Exchange 2010 Mailbox Role Setup Failure

 

 

Problem:

When you try to install the Microsoft Exchange Server 2010 Mailbox role, the installation process may fail.When this problem occurs, you receive the following error message in the Exchange Events:

EventID: 4
Source: MSExchange Configuration CmdLet –  Management Console
Details:

(PID 2324, Thread 27) Task Install-MailboxRole writing error when processing record of index 0. Error: Microsoft.Exchange.Management.Deployment.ScriptExecutionException: The following error was generated when "$error.Clear(); $arbUsers = @(get-user -Filter {lastname -eq "MSExchApproval 1f05a927-3be2-4fb9-aa03-b59fe3b56f4c"} -IgnoreDefaultScope -ResultSize 1); if ($arbUsers.Length -ne 0) { $mbxname = $arbUsers[0].name; $mbxs = @( get-mailbox -arbitration -Filter {name -eq $mbxname} -IgnoreDefaultScope -resultSize 1 ); if ( $mbxs.length -eq 0) { $dbs = @(get-MailboxDatabase -Server:$RoleFqdnOrName -DomainController $RoleDomainController); if ($dbs.Length -ne 0) { enable-mailbox -Arbitration -identity $arbUsers[0] -database $dbs[0].Identity; } } }" was run: "The LdapRecipientFilter "(&(&(|(&(objectCategory=person)(objectSid=*)(!samAccountType:1.2.840.113556.1.4.804:=3))(&(objectCategory=person)(!objectSid=*))(&(objectCategory=group)(groupType:1.2.840.113556.1.4.804:=14)))(anr=wil*)))" on Address List or Email Address Policy "All Candidate" is invalid. Additional information: ANR isn't supported.". ---> Microsoft.Exchange.ProvisioningAgent.RusException: The LdapRecipientFilter "(&(&(|(&(objectCategory=person)(objectSid=*)(!samAccountType:1.2.840.113556.1.4.804:=3))(&(objectCategory=person)(!objectSid=*))(&(objectCategory=group)(groupType:1.2.840.113556.1.4.804:=14)))(anr=wil*)))" on Address List or Email Address Policy "All Candidate" is invalid. Additional information: ANR isn't supported. ---> Microsoft.Exchange.ProvisioningAgent.LdapFilterException: ANR isn't supported.
   at Microsoft.Exchange.DefaultProvisioningAgent.Rus.SinglePropertyLdapFilter.ValidateAndSetAttributeType(String wsAttr, LdapFilterProvider provider)
   at Microsoft.Exchange.DefaultProvisioningAgent.Rus.SinglePropertyLdapFilter.Parse(String wsFilterCond, LdapFilterProvider provider)
   at Microsoft.Exchange.DefaultProvisioningAgent.Rus.LdapFilter.Parse(String wsFilter, LdapFilterProvider provider)
   at Microsoft.Exchange.DefaultProvisioningAgent.Rus.LdapFilter.Parse(String wsFilter, LdapFilterProvider provider)
   at Microsoft.Exchange.DefaultProvisioningAgent.Rus.LdapFilter.Parse(String wsFilter, LdapFilterProvider provider)
   at Microsoft.Exchange.DefaultProvisioningAgent.Rus.LdapFilterProvider.PrepareLdapFilter(String stringFilter)
   at Microsoft.Exchange.DefaultProvisioningAgent.Rus.EmailAddressPolicyHandler.UpdateRecipient(ADRecipient recipient)

This problem occurs because a recipient policy within the Exchange Organization contains a Ambiguous Name Resolution filter (ANR=<value).

Solution:

The solution is to discover which Recipient policy is throwing the error.  This will be listed within the details of the Event. In my case it was “Some Policy” Recipient Policy.  Figure out whether you require the recipient policy.  If not then delete the policy, wait for AD Replication and restart the Exchange 2010 installation.

If you still require the policy decide if you can create a new filter without using “ANR”.