When these services will not start its usually for 1 of 2 reasons
- Cant get to Active Directory
- Not allowed to access Active Directory
Most Common Solutions
- Make sure you can ping the Global Catalog (GC) server
- DNS Entries are not correct, you can either manual fix or rebuild Dynamic DNS
- Test Replication between domain controllers, if it fails troubleshoot AD.
- Disable 3rd party firewall products on GC
- make sure there is a GC in the AD site your exchange server is in
- Sites and service not configured – Need to configure AD Sites and services subnets to match your site topology.
- Be sure the Exchange Domain Servers and Exchange Enterprise Servers groups have not been removed from the Users OU in AD
- Be sure the server that the service will not start on is in the following groups
- 2003 = Exchange Servers
- 2007 = Exchange Servers, Exchange Install Domain Servers
- 2010 = Exchange Servers, Exchange Install Domain Servers, Exchange Trusted Subsystem -> (Needs to be in Local Administrators as well)
- Make sure the Manage auditing and security log has Exchange Servers and Exchange Enterprise Servers assigned to it on the Default Domain Controller Policy KB316709
- Permission on the NTFS directory for the Exchange binaries has been modified.
System and Administrators should have full access to the Directory.
- 2003 Default Location = C:\program Files\Exchsrvr
- 2007 Default Location = C:\Program Files\Microsoft\Exchange Server
- 2010 Default Location = C:\Program Files\Microsoft\Exchange Server\V14
- AD=Active Directory
- DC=Domain Controller
- GC=Global Catalog DC
- OU= Organizational unit