"Publish ExMP Data" MOM Script fails to correctly registry EMPKP.e

[Shane Keys]

Hello all,

I have 7 x Exchange 2003 servers, running on 7 x Windows 2003 Enterprise
Servers (No Service Packs installed). All servers are Domain controllers.
We use MOM 2005 in our environment. The MOM agent is installed on all 7
servers, with the MOM service and MOM action accounts being configured to
"Local System". The Exchange Management Pack successfully installs on all
the servers except one (XYZMAIL01).

I am getting the following errors:

In MOM Operation console -

Failed to publish Exchange Management Pack data required for performing MAPI
logon on Exchange server XYZMAIL01
Error information: 0x1B58(7000). This event was generated by the script:
"Exchange - Publish ExMP Data"
Event Number: 10000, Provider Type: Generic Provider, Source: Exchange MOM

When I run the Exchange Management Pack Config Wizard -

Error: Cannot configure the mailbox access account on computer XYZMAIL01.
This configuration can only be made after the Exchange MOM event 9986 is
registered by MOM.

Where the Exchange Management Pack has successfully installed, each server
has the registry key: HKLM\SOFTWARE\Microsoft\exmpls completed. The server
with the failed Exchange Management Pack install, does not have this key.

I have looked at this KB article: 274696, and set the Default Access
Permissions on DCOM for System and Interactive accounts accordingly. I have
re-installed the MOM Agent on the server (manually removing any offending
registry & directory entries along the way).

One of the reasons for this problem is that the "Publish ExMP Data" MOM
Script fails somehow to correctly registry EMPKP.EXE (hence a MOM
Event:10000) or the COM component EMPKP.PubKeyPublisher fails (hence a MOM
Event:10001). I am guessing that if the COM component is successful, you get
the info completed in the registry key: HKLM\SOFTWARE\Microsoft\exmpls.

I think my problem is that the EMPKP.exe is not registring correctly and I
don't know how to registry it correctly manually.

I have also looked at KB article:
http://support.microsoft.com/default.aspx?scid=kb;en-us;899382, which talks
about Clustered Exchange servers having the same problem that I am having,
except that I don't have any clustered servers.

I know until I get a success exit of the "Publish ExMP Data" MOM Script (eg:
a MOM Event:9986) the Management Pack Wizard will continue to fail.

Any help greatfully appreciate...

[Chris Harris [MSFT]]

How to check for registration of the EMPKP helper on an Exchange 2003 server
running on Windows 2003:

1.) On the affected Exchange 2003 server running on Windows 2003 server,
from Start, Run type dcomcnfg and click OK.
2.) When the Component Services application opens, drill down to Component
Services -> Computers -> My Computer -> DCOM Config.
3.) Locate the DCOM object EMPKP. EMPKP has been successfully registered if
it shows up in the registered components tree.

If EMPKP was not registered successfully, and the DCOM object does not
exist, it can be manually registered.

To manually register EMPKP:

1.) Open a command prompt to the directory where EMPKP is located.
2.) Type "EMPKP /regserver" (without the quotes). NOTE: There will be no
indication of success or failure.
3.) Check for the EMPKP DCOM object as described previously.

--
Chris Harris
Microsoft Exchange

****** Disclaimer ******
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm.
****** /Disclaimer ******

"Shane Keys" <Shan...@discussions.microsoft.com> wrote in message
news:62B3985E-CCDE-4333...@microsoft.com...

[Shane Keys]

Thank you Chris very much for your response. :)

I was at least able to eliminate this as a potential cause of the script
failing. Just to let you know, the DCOM object was successfully registered,
however I went through the process of unregistering it to see if it was
removed as a DCOM Object (it was.) and then registering it again, to see if
it was created again as a DCOM Object successfully - and it was.

Ok, after a closer inspection of the "Publish ExMP Data" MOM Script, the
sequence seems to be:

1. Create a new ActiveX Object out of the EMPKP.PubKeyPublisher. (If it
fails with this creation generate MOM Event 10001.) - I know this is now
successful :)

2. Then publish or generate a Public Key using the newly created ActiveX
Object, which I suspect is put into the registry key:
HKLM\SOFTWARE\Microsoft\exmpls. (If it fails with publishing this public key
info, generate MOM Event 10000.) - I think this is possible my problem of
concern! :(

3. Otherwise generate Success return code, ie MOM Event 9986. (If script
fails to generate Success return code, then generate MOM Event 10000.) - I
don't think this is my problem, because it seems to generate the other return
codes successfull. :P

Any other ideas or comments from people...

[Shane Keys]

To further add some more diagnostic data to my problem. ;)

I ran the following little test script on the server XYZMAIL01 that is
having the problem using the DCOM object EMPKP to generating the public key:

set oKeySet = CreateObject("EMPKP.PubKeyPublisher")
ErrID = oKeySet.Publish()
Msgbox (ErrID)

The Msgbox returns an error ID of 7000. I don't know what this error code
means?

[Chris Harris [MSFT]]

Shane,
This sounds somewhat like another problem that we investiaged earlier this
year and I would appreciate it if you would contact Microsoft Support and
reference me as well as S00M021N2. I would like to the the Support
Professionals determine if this is in fact the same issue or a different
one.

--
Chris Harris
Microsoft Exchange

****** Disclaimer ******
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm.
****** /Disclaimer ******

"Shane Keys" <Shan...@discussions.microsoft.com> wrote in message

news:B322A889-5E62-4C4B...@microsoft.com...

[Shane Keys]

Hi Chris,

I did what you said and log a call with Microsoft Support - their reply and
answer to my problem below....

------------------------------------ START OF EMAIL -------------------------
******* The following is an email for a support case from Microsoft Corp.
******* DO NOT REPLY TO THIS MESSAGE--your email will not be added to
******* the case if you do. Instead, FORWARD your response to the
******* email address COMP...@MICROSOFT.COM and place your text after
******* the keyword 'MESSAGE:'. Also, delete all other text above
******* and below the keywords 'CASE_ID_NUM: SRnnn' and 'MESSAGE:'
******* to ensure proper delivery of your email. Thank you.

CASE_ID_NUM: SRZ050818000030
MESSAGE:
********************** The message for you follows ************************
August 24, 2005
1:17 PM Central time

Hello Shane,

I wanted to inform you that I have been assigned your case as part of our
efforts to achieve a fast and accurate resolution to your issue. I have
become the new owner from this point forward.

As I understand it your technical issue is as follows. Please let me know if
it is otherwise:

Unable to generate 9986.

Sometimes the RTM version of empkp fails to properly register.

I'm attaching a fixed version.

Please unregister the current one you have. Rename it. Name the attachment
to empkp.exe and copy it to the same location. Re-regirster.
------------------------------------- END OF EMAIL ---------------

The file versions for other interested parties:

Empkp.exe - 6.5.7226.0 (old version that I had), dated: 04-2-2004 5:59pm
Empkp.exe - 6.5.7375.0 (new version supplied by MS), date: 02-25-2005 7:14am

I unregistered the old fle & renamed it, re-registered the new file, got a
9986 successful entry in MOM 2005 straight away. The Exchange Management
pack Wizard successfully completed. Yah...! :D

Cheers

Shane

[IcI 1094]

For us it was a simple expired password for the account that does the mail
flow monitoring.