Exchange Script Stop Working any Ideas as to why

[conan3]

I have a script that was working just fine untill the last patch cycle and now it does not work. Gets access denied errors when trying to access the WMI on the remote machine.

Dave

Patches applied to DC and Exchange servers were

947864, IE Update
948590, GDI
948881, KillBits
941693, Windows Kernal
944338, Vbscript Jscript Remote Exploit
945553, DNS

Here is the code that was working just fine until this week.

Option Explicit
On Error Resume Next

Dim ServerList ' List of computers to check
Dim server ' Current computer to check
Dim fso ' File System Object
Dim strWinMgmts ' Connection string for WMI
Dim objWMIExchange ' Exchange Namespace WMI object
Dim listExchange_Mailboxs ' ExchangeLogons collection
Dim objExchange_Mailbox ' A single ExchangeLogon WMI object
Dim logfile ' Output file

Const cWMINameSpace = "root/MicrosoftExchangeV2"
Const cWMIInstance = "Exchange_Mailbox"
Const LOG_FILE = "EMailSize.csv"


'--------------------------------------
' Set up the array of email servers
'--------------------------------------
ServerList = Array("ExchangeClusterNode1.MyDomain","ExchangeClusterNode2.MyDomain")

'--------------------------------------
' Set up log file
'--------------------------------------
set fso = CreateObject("Scripting.FileSystemObject")
Set logfile = fso.CreateTextFile(LOG_FILE)
logfile.WriteLine("""Display Name"",""Mailbox Size (KB)"",""Mailbox TotalItems"",""DateDiscoveredAbsentInDS"", _
""LegacyDN"",""Mailbox StoreName"",""Mailbox ServerName""")


' Create the object string, indicating WMI (winmgmts), using the
' current user credentials (impersonationLevel=impersonate),
' on the computer specified in the constant cComputerName, and
' using the CIM namespace for the Exchange provider.
WScript.Echo "Starting now"

'The rest of the script will fetch mailbox sizes for our servers. Mailbox sizes are in Kilobytes.
For Each server in ServerList
WScript.Echo "Starting " & server & " search."
strWinMgmts = "winmgmts:{impersonationLevel=impersonate}!//" & server & "/" & cWMINameSpace
'WScript.Echo strWinMgmts

Set objWMIExchange = GetObject(strWinMgmts)

' Verify we were able to correctly set the object.
If Err.Number <> 0 Then
WScript.Echo "ERROR: Unable to connect to the WMI namespace."
Else
'The Resources that currently exist appear as a list of
'Exchange_Mailbox instances in the Exchange namespace.
Set listExchange_Mailboxs = objWMIExchange.InstancesOf(cWMIInstance)

' Were any Exchange_Mailbox Instances returned?
If (listExchange_Mailboxs.count > 0) Then
' If yes, do the following:
' Iterate through the list of Exchange_Mailbox objects.
For Each objExchange_Mailbox in listExchange_Mailboxs

' Display the value of the Size property.
logfile.WriteLine("""" & objExchange_Mailbox.MailboxDisplayName & """,""" _
& objExchange_Mailbox.Size & """,""" & objExchange_Mailbox.TotalItems & """,""" _
& objExchange_Mailbox.DateDiscoveredAbsentInDS & """,""" & objExchange_Mailbox.LegacyDN _
& """,""" & objExchange_Mailbox.StoreName & """,""" & objExchange_Mailbox.ServerName & """")
Next
Else
' If no Exchange_Mailbox instances were returned, display that.
WScript.Echo "WARNING: No Exchange_Mailbox instances were returned."
End If
End If
Next

Wscript.Echo "Completed"

 

[conan3]

Here is another script that no longer works on the Domain Controllers or the Exchange Servers, but work on the member servers just fine...

I think the problems are related.

Dave

strComputer = "MemberServer1"
'strComputer = "DomainController1"
'strComputer = "ExchangeServer1"
Set objWMIService = GetObject("winmgmts:" _
& "{impersonationLevel=impersonate}!\\" _
& strComputer & "\root\cimv2")
Set colProcessList = objWMIService.ExecQuery _
("Select * from Win32_Process")
For Each objProcess in colProcessList
Wscript.Echo "Process Name: " & objProcess.Name
Next

 

[Brycspain]

I would turn off error checking on the first script.

 

[Roadki11]

Two things jump out at me from your post.

Gets access denied errors when trying to access the WMI on the remote machine.

and

944338, Vbscript Jscript Remote Exploit

I would uninstall that hotfix and see if functionality returns, if it does i would look into what the hotfix affects and make adjustments accordingly.



RoadKi11

"This apparent fear reaction is typical, rather than try to solve technical problems technically, policy solutions are often chosen." - Fred Cohen

 

[tsuji]

You should check, on the server, more than anything else the wmi control service security, on root\cimv2 say, for the account accessing the server. (Remote enable should be allowed.)

 

[conan3]

Found it.

sorry didn't get back here sooner to post it.

Microsoft Exchange Management service was not running on all nodes of the cluster.

Turned it back on and everthing worked again.

Now I just need to figure out why the service was not started/stopped.

Dave