Troubleshooting Exchange 2016 Database Availability Group Membership Errors

Introduction

Managing a Database Availability Group (DAG) in Microsoft Exchange servers can sometimes present challenges, especially when errors occur during administrative operations. One such error is related to the creation of clusters, which can be caused by misconfigured static addresses and insufficient permissions. In this post, we'll delve into a specific error message and outline the steps to troubleshoot and resolve it effectively.

Error Message

The error message encountered reads: "A server-side database availability group administrative operation failed. Error: The operation failed. CreateCluster errors may result from incorrectly configured static addresses. Error: An error occurred while attempting a cluster operation. Error: Cluster API failed: 'CreateCluster() failed with 0x5. Error: Access is denied'. [Server: CMEXD01.cloudmonkeys.xyz]"

Common Causes

This error typically arises due to:

1. Incorrect Static IP Configurations: Misconfigured static IP addresses can prevent the successful creation of clusters.
2. Network Issues: Network connectivity problems can interfere with cluster operations.
3. Insufficient Permissions: Lack of necessary permissions for cluster operations can lead to access denial errors.

Troubleshooting Steps

To resolve this error, follow these steps:

1. Verify Static IP Settings:

   • Ensure that all static IP addresses are correctly configured.
   • Check for any discrepancies or conflicts in the IP settings.

2. Ensure Network Connectivity:

   • Verify that all network connections are stable and properly configured.
   • Test the network to ensure there are no interruptions affecting cluster operations.

3. Check Permissions:

   • Review the permissions for the server and cluster operations.
   • Ensure that the necessary permissions are granted to the appropriate accounts.

Resolution

In this specific case, the issue was resolved by granting full ACL control to the "Exchange Trusted Subsystem" on the DAG Cluster Name Object (CNO) in Active Directory Users and Computers (ADUC). Here’s how you can do it:

1. Open Active Directory Users and Computers.
2. Navigate to the DAG Cluster Name Object (CNO).
3. Right-click on the CNO and select Properties.
4. Go to the Security tab.
5. Add the Exchange Trusted Subsystem and grant it Full Control.

Conclusion

By following these above troubleshooting steps and preventive measures, you can effectively manage DAG memberships and avoid common errors. Ensuring correct configurations and permissions will help maintain smooth and efficient database operations.