RSS Subscription 167 Posts and 2,769 Comments

Exchange 2010 RTM DAG using Server 2008 R2 – Part 3

Welcome to Part 3 of this article series. In Part 1, we started off by discussing the goal of this lab. That goal is how to deploy a two-node Exchange 2010 RTM Database Availability Group (DAG) on Windows Server 2008 R2. We then prepared our Operating System with the Exchange 2010 Prerequisites which includes software prerequisites as well as modification to hardware configuration such as our Network Interface Cards (NIC)s.  In Part 2, we went over the installation of one of our Exchange 2010 Servers which included the Mailbox, Client Access, as well as Hub Transport Server Roles.

In this Part, I will go over the creation and configuration of our Database Availability Group (DAG).  We will then add our first Node to our DAG.

Part 1

Part 2

Part 3

Part 4

File Share Witness

We will be using a File Share Witness (FSW) on a non-Exchange Server.  This will go on our member server, SHUD-OCSFE01.

We will need to go onto our Member Server and add the “Exchange Trusted Subsystem” group to our Local Administrators Group.  If you do not do this, you will get an Access Denied error message. Unlike Exchange 2007, we do not have to pre-create the FSW.  We tell Exchange 2010 where the FSW will be located, and because the Exchange Trusted Subsystem is added to the non-Exchange box, it will have the permissions necessary to create, modify, and maintain the FSW.

It is still recommended to place the FSW on a Hub Transport Server.  In fact, if you don’t specify the FSW location (Witness Server and Witness Directory), Exchange 2010 will automatically go out and look for a Hub Transport Server and choose a location on its own.  Alternatively, you can specify the Witness Directory and not the Server; in which case Exchange 2010 will automatically choose an Exchange 2010 Server (non-DAG Hub Transport Server preferred) on its own but use the Directory you specified.

Creating the DAG using the EMC and assigning a Static IP

Open the Exchange Management Console (EMC) and go into Organization Management > Mailbox.  Click on Database Availability Group. As you can see, it’s currently empty.

Right-Click on the empty space and choose ” New Database Availability Group.”

Let’s give our DAG a name.  For purposes of this lab, I used the name ShudnowDAG.  As stated, we want SHUD-OCSFE01 to be our witness server and our directory will be C:\ShudnowDAG.  Click New to Create our DAG.

The DAG is successfully created.  At this time, an empty objecting representing the DAG with the name you specified and an object class of msExchMDBAvailabilityGroup is created in Active Directory. You can see the object in either ADSIEdit or LDP.  The DN for this object is:

CN=ShudnowDAG,CN=Database Availability Groups,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=Shudnow,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=shudnow,DC=net

The completion page will show a warning  informing you that the server that contains the FSW is not an Exchange Server.  We know this already as it was our intention to do this all along.

When the GUI is used to create a DAG, it uses DHCP for the Network Name cluster resource.  If we want to specify a static IP for our DAG, we need to use the Set-DatabaseAvailabilityGroup cmdlet.  The Set-DatabaseAvailabilityGroup cmdlet has a switch called -DatabaseAvailabilityGroupIpAddresseses.  This switch will and should never contain IP Addresses for your replication network.  This -DatabaseAvailabilityGroupIPAddresses switch is ONLY for your MAPI Network subnets so the Network Name resource can come online due to a dependency in the Failover Clustering Services among some other Exchange related functions.

Among some other Exchange related functions eh?  I knew you would ask! Read on…

The Network Name resource is what is used to update the password for the Cluster Name Object (CNO) which is the DAG$ computer account.  The Network Name resource does not have to necessarily be online for Exchange to operate properly, but if it’s not, the DAG$ computer account will expire.  Obviously this would not be a good thing and will cause bad things to happen.

There are also parts of the code that will attempt to connect to the Network Name resource (such as DAG member modifications), but if that fails, those pieces of code will fall back to the servername once the network timeout occurs.

Exchange also utilizes the Possible Owners of the Network Name resource for moving the Primary Active Manager (PAM) which is the server that has control of the default Cluster Group which essentially monitors database status and makes the decisions on what server mounts which database.  For more information about the Active Manager, click here.

So moving on… as you can see, our DAG is using DHCP which is denoted by the <> characters.

So taking a look at our first node, we see our MAPI Network is on the subnet due to the IP Address being  Our second node is on the same subnet.

We currently have free so we will use that static IP for our DAG.  It’s not absolutely necessary to use a static IP, but if you feel the need to use a static, feel free.

Now that we have our static IP chosen, let’s run the following command:

Set-DatabaseAvailabilityGroup -Identity ShudnowDAG -DatabaseAvailabilityGroupIPAddresses

We now see that our DAG has the following static IP configured.

Creating the DAG using the EMS and assigning a Static IP

Using the EMS is much faster.  Instead of doing all the above, all you need to do is run the following command:

New-DatabaseAvailabilityGroup -Name ShudnowDAG -WitnessServer SHUD-OCSFE01 -WitnessDirectory C:\ShudnowDAG -DatabaseAvailabilityGroupIPAddresses

See? Much faster than using the EMC.  This will definitely be the method I am going to be using in the future to create a DAG when using a static IP instead of DHCP.

Adding the first Node to our DAG

Well, let’s go ahead and add our first node to the DAG.  Go into the EMC > Organization Configuration > Mailbox > Database Availability Group > Right-Click our DAG > Manage Database availability Group Membership.

Add the first Node.  Click Manage to Continue.

Our first node has successfully been added.

But… what exactly was done during this behind the scenes when this first node was added to the DAG?  The following occurs (from Technet documentation):

  • The Windows Failover Clustering component is installed, if it is not already installed.
  • A failover cluster is created using the name of the DAG.
  • A cluster network object (CNO) is created in default computers container.
  • The name and IP address of the DAG is registered as a Host (A) record in DNS.
  • The server is added to DAG object in Active Directory.
  • The cluster database is updated with information on the databases that are mounted on the added server.

First of all,we can see the DAG has been registered in DNS.

Second of all, we can see the DAG’s Cluster Network Object (CNO) has been created in AD.

Third of all, we can see the cluster has been formed.  As you can see, there’s no CMS/Virtual Server in the Services and applications.  This is because Exchange 2010 is not a cluster aware application.  Exchange 2010 only utilizes Windows Failover Clustering Services for heartbeat information and cluster networks.

Finally, we can see that the cluster is currently set to Node Majority.  When we add our second node, the cluster will be switched to Node Majority with File Share Witness since we’ll have an even number of Exchange Nodes and will need a 3rd node/share to act as our witness.  Because of this, we won’t see any FSW data inside of FSW share until our second node is added to the DAG.


Well folks, that is all for Part 3 of this article. For Part 4, I will be adding the second node to the DAG and then create a  database which will then be synchronized to the second DAG node.


13 Responses to “Exchange 2010 RTM DAG using Server 2008 R2 – Part 3”

  1. on 16 Nov 2009 at 12:01 pmpoon

    part 3 and part 4 ? please !

  2. on 16 Nov 2009 at 5:23 pmElan Shudnow

    Part 3 is already released. You're making a comment in it!

  3. on 17 Nov 2009 at 10:57 amShawn Harry

    Awesome!!!! I simply luuuurve Exchange! best MTA in the world! Interesting to note that the wizard although it creates the object in AD doesn't create the necessary A record in DNS?

  4. on 17 Nov 2009 at 12:51 pmElan Shudnow

    It does create the A record. I show that piece twice. One with text saying when you add the 1st DAG member to the DAG, it creates the A record and then I also show an image of the DNS A record that was created.

  5. on 17 Nov 2009 at 3:13 pmShawn Harry

    For some reason it didn't on mine?!??! I had to add it manually from the shell. Hey ho! In business anyway now. Absolutely loving these new additions built on 2007. Many thanks for the tutorial Elan. If your lucky i may Exchange my exchange powers with you :-)

  6. on 12 Dec 2009 at 11:09 amrobk

    2 questions

    since we don’t use DHCP in our network what will happened when creating the DAG using GUI? What IP address will i get?

    If we are planning more that 2 exchange servers in DAG do we still utilize FSW feature?

    thank you

  7. on 14 Dec 2009 at 1:09 amsony

    Can I use my FileshareWitness server from different domain?

  8. on 07 May 2010 at 11:51 amGautam

    Your tutorials may it be about Exchange, OCS, etc are always easy to understand, well explained, easy to follow, overall it is awsome ! Thanks for it.

  9. […] Server 2010 RTM DAG with Windows Server 2008 R2 – Part 1, Part 2, Part 3, and Part […]

  10. […] Elan Shudnow’s Blog – Exchange 2010 RTM DAG using Server 2008 R2 […]

  11. on 26 Dec 2013 at 11:28 amDavid

    What if you're using a 3rd party DNS solution that doesn't automatically update when the DAG was created? I have exchange 2010 mailbox servers in 2 subnets and have added an IP from each subnet to the DAG. However I have to request the network team to create the DNS records for the new DAG. Do I need to request (1) A record to point "Dag1" to and (1) A record to point the same "Dag1" to

  12. on 31 Dec 2013 at 12:20 amAmit Khamkar

    Thankyou Shudnow!!!
    Thanks a lot….

  13. on 31 Dec 2013 at 2:34 amAmit Khamkar


    I tried the above lab on my on in a lab environment, I am stuck on an instance where I am unable to add my 2nd node in the DAG. When I try it doent show up in the window where the server addition is supposed to be done.

    Can you please help.


Trackback this post | Feed on Comments to this post

Leave a Reply