Forum Discussion

Exchange160's avatar
Exchange160
Copper Contributor
Dec 19, 2023

Alternate Service Account Error

I have a really strange error on one of the CAS servers when I went to setup the Alternate Service Account copying from the first CAS server.  The configuration looks good on the first source

 

Get-ClientAccessService <SERVER> -IncludeAlternateServiceAccountCredentialStatus | Format-List Name, AlternateServiceAccountConfiguration


Name :<SERVER>
AlternateServiceAccountConfiguration : Latest: 12/19/2023 10:20:34 AM, <DOMAIN>\EXCH2019ASA$
Previous: 12/19/2023 10:18:24 AM, <DOMAIN>\EXCH2019ASA$

 

When I try to run the script on the second CAS server I get the errors below?

>.\RollAlternateServiceAccountPassword.ps1 -ToSpecificServers <target server>-CopyFrom <source server>

 

========== Starting at 12/19/2023 11:47:15 ==========
Failed to read Alternate Service Account configuration data from the registry subtree
HLKM\SYSTEM\CurrentControlSet\Services\MSExchangeServiceHost\ServiceAccounts.
+ CategoryInfo : NotSpecified: (:) [Get-ClientAccessService], DataSourceTransientException
+ FullyQualifiedErrorId : [Server=<TARGET HOST>,RequestId=3bb6646b-cb6d-4c73-a5a9-c0490e6f3e9a,TimeStamp=12/19/2023 4
:47:17 PM] [FailureCategory=Cmdlet-DataSourceTransientException] F21F33FE,Microsoft.Exchange.Management.SystemConf
igurationTasks.GetClientAccessService
+ PSComputerName : <fqdn of target host>

RecordErrors : Couldn't figure out valid servers from the specified destination scope. Check your parameters and try
again.
At C:\Program Files\Microsoft\Exchange Server\V15\Scripts\RollAlternateServiceAccountPassword.ps1:1000 char:1
+ RecordErrors -ExceptionsOnly { $script:success = Body }
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [Write-Error], WriteErrorException
+ FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,RecordErrors

 

I'm out of ideas and my google searches can't seem to find anything about this error?

 

2 Replies

  • Andres-Bohren's avatar
    Andres-Bohren
    Steel Contributor

    Hi Exchange160 

    Are you able to read with Remote Registry from the Target to the Source Server this Registry Key?

    HLKM\SYSTEM\CurrentControlSet\Services\MSExchangeServiceHost\ServiceAccounts

     

    Is the Account you're using on the "Local Administrators" Group of the Source Server?

     

    Regards

    Andres

    • Exchange160's avatar
      Exchange160
      Copper Contributor

      Andres-Bohren Thanks for the suggestion.  The answer to both of those questions is yes.  After trying for several hours to resolve the issue, I decided it was just as easy to deploy another Exchange server and decommission that one.  All is working now.

Resources