins.
WARNUNG: User is not a member of Schema Admins. - Only required if doing a Schema Update
WARNUNG: User is not a member of Enterprise Admins. - Only required if doing a Schema Update or PrepareAD or PrepareDomain
WARNUNG: User is not a member of Organization Management.
WARNUNG: ExecutionPolicy is RemoteSigned
No installer packages missing.
Download Visual C++ 2012 Redistributable Package and install: https://www.microsoft.com/en-us/download/details.aspx?id=30679
No other PowerShell instances were detected.
No reboot pending.
All Critical Mailboxes have valid HomeMDB values
WARNUNG: Exchange 2019 AD Level Failed. Mismatch detected.
WARNUNG: DN Value: 'CN=Stadt intern,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=intern,DC=de' - Version: 16220
WARNUNG: DN Value: 'CN=ms-Exch-Schema-Version-Pt,CN=Schema,CN=Configuration,DC=intern,DC=de' - Version: 17003
WARNUNG: DN Value: 'CN=Microsoft Exchange System Objects,DC=intern,DC=de' - Version: 13240
WARNUNG: More Info: https://docs.microsoft.com/en-us/Exchange/plan-and-deploy/prepare-ad-and-domains?view=exchserver-2019
System.Management.Automation.RuntimeException: Es ist nicht möglich, einen Index auf ein NULL-Array anzuwenden.
   bei System.Management.Automation.ExceptionHandlingOps.CheckActionPreference(FunctionContext funcContext, Exception exception)
   bei System.Management.Automation.Interpreter.ActionCallInstruction`2.Run(InterpretedFrame frame)
   bei System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(InterpretedFrame frame)
   bei System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(InterpretedFrame frame)
bei Write-PrepareADInfo, C:\Scripts\SetupAssist.ps1: Zeile 236
bei Write-Mismatch, C:\Scripts\SetupAssist.ps1: Zeile 334
bei Test-ExchangeAdSetupObjects, C:\Scripts\SetupAssist.ps1: Zeile 452
bei MainUse, C:\Scripts\SetupAssist.ps1: Zeile 1761
bei Main, C:\Scripts\SetupAssist.ps1: Zeile 1814
bei <ScriptBlock>, C:\Scripts\SetupAssist.ps1: Zeile 1828
bei <ScriptBlock>, <Keine Datei>: Zeile 1
WARNUNG: Ran into an issue with the script. If possible please email 'ExToolsFeedback@microsoft.com' of the issue that you are facing

The script does not work properly.
User is member of domain admin (intern\administrator).
User is member of Schema Admin.
User is a member of the Enterprise Admin.
User is a member of Organization Management.
Visual C++ 2012 Redistributable Package is installed and up-to-date.