Exchange 2007 Clustering: Important KB articles

Kerberos Authentication

Kerberos authentication will not work on an Exchange 2007 clustered server (CMS and SSC) until each cluster node machine is granted permissions to write the ‘Validated-SPN’ property on the CMS Active Directory computer object. Additionally, the following error messages will be entered into the Application event log.

Event Type: Error
Event Source: MSExchangeSA
Event Category: General
Event ID: 9317
Date:
Time:
User: N/A
Computer:
Description:
Failed to register Service Principal Name for exchangeRFR; error code was c0072098.

Event Type: Error
Event Source: MSExchangeSA
Event Category: General
Event ID: 9317
Date:
Time:
User: N/A
Computer:
Description:
Failed to register Service Principal Name for exchangeMDB; error code was c0072098.

The KB article ID 935676 details the process of granting this permission on the CMS computer object.

Event ID 9317 is logged when the Microsoft Exchange System Attendant service comes online on an Exchange 2007 cluster node

Provisioning mailboxes on additional Single Copy Cluster nodes

If you are creating a multiple CMSs (Clustered Mailbox Server) in a Single Copy Cluster you should be aware of the following KB article. When trying to provision a mailbox on a second or successive CMS you receive the following error:

“A proxy generator DLL on server FQDN.serverName could not be found or failed to initialize. Proxy addresses for the current recipient cannot be calculated. Please ensure that all the proxy addresses for the current recipient cannot be calculated. Please ensure that all proxy address generator DLLs have been installed on the target server.”

This error can be solved by creating a message transfer agent (MTA) in Active Directory for each CMS.

How to enable mailbox creation on the second or later clustered mailbox server (CMS) of an Exchange 2007 Single Copy Cluster (SCC)

--Nick