Exchange 2010 SP3 mailbox role installation error

Question

Hello.
I can't install the Mailbox role on a Windows 2008 R2 server, the first Exchange in the domain and forest (2 dcs in the domain).
Client Access Role and Hub Transport Role installed correctly.
Setup preparations - without an error.
Started the Exchange 2010 SP3 Installation, which start correctly, all prerequisites are seems to be ok. When arriving on the Mailbox Roles it make this error:
02.05.2014 13:42:46.0634] [2] [ERROR] Active Directory operation failed on <dc fqdn>. This error is not retriable. Additional information: An attempt was made to modify an object to include an attribute that is not legal for its class.
Active directory response: 0000207D: UpdErr: DSID-0315121C, problem 6002 (OBJ_CLASS_VIOLATION), data -1731808180
[02.05.2014 13:42:46.0634] [2] [ERROR] An object class violation occurred.
[02.05.2014 13:42:46.0634] [2] Ending processing enable-mailbox
[02.05.2014 13:42:46.0649] [1] The following 1 error(s) occurred during task execution:
[02.05.2014 13:42:46.0649] [1] 0.  ErrorRecord: Active Directory operation failed on <dc fqdn>. This error is not retriable. Additional information: An attempt was made to modify an object to include an attribute that is not legal for its class.
Active directory response: 0000207D: UpdErr: DSID-0315121C, problem 6002 (OBJ_CLASS_VIOLATION), data -1731808180
[02.05.2014 13:42:46.0649] [1] 0.  ErrorRecord: Microsoft.Exchange.Data.Directory.ADOperationException: Active Directory operation failed on <dc fqdn>. This error is not retriable. Additional information: An attempt was made to modify an object to
include an attribute that is not legal for its class.
Active directory response: 0000207D: UpdErr: DSID-0315121C, problem 6002 (OBJ_CLASS_VIOLATION), data -1731808180
 ---> System.DirectoryServices.Protocols.DirectoryOperationException: An object class violation occurred.
   at System.DirectoryServices.Protocols.LdapConnection.ConstructResponse(Int32 messageId, LdapOperation operation, ResultAll resultType, TimeSpan requestTimeOut, Boolean exceptionOnTimeOut)
   at System.DirectoryServices.Protocols.LdapConnection.SendRequest(DirectoryRequest request, TimeSpan requestTimeout)
   at Microsoft.Exchange.Data.Directory.PooledLdapConnection.SendRequest(DirectoryRequest request, LdapOperation ldapOperation, IAccountingObject budget, Nullable`1 clientSideSearchTimeout)
   at Microsoft.Exchange.Data.Directory.ADSession.ExecuteModificationRequest(ADObject entry, DirectoryRequest request, ADObjectId originalId, Boolean emptyObjectSessionOnException)
   --- End of inner exception stack trace ---
   at Microsoft.Exchange.Data.Directory.ADSession.AnalyzeDirectoryError(PooledLdapConnection connection, DirectoryRequest request, DirectoryException de, Int32 totalRetries, Int32 retriesOnServer)
   at Microsoft.Exchange.Data.Directory.ADSession.ExecuteModificationRequest(ADObject entry, DirectoryRequest request, ADObjectId originalId, Boolean emptyObjectSessionOnException)
   at Microsoft.Exchange.Data.Directory.ADSession.Save(ADObject instanceToSave, IEnumerable`1 properties)
   at Microsoft.Exchange.Data.Directory.Recipient.ADRecipientSession.Microsoft.Exchange.Data.IConfigDataProvider.Save(IConfigurable instance)
   at Microsoft.Exchange.Configuration.Tasks.SetTaskBase`1.InternalProcessRecord()
   at Microsoft.Exchange.Management.RecipientTasks.EnableMailbox.InternalProcessRecord()
   at Microsoft.Exchange.Configuration.Tasks.Task.ProcessRecord()
[02.05.2014 13:42:46.0649] [1] [ERROR] The following error was generated when "$error.Clear();
          if (!$RoleIsDatacenter)
            $arbUsers = @(get-user -Filter {lastname -eq "MSExchApproval 1f05a927-3be2-4fb9-aa03-b59fe3b56f4c"} -IgnoreDefaultScope -ResultSize 1);
            if ($arbUsers.Length -ne 0)
              $mbxname = $arbUsers[0].name;
              $mbxs = @( get-mailbox -arbitration -Filter {name -eq $mbxname} -IgnoreDefaultScope -resultSize 1 );
              if ( $mbxs.length -eq 0)
                $dbs = @(get-MailboxDatabase -Server:$RoleFqdnOrName -DomainController $RoleDomainController);
                if ($dbs.Length -ne 0)
                  enable-mailbox -Arbitration -identity $arbUsers[0] -database $dbs[0].Identity;
        " was run: "Active Directory operation failed on <dc fqdn>. This error is not retriable. Additional information: An attempt was made to modify an object to include an attribute that is not legal for
its class.
Active directory response: 0000207D: UpdErr: DSID-0315121C, problem 6002 (OBJ_CLASS_VIOLATION), data -1731808180
[02.05.2014 13:42:46.0649] [1] [ERROR] Active Directory operation failed on <dc fqdn>. This error is not retriable. Additional information: An attempt was made to modify an object to include an attribute that is not legal for its class.
Active directory response: 0000207D: UpdErr: DSID-0315121C, problem 6002 (OBJ_CLASS_VIOLATION), data -1731808180
[02.05.2014 13:42:46.0649] [1] [ERROR] An object class violation occurred.
[02.05.2014 13:42:46.0649] [1] [ERROR-REFERENCE] Id=SystemAttendantDependent___04bbd8c4a86b4d2c9403cdddf5b39579 Component=EXCHANGE14:\Current\Release\Transport\BCM\Moderated Transport
[02.05.2014 13:42:46.0649] [1] Setup is stopping now because of one or more critical errors.
[02.05.2014 13:42:46.0649] [1] Finished executing component tasks.
[02.05.2014 13:42:46.0712] [1] Ending processing Install-MailboxRole
Any help would be appreciate.
Thanks,
Igor K.

Answer 1

Hi,
The above error may occur when the federated built-in e-mail account that links to the computer account no longer exists or the federated built-in e-mail account in the Active Directory service is corrupted.
I recommend you follow the steps below for troubleshooting:
1. Remove the FederatedEmail.4c1f4d8b-8179-4148-93bf-00a95fa1e042 e-mail account by using the ADSIEdit tool.
a. Run adsiedit.msc.
b. Locate the Default Naming Context node, and then locate to the CN=Users container.
c. Locate and then right-click the CN=FederatedEmail.4c1f4d8b-8179-4148-93bf-00a95fa1e042 container. Then, click Delete.
2.Rerun the Exchange Server 2010 Mailbox role setup application.
3.Create a new federated e-mail account by using the following cmdlet:
New-Mailbox -Arbitration -Name FederatedEmail.4c1f4d8b-8179-4148-93bf-00a95fa1e042 -UserPrincipalName
FederatedEmail.4c1f4d8b-8179-4148-93bf-00a95fa1e042@<Default_Accepted_Domain>
Hope it helps.
If you need further assistance, please feel free to let me know.
Best regards,
Amy
Amy Wang
TechNet Community Support