Forum Discussion
Exchange160
Dec 19, 2023Copper Contributor
Alternate Service Account Error
I have a really strange error on one of the CAS servers when I went to setup the Alternate Service Account copying from the first CAS server. The configuration looks good on the first source
Get-ClientAccessService <SERVER> -IncludeAlternateServiceAccountCredentialStatus | Format-List Name, AlternateServiceAccountConfiguration
Name :<SERVER>
AlternateServiceAccountConfiguration : Latest: 12/19/2023 10:20:34 AM, <DOMAIN>\EXCH2019ASA$
Previous: 12/19/2023 10:18:24 AM, <DOMAIN>\EXCH2019ASA$
When I try to run the script on the second CAS server I get the errors below?
>.\RollAlternateServiceAccountPassword.ps1 -ToSpecificServers <target server>-CopyFrom <source server>
========== Starting at 12/19/2023 11:47:15 ==========
Failed to read Alternate Service Account configuration data from the registry subtree
HLKM\SYSTEM\CurrentControlSet\Services\MSExchangeServiceHost\ServiceAccounts.
+ CategoryInfo : NotSpecified: (:) [Get-ClientAccessService], DataSourceTransientException
+ FullyQualifiedErrorId : [Server=<TARGET HOST>,RequestId=3bb6646b-cb6d-4c73-a5a9-c0490e6f3e9a,TimeStamp=12/19/2023 4
:47:17 PM] [FailureCategory=Cmdlet-DataSourceTransientException] F21F33FE,Microsoft.Exchange.Management.SystemConf
igurationTasks.GetClientAccessService
+ PSComputerName : <fqdn of target host>
RecordErrors : Couldn't figure out valid servers from the specified destination scope. Check your parameters and try
again.
At C:\Program Files\Microsoft\Exchange Server\V15\Scripts\RollAlternateServiceAccountPassword.ps1:1000 char:1
+ RecordErrors -ExceptionsOnly { $script:success = Body }
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [Write-Error], WriteErrorException
+ FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,RecordErrors
I'm out of ideas and my google searches can't seem to find anything about this error?
2 Replies
Sort By
- Andres-BohrenSteel Contributor
Hi Exchange160
Are you able to read with Remote Registry from the Target to the Source Server this Registry Key?
HLKM\SYSTEM\CurrentControlSet\Services\MSExchangeServiceHost\ServiceAccounts
Is the Account you're using on the "Local Administrators" Group of the Source Server?
Regards
Andres
- Exchange160Copper Contributor
Andres-Bohren Thanks for the suggestion. The answer to both of those questions is yes. After trying for several hours to resolve the issue, I decided it was just as easy to deploy another Exchange server and decommission that one. All is working now.