Microsoft Exchange 2010 SP2 Installation Error

 

Hi, today I was applying SP2 on Exchange 2010 boxes.

ON Edge Servers worked fine, but when patching CAS/HT Servers the installation failed on Hub Transport Role, with the following error:

Hub Transport Role
Failed

Error:
The following error was generated when "$error.Clear();
Set-LocalPermissions

" was run: "The process does not possess the 'SeSecurityPrivilege' privilege which is required for this operation.".

The process does not possess the 'SeSecurityPrivilege' privilege which is required for this operation.

 

So far, tried running the policytest.exe utility that you can find on Exchange Installer at the following path:

\Setup\ServerRoles\Common

But the output was the following:

===============================================

Local domain is "XXXX.XX" (DOMAIN)

LookupAccountName returned error 1332 Abnormal exit from PolicyTest

As this is related to permissions, first double check that the machine account belongs to Exchange Servers group, In my case it was OK.

The problem was caused by one GPO, the specific setting is:

Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Manage auditing and security log

As described in: http://technet.microsoft.com/en-us/library/cc957161.aspx

Basically, you have two options to solve this:

• Add the account that you are using to install the SP2 in this policy definition
• Temporarily move the computer account of Exchange Server to an OU that has GPO inheritance blocked, while you install the SP2.

I tried the second one, and after that the SP2 installed successfully.

Keep in mind that, as long as the installation logged a failed attempt, you probably will have to do also the following (in my case I did it):

Browse to the Windows Registry at the following path: HKLM\Software\ExchangeServer\V14\

At AdminTools, HubTransportRole and ClientAccessRoles.

In the ConfiguredVersion key, change the value from 14.1.218.5 to 14.2.247.5.

And on the following path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ExchangeServer\v14

Under AdminTools, HubTransportRole and ClientAccessRoles, you will have to delete the Action Key and clear the contents of the Watermark key, and finally restart the server prior to try the installation again.

Regards.

>|ristian