Exchange 2010 - A server-side database availability group administrative operation failed. Error: Windows Failover Clustering timed out while trying to validate server 'exchange03'. If this is in a disjoint DNS namespace, the DNS suffixes for all servers in the database availability group must be present on every server.
I was adding amailbox server to a DAG, the mailbox server was in another site than the original DAG members, the wizard fails with the errror "A server-side database availability group administrative operation failed. Error: Windows Failover Clustering timed out while trying to validate server 'exchange03'. If this is in a disjoint DNS namespace, the DNS suffixes for all servers in the database availability group must be present on every server."
as in the screen shot below:
after googling a bit i found this very useful post (http://www.exchangemaster.net/index.php?option=com_content&task=view&id=143&Itemid=1&lang=en) thank you Dejan, you really saved my day.
The issue was that there was an ISA server separating the two sites , the solution was to turn off the option called "Enforce Strict RPC Compliance" in ISA server.
SOLUTION
Turn off the Enforce Strict RPC compliance option in ISA Server.
This option can be found in 2 places:
1) On the firewall rule properties.
2) In the ISA System Policy. This policy is applied to new rules when you create them.
1) To disable the Enforce Strict RPC Compliance option on the firewall rule, right click the firewall rule and selelct Configure RPC Protocol.
Clear the Enforce Strict RPC compliance option.
2) To disable this option in ISA Server System Policy, select Edit System Policy from the task pane on the right, select Authentication Services, Active Directory. Clear the Enforce Strict RPC compliance.
Credits goes to : http://www.exchangemaster.net/
as in the screen shot below:
after googling a bit i found this very useful post (http://www.exchangemaster.net/index.php?option=com_content&task=view&id=143&Itemid=1&lang=en) thank you Dejan, you really saved my day.
The issue was that there was an ISA server separating the two sites , the solution was to turn off the option called "Enforce Strict RPC Compliance" in ISA server.
SOLUTION
Turn off the Enforce Strict RPC compliance option in ISA Server.
This option can be found in 2 places:
1) On the firewall rule properties.
2) In the ISA System Policy. This policy is applied to new rules when you create them.
1) To disable the Enforce Strict RPC Compliance option on the firewall rule, right click the firewall rule and selelct Configure RPC Protocol.
Clear the Enforce Strict RPC compliance option.
2) To disable this option in ISA Server System Policy, select Edit System Policy from the task pane on the right, select Authentication Services, Active Directory. Clear the Enforce Strict RPC compliance.
Credits goes to : http://www.exchangemaster.net/
Update
I found also that one of the reasons for this error is if you have multiple AD sites and the computer for the DAG has not replicated to the site where you are adding the mailbox server to the DAG.
Comments