Released: September 2016 Quarterly Exchange Updates

[The_Exchange_Team]

Today we are announcing the latest set of Cumulative Updates for Exchange Server 2016 and Exchange Server 2013. These releases include fixes to customer reported issues and updated functionality. Exchange Server 2016 Cumulative Update 3 and Exchange Server 2013 Cumulative Update 14 are available on the Microsoft Download Center.

Windows Server 2016 Support

Windows Server 2016 support is now available with Exchange Server 2016 Cumulative Update 3. Customers looking to deploy Windows Server 2016 in their Exchange environments require Exchange Server 2016 Cumulative Update 3 or later. Domain Controllers running Windows Server 2016 are supported provided Forest Functional Level is Windows Server 2008R2 or later (Edit 10/27/2016: Please see this blog post for more information related to Forest Functional Level). Exchange does not currently support any new functionality provided by the updated operating system except for improved restart support in the Windows Installer. Installing Exchange on Windows Server 2016 provides a seamless installation experience including prerequisites. Exchange Server 2013 will not be supported on Windows Server 2016. Windows Defender is on by default in Windows Server 2016. Attention to malware settings is particularly important with Exchange to avoid long processing times during installation and upgrade, as well as unexpected performance issues. The Exchange team recommends the Exchange installation and setup log folders be excluded from scanning in Windows Defender and other Anti-Virus software. Exchange noderunner processes should also be excluded from Windows Defender.

.Net 4.6.2 Support

.Net 4.6.2 is included with Windows Server 2016. Customers deploying Exchange on Windows Server 2016 must use .Net 4.6.2 and Cumulative Update 3 or later. We plan to add support for .Net 4.6.2 on Windows Server 2012 or Windows Server 2012R2 in our December releases of Exchange Server 2016 and 2013. .Net 4.6.2 will be required for Exchange Server 2016 and 2013 on all supported operating systems in March 2017. We advise customers to start evaluating requirements to move to .Net 4.6.2 now.

High Availability Improvements

One of the challenging areas in some on-premises environment is the amount of data replicated with each database copy. In Exchange Server 2016 Cumulative Update 3, network bandwidth requirements between the active copy and passive HA copies are reduced. The Exchange Server Role Requirements Calculator has been updated to reflect these improvements. The local search instance reads data from a database copy on the local server, also known as “Read from Passive”. As a result of this change, passive HA copy search instances no longer need to coordinate with their active counterparts in order to perform index updates. Lagged database copies still coordinate with their active counterparts to perform index updates. This change also reduces database failover times when compared to Exchange Server 2013.

Installing from a Mounted .ISO using Local Languages

.ISO’s mounted on localized versions of the operating system function correctly with Cumulative Update 3. Support for local language setup experience is limited to the 11 server languages supported by Exchange Server 2016.

Pre-Requisite Installation Behavior Updated

In previous releases of Exchange Server 2016 and 2013, servers were placed into server-wide off-line monitoring states during pre-requisite analysis and pre-requisite installation. This behavior is changed in the September cumulative update releases. Setup will now place a server in off-line monitoring mode when installation of new Exchange binaries begins. This change allows customers who are using the GUI upgrade experience to delay changing the monitoring state until after pre-requisite analysis confirms the server is ready for installation. The monitoring state will be configured when the user selects to proceed to the binary installation step. For customers using command line setup, placing the server into the off-line monitoring state is also delayed until pre-requisite analysis is completed and all pre-requisites are met. Once pre-requisites are confirmed, command line setup will change the monitoring status and proceed without a delay into the actual binary upgrade process.

Latest Time Zone and Security Updates

Exchange Server 2016 Cumulative Update 3 and Exchange Server 2013 Cumulative Update 14 include the security updates released in MS16-108. All of the September Exchange releases include support for Time Zone updates released through the month of August. Update Rollup 21 for Exchange Server 2007 and Update Rollup 15 for Exchange Server 2010, part of our September releases, were released as security bulletin MS16-108.

Refreshed People Experience in Outlook on the web

Exchange Server 2016 Cumulative Update 3 includes an updated view of Contact information and Skype for Business presence information. These changes mirror the current experience of Office365.

Countdown to Exchange Server 2007 End of Life (EOL)

We are now only seven months away from Exchange Server 2007 going out of support (Exchange Server 2007 T-1 year and counting). Customers still running Exchange Server 2007 should be implementing plans to move to Exchange Server 2013 or Office 365 to ensure uninterrupted access to support and product fixes.

Release Details

KB articles which contain greater depth on what each release includes are available as follows:

• Exchange Server 2016 Cumulative Update 3 (KB3152589), Download, UM Lang Packs
• Exchange Server 2013 Cumulative Update 14 (KB3177670), Download, UM Lang Packs

Exchange Server 2016 Cumulative Update 3 does include updates to Active Directory Schema. These updates will apply automatically during setup if the permissions and AD requirements are met during installation. If the Exchange Administrator lacks permissions to update Active Directory Schema, a Schema Admin needs to execute SETUP /PrepareSchema before installing Cumulative Update 3 on the first Exchange server. The Exchange Administrator should also execute SETUP /PrepareAD to ensure RBAC roles are updated correctly. Exchange Server 2013 Cumulative Update 14 does not include updates to Active Directory, but may add additional RBAC definitions to your existing configuration. PrepareAD should be executed prior to upgrading any servers to Cumulative Update 14. PrepareAD will run automatically during the first server upgrade if Setup detects this is required and the logged on user has sufficient permission.

Additional Information

Microsoft recommends all customers test the deployment of any update in their lab environment to determine the proper installation process for your production environment. For information on extending the schema and configuring Active Directory, please review the appropriate TechNet documentation. Also, to prevent installation issues you should ensure that the Windows PowerShell Script Execution Policy is set to “Unrestricted” on the server being upgraded or installed. To verify the policy settings, run the Get-ExecutionPolicy cmdlet from PowerShell on the machine being upgraded. If the policies are NOT set to Unrestricted you should use the resolution steps in KB981474 to adjust the settings. Reminder: Customers in hybrid deployments where Exchange is deployed on-premises and in the cloud, or who are using Exchange Online Archiving (EOA) with their on-premises Exchange deployment are required to deploy the most current (e.g., 2013 CU14, 2016 CU3) or the prior (e.g., 2013 CU13, 2016 CU2) Cumulative Update release. For the latest information on Exchange Server and product announcements please see What's New in Exchange Server 2016 and Exchange Server 2016 Release Notes. You can also find updated information on Exchange Server 2013 in What’s New in Exchange Server 2013, Release Notes and product documentation available on TechNet.

Note: Documentation may not be fully available at the time this post was published.

The Exchange Team

[#2]

We are also seeing random high cpu usage and w3wp.exe crashing constantly with a reference to performance counters. I have rebuilt the env twice now and always see it on the first server. I have a DAG setup, server 2 contains a copy of server 1, server 1 does not contain a copy of server2. Initial install goes fine but if i fail the dag or reboot host 1 at any point it goes into a spiral 100% cpu mess with w3wp.exe crashing over and over. I ended up mounting the dag mb on host 2 and shutting host1 down for now.

[#3]

Hello Microsoft,

What is the procedure to block the installation of .NET 4.6.2 on Windows Server 2012 or Windows Server 2012 R2 until the December Exchange rollups are available?

[#4]

@sime3000 - We are not publishing steps to block this. The .Net team has informed us that .Net 4.6.2 will not be offered as a mandatory package through Microsoft Update until after the end of the year at the earliest. The Exchange team has already been validating to ensure we have compatibility before this package is forced onto Exchange servers. Customers wishing to run on Windows Server 2016 already require .Net 4.6.2.

Customers who are concerned about this transition always have the option to configure Windows Update to review updates before they are installed. We will still have a hard requirement for this for all Exchange 2013 and 2016 servers with our March '17 releases.

[#5]

There is a german HowTo for installing Exchange 2016 CU3 on Windows Server 2016. There is also a PowerShell script for automatic Windows Defenter exclusions:

https://www.frankysweb.de/howto-installation-exchange-2016-auf-windows-server-2016/

regards, Frank

[#6]

Hello,

Does anyone know what means the attribute "OWAVersion" of the OWA Virtual Directory? Exchange 2016 CU3 is still has "Exchange2013".

[PS] C:\Windows\system32>Get-ExchangeServer | fl AdminDisplayVersion

AdminDisplayVersion : Version 15.1 (Build 544.27)

[PS] C:\Windows\system32>Get-OwaVirtualDirectory | fl OWAVersion

OwaVersion : Exchange2013

[#7]

Did the "Other" Section in OWA under Options get removed with this update? If so where are those settings now located?

[#8]

Same here. I just noticed after a users called that this was missing. does any one know if this is something that can easily be but back prior to CU4?

[#9]

Same issue here. Can't find 'other' section in OWA settings. We needed that for access to group management interface. Or at least we thought we needed it. Am I missing something? How should users manage the groups they own now? Go directly to /ecp is the only thing that occurs to me.

[#10]

Hello Exchange Team,

Its been thirteen weeks since I posted this question and I’m just wondering if I will need to wait two years for an answer as I did with a previous question. I guess you folks must be really busy!

In case you missed it my question was … Why are some redirection functions apparently not working in the Exchange Management shell in both Exchange 2016 and Exchange 2013? e.g. if you run “Get-MailPublicFolder 3> output.txt” to redirect warning messages to a text file, any warning messages will be visible on the screen but the output file will be empty. I've seen others reporting this in various forums but no resolution.

Looking forward to a timely response from Microsoft.

Thanks

[#11]

Hello Exchange Team,

Its been fourteen weeks since I posted this question and I’m just wondering if I will need to wait two years for an answer as I did with a previous question. I guess you folks must be really busy!

In case you missed it my question was … Why are some redirection functions apparently not working in the Exchange Management shell in both Exchange 2016 and Exchange 2013? e.g. if you run “Get-MailPublicFolder 3> output.txt” to redirect warning messages to a text file, any warning messages will be visible on the screen but the output file will be empty. I’ve seen others reporting this in various forums but no resolution.

Looking forward to a timely response from Microsoft.

Thanks!

[#12]

Hello Exchange Team,

Its been *fifteen* weeks since I posted this question and I’m just wondering if I will need to wait two years for an answer as I did with a previous question. I guess you folks must be really busy!

In case you missed it my question was … Why are some redirection functions apparently not working in the Exchange Management shell in both Exchange 2016 and Exchange 2013 regardless of rollup level or other factors? e.g. if you run “Get-MailPublicFolder 3> output.txt” to redirect warning messages to a text file, any warning messages will be visible on the screen but the output file will be empty. I’ve seen others reporting this problem in various forums but no acknowledgement of the problem and no resolution from Microsoft.

Looking forward to a timely response from Microsoft.

Thanks a lot !

[#13]

Hello Exchange Team,

Its been *sixteen* weeks since I posted this question and I’m just wondering if I will need to wait two years for an answer as I did with a previous question. I guess you folks must be really busy!

In case you missed it my question was … Why are some redirection functions apparently not working in the Exchange Management shell in both Exchange 2016 and Exchange 2013 regardless of rollup level or other factors? e.g. if you run “Get-MailPublicFolder 3> output.txt” to redirect warning messages to a text file, any warning messages will be visible on the screen but the output file will be empty. I’ve seen others reporting this problem in various forums but no acknowledgement of the problem and no resolution from Microsoft.

Looking forward to a timely response from Microsoft.

Thanks a lot !

[#14]

Hello Exchange Team,

Its been *twenty-two* weeks since I posted this question and I’m just wondering if I will need to wait two years for an answer as I did with a previous question. I guess you folks must be really busy!

In case you missed it my question was … Why are some redirection functions apparently not working in the Exchange Management shell in both Exchange 2016 and Exchange 2013 regardless of rollup level or other factors? e.g. if you run “Get-MailPublicFolder 3> output.txt” to redirect warning messages to a text file, any warning messages will be visible on the screen but the output file will be empty. I’ve seen others reporting this problem in various forums but no acknowledgement of the problem and no resolution from Microsoft.

Looking forward to a timely response from Microsoft.

Thanks a lot !

[#15]

Hello Exchange Team,

Its been *twenty-one* weeks since I posted this question and I’m just wondering if I will need to wait two years for an answer as I did with a previous question. I guess you folks must be really busy!

In case you missed it my question was … Why are some redirection functions apparently not working in the Exchange Management shell in both Exchange 2016 and Exchange 2013 regardless of rollup level or other factors? e.g. if you run “Get-MailPublicFolder 3> output.txt” to redirect warning messages to a text file, any warning messages will be visible on the screen but the output file will be empty. I’ve seen others reporting this problem in various forums but no acknowledgement of the problem and no resolution from Microsoft.

Looking forward to a timely response from Microsoft.

Thanks a lot !

[#16]

Hello Exchange Team,

Its been *twenty* weeks since I posted this question and I’m just wondering if I will need to wait two years for an answer as I did with a previous question. I guess you folks must be really busy!

In case you missed it my question was … Why are some redirection functions apparently not working in the Exchange Management shell in both Exchange 2016 and Exchange 2013 regardless of rollup level or other factors? e.g. if you run “Get-MailPublicFolder 3> output.txt” to redirect warning messages to a text file, any warning messages will be visible on the screen but the output file will be empty. I’ve seen others reporting this problem in various forums but no acknowledgement of the problem and no resolution from Microsoft.

Looking forward to a timely response from Microsoft.

Thanks a lot !

[#17]

Hello Exchange Team,

Its been *nineteen* weeks since I posted this question and I’m just wondering if I will need to wait two years for an answer as I did with a previous question. I guess you folks must be really busy!

In case you missed it my question was … Why are some redirection functions apparently not working in the Exchange Management shell in both Exchange 2016 and Exchange 2013 regardless of rollup level or other factors? e.g. if you run “Get-MailPublicFolder 3> output.txt” to redirect warning messages to a text file, any warning messages will be visible on the screen but the output file will be empty. I’ve seen others reporting this problem in various forums but no acknowledgement of the problem and no resolution from Microsoft.

Looking forward to a timely response from Microsoft.

Thanks a lot !

[#18]

Hello Exchange Team,

Its been *eighteen* weeks since I posted this question and I’m just wondering if I will need to wait two years for an answer as I did with a previous question. I guess you folks must be really busy!

In case you missed it my question was … Why are some redirection functions apparently not working in the Exchange Management shell in both Exchange 2016 and Exchange 2013 regardless of rollup level or other factors? e.g. if you run “Get-MailPublicFolder 3> output.txt” to redirect warning messages to a text file, any warning messages will be visible on the screen but the output file will be empty. I’ve seen others reporting this problem in various forums but no acknowledgement of the problem and no resolution from Microsoft.

Looking forward to a timely response from Microsoft.

Thanks a lot !

[#19]

Hello Exchange Team,

Its been *seventeen* weeks since I posted this question and I’m just wondering if I will need to wait two years for an answer as I did with a previous question. I guess you folks must be really busy!

In case you missed it my question was … Why are some redirection functions apparently not working in the Exchange Management shell in both Exchange 2016 and Exchange 2013 regardless of rollup level or other factors? e.g. if you run “Get-MailPublicFolder 3> output.txt” to redirect warning messages to a text file, any warning messages will be visible on the screen but the output file will be empty. I’ve seen others reporting this problem in various forums but no acknowledgement of the problem and no resolution from Microsoft.

Looking forward to a timely response from Microsoft.

Thanks a lot !

[#20]

Exchange 2016 Setup /PrepareSchema von CU 2 auf CU 3:

Process C:\Windows\system32\ldifde.exe finished with exit code 8224.

[ERROR] There was an error while running 'ldifde.exe' to import the schema file 'C:\Windows\Temp\ExchangeSetup\Setup\Data\PostExchange2003_schema78.ldf'.

ldifde.log:

26: CN=ms-Exch-Country-List,CN=Schema,CN=Configuration,DC=demo4,DC=biz

Entry DN: CN=ms-Exch-Country-List,CN=Schema,CN=Configuration,DC=demo4,DC=biz

Der Eintrag wurde einwandfrei geändert.

27: (null)

Entry DN: (null)

Fehler für Eintrag mit Beginn in Zeile 310: Fehler beim Vorgang

26 Einträge wurden erfolgreich geändert.

26 entries were applied correctly. Entry 27 has an error in line 310:

dn:

changetype: ntdsSchemaModify

replace: schemaUpdateNow

schemaUpdateNow: 1

-

Any ideas?

[#21]

Hi Team,

I was exploring the ExchangeSetup.log file to find out why a particular server was taking a long time to be fully installed. I ended finding that the setup desperately tries to start and wait for the NaSvc service... 36 times with a timeout of 25 seconds. So in the end, 15 minutes wasted until moving forward.

NaSvc is the Network Connectivity Assistant, and can't be started manually (despite having a startup type of Manual). So, is the wait worth it ?

Here's an example:

[10-16-2016 21:29:51.0289] [2] Will wait '25000' milliseconds for the service 'NcaSvc' to reach status 'Running'.

[10-16-2016 21:30:16.0452] [2] Service 'NcaSvc' failed to reach status 'Running' on this server after waiting for '25000' milliseconds.

[10-16-2016 21:30:16.0452] [2] [WARNING] Service checkpoint has not progressed. Previous checkpoint='0'- Current checkpoint='0'.

(that, multiple times, e.g. a total of 36 times.

[10-16-2016 21:44:58.0609] [2] Service 'NcaSvc' failed to reach status 'Running' on this server after waiting for '25000' milliseconds.

[10-16-2016 21:44:58.0609] [2] [WARNING] Service 'NcaSvc' failed to reach status 'Running' on this server.

[10-16-2016 21:44:58.0609] [2] Ending processing start-setupservice

[#22]

Seeing the same thing here on CU4 w/ Server 2016. After 15 minutes of checking it moved on.

[#23]

Sorry, typo on the service's name it's NcaSvc, not NaSvc.

And issue seems to happen with Exchange Server 2016 on Windows Server 2016. Didn't find the same traces with Exchange Server 2016 on Windows Server 2012 R2.

[#24]

After upgrading Exchange 2016 to CU3 users complain that search in Public Folders doesn't work. Advanced Search works as usual and a little bit faster but it is not comfortable for often use.

[#25]

Yesterday I had conversation with MS support and engineer said that this is known issue with Exchange 2016 CU3 and they are working to fix that problem ASAP because there are too much complains regarding search in public folders.

[#26]

Thank you for posting this. We are experiencing this problem as well. It took a few weeks before anyone noticed because the search will find items right up to the date the CU3 was installed. Please keep us informed, and perhaps a link to the fix once MS posts it.

[#27]

Hi Oleg,

we do see the same issue. Our Premier Support case number is: 116102914867996. Can you share your number so that the engineers can work together - thanks!

[#28]

The same problem in 2013 CU14

[#29]

UCMA 4.0 is listed as a prerequisite for Exchange 2016 on Windows 2016 https://technet.microsoft.com/en-us/library/bb691354(v=exchg.160).aspx

However UCMA 4.0 was released four years ago and is clearly not supported on Windows 2016 according to the UCMA 4.0 requirements on this page https://www.microsoft.com/en-us/download/details.aspx?id=34992

So how is UCMA 4.0 a supported prerequisite for Exchange 2016 on Windows 2016 ?

Looking forward to your timely response.

[#30]

UCMA 4.0 is listed as a prerequisite for Exchange 2016 on Windows 2016 https://technet.microsoft.com/en-us/library/bb691354(v=exchg.160).aspx

However UCMA 4.0 was released four years ago and is clearly not supported on Windows 2016 according to the UCMA 4.0 requirements on this page https://www.microsoft.com/en-us/download/details.aspx?id=34992

So how is UCMA 4.0 a supported prerequisite for Exchange 2016 on Windows 2016 ?

Looking forward to your timely response.

[#31]

Hello Exchange Team,

UCMA 4.0 is listed as a prerequisite for Exchange 2016 on Windows 2016 https://technet.microsoft.com/en-us/library/bb691354(v=exchg.160).aspx

However UCMA 4.0 was released four years ago and is clearly not supported on Windows 2016 according to the UCMA 4.0 requirements on this page https://www.microsoft.com/en-us/download/details.aspx?id=34992

So how is UCMA 4.0 a supported prerequisite for Exchange 2016 on Windows 2016 ?

Looking forward to your timely response.

[#32]

Hi there Exchange team,

I had an install issue where the arbitration mailboxes weren't properly created in an Exchange 2010 multi-domain environment and that stopped the Exchange 2016 CU3 install on the Hub Transport service on the first install (this blog shows the problem well: https://social.technet.microsoft.com/Forums/en-US/af60d888-c1b5-40f2-a5cf-af6038fad5ab/error-during-mailbox-role-transport-service?forum=Exch2016SD)

I could only fix this issue by allowing the Exchange 2010 Schema domain prep to run again by temporarily updating the AD Schema from Exchange 2016 back to Exchange 2010 as that was the only way to properly create the missing/corrupt objects. So that's issue one that may happen to others.

Then I tried to continue with Exchange install and it kept failing as the installer set all the Exchange services to Disabled at the beginning of the resumed install. I couldn't uninstall so I simply quickly set all services to automatic once install was restarted again and finally the install completed.

So a couple interest Exchange 2016 clean install issues that may affect others: Fixing arbitration mailboxes on previous Exchange version and then installer issues since Exchange 2016 is partially installed.

-Larry

[#33]

Hello

looking at the ExchangeSetup.log i found this

[10/20/2016 21:36:43.0445] [1] Executing:

$keyPathRoot = “HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols”;

$keyPath = $keyPathRoot + “\SSL 2.0\Server”;

if (!(Test-Path $keyPath))

{

New-Item -path $keyPathRoot”\SSL 2.0″ -ItemType key -Name “Server” -Force;

}

Set-ItemProperty -path $keyPath -name “Enabled” -value 0x0 -Type DWORD -Force;

$keyPath = $keyPathRoot + “\SSL 3.0\Server”;

if (!(Test-Path $keyPath))

{

New-Item -path $keyPathRoot”\SSL 3.0″ -ItemType key -Name “Server” -Force;

}

Set-ItemProperty -path $keyPath -name “Enabled” -value 0x0 -Type DWORD -Force;

$keyPath = $keyPathRoot + “\TLS 1.0\Server”;

if (!(Test-Path $keyPath))

{

New-Item -path $keyPathRoot”\TLS 1.0″ -ItemType key -Name “Server” -Force;

}

Set-ItemProperty -path $keyPath -name “Enabled” -value 0x1 -Type DWORD -Force;

$keyPath = $keyPathRoot + “\TLS 1.1\Server”;

if (!(Test-Path $keyPath))

{

New-Item -path $keyPathRoot”\TLS 1.1″ -ItemType key -Name “Server” -Force;

}

Set-ItemProperty -path $keyPath -name “Enabled” -value 0x1 -Type DWORD -Force;

Set-ItemProperty -path $keyPath -name “DisabledByDefault” -value 0x0 -Type DWORD -Force;

$keyPath = $keyPathRoot + “\TLS 1.2\Server”;

if (!(Test-Path $keyPath))

{

New-Item -path $keyPathRoot”\TLS 1.2″ -ItemType key -Name “Server” -Force;

}

Set-ItemProperty -path $keyPath -name “Enabled” -value 0x1 -Type DWORD -Force;

Set-ItemProperty -path $keyPath -name “DisabledByDefault” -value 0x0 -Type DWORD -Force;

$keypath = “HKLM:\SOFTWARE\Policies\Microsoft\Cryptography\Configuration\SSL\00010002”;

if (!(Test-Path $keyPath)) { New-Item $keyPath -Force }

Set-ItemProperty -path $keyPath -name “Functions” -value “TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA_P384,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA_P256,TLS_RSA_WITH_AES_256_CBC_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_3DES_EDE_CBC_SHA,TLS_RSA_WITH_RC4_128_SHA,TLS_RSA_WITH_RC4_128_MD5” -Force;

looks like Microsoft is helping customers secure their server without mentioning it anywhere.

[#34]

Hi,

when will be fixed Exchange management shell error for DAG computers .

https://social.technet.microsoft.com/Forums/lync/en-US/142ff1ab-242c-4436-a870-068720b5580f/exchange-server-2016-windows-server-2016-datacenter-iis-apppools-constantly-crashing?forum=Exch2016PS

[#35]

Hello all,

I had two Exchange 2016 servers in my infrastructure and I started to upgrade them to Exchange 2016 CU3.

One of the servers has been updated successfully, but the second one ran into a problem at 'Client Access Front End service' stage.

You can see the CMD output below.

F:\>Setup /m:upgrade /IAcceptExchangeServerLicenseTerms

Welcome to Microsoft Exchange Server 2016 Cumulative Update 3 Unattended Setup

Copying Files...

File copy complete. Setup will now collect additional information needed for installation.

Languages

Management tools

Mailbox role: Transport service

Mailbox role: Client Access service

Mailbox role: Unified Messaging service

Mailbox role: Mailbox service

Mailbox role: Front End Transport service

Mailbox role: Client Access Front End service

Performing Microsoft Exchange Server Prerequisite Check

Configuring Prerequisites COMPLETED

Prerequisite Analysis COMPLETED

Configuring Microsoft Exchange Server

Language Files COMPLETED

Restoring Services COMPLETED

Language Configuration COMPLETED

Exchange Management Tools COMPLETED

Mailbox role: Transport service COMPLETED

Mailbox role: Client Access service COMPLETED

Mailbox role: Unified Messaging service COMPLETED

Mailbox role: Mailbox service COMPLETED

Mailbox role: Front End Transport service COMPLETED

Mailbox role: Client Access Front End service FAILED

The following error was generated when "$error.Clear();

.

"$RoleInstallPath\Scripts\Update-AppPoolManagedFrameworkVersion.ps1" -AppPoolName:"MSExchangeServicesAppPool"

-Version:"v4.0";

get-WebServicesVirtualDirectory -server $RoleFqdnOrName | set-WebServicesVirtualDirectory

-windowsAuthentication:$true -WSSecurityAuthentication:$true -OAuthAuthentication:$true

" was run:

"System.Runtime.InteropServices.COMException (0x800700B7): Filename: \\?\C:\Program Files\Microsoft\Exchange

Server\V15\FrontEnd\HttpProxy\EWS\web.config

Line number: 8

Error: Cannot add duplicate collection entry of type

'add' with unique key attribute 'key' set to 'HttpProxy.ProtocolType'

at

Microsoft.Web.Administration.Interop.IAppHostAdminManager.GetAdminSection(String bstrSectionName, String bstrPath)

at

Microsoft.Web.Administration.Configuration.GetSectionInternal(ConfigurationSection section, String sectionPath, String

locationPath)

at

Microsoft.Exchange.Management.SystemConfigurationTasks.ExchangeServiceVDirHelper.EwsAutodiscMWA.EnableOrDisableCafeEndpo

int(Configuration

configuration, String endpointName, Boolean enableEndpoint)

at

Microsoft.Exchange.Management.SystemConfigurationTasks.ExchangeServiceVDirHelper.EwsAutodiscMWA.OnSetManageWCFEndpoints(

Task

task, EndpointProtocol protocol, Boolean enableWSSecurity, ExchangeVirtualDirectory adVirtualDirectory)

at

Microsoft.Exchange.Management.SystemConfigurationTasks.SetWebServicesVirtualDirectory.InternalProcessRecord()

at

Microsoft.Exchange.Configuration.Tasks.Task.b__b()

at

Microsoft.Exchange.Configuration.Tasks.Task.InvokeRetryableFunc(String funcName, Action func, Boolean

terminatePipelineIfFailed)

at Microsoft.Exchange.Configuration.Tasks.Task.ProcessTaskStage(TaskStage taskStage,

Action initFunc, Action mainFunc, Action completeFunc)

at Microsoft.Exchange.Configuration.Tasks.Task.ProcessRecord()

at System.Management.Automation.CommandProcessor.ProcessRecord()".

The Exchange Server setup operation didn't complete. More details can be found in ExchangeSetup.log located in the

:\ExchangeSetupLogs folder.

F:\>

At this stage I cannot do anything with the server, and /owa is not working anymore. It seems that I have a corrupt installation.

Do you have any ideas how can I solve the error and ran the installation task again?

Regards,

Mircea

[#36]

We installed Exchange 2016 on Windows 2016 and are happy to report that it's working fine.

The only kink is that we migrated over a user with an Office 365 in-place archive mailbox which doesn't work in OWA with the new server/database. We attempted to rerun the Hybrid wizard but it doesn't seem to be supported in Windows 2016?