Error: "Failed to verify user has mailbox, exit code 100" when installing Symantec Mail Security for Microsoft Exchange to a server within a Windows Server 2008 domain.

Products

• Mail Security for Microsoft Exchange

Issue/Introduction

Symantec Mail Security for Microsoft Exchange (SMSMSE) cannot be installed in a 2008 domain when the installer returns the error "Failed to verify user has mailbox" with exit code 100 after entering credentials for the SMSMSE service account. 

 In the ExeMonadE2K10_E2K15.log (located in the temp directory) the following error is observed:

Windows PowerShell updated your execution policy successfully, but the setting is overridden by a policy defined at a more specific scope.  Due to the override, your shell will retain its current effective execution policy of "<policy setting>". Type "Get-ExecutionPolicy -List" to view your execution policy settings. For more information, please see "Get-Help Set-ExecutionPolicy."

Cause

 A group policy object (GPO) is preventing the SMSMSE installer from executing the PowerShell script necessary to determine whether the service account has a mailbox associated.

Resolution

Configure the "Turn on Script Execution" GPO to allow SMSMSE powershell scripts to run:

To configure the GPO:

1. On the Domain controller, open the group policy manager (Start -> Administrative Tools -> Group Policy Management)
2. Expand the Forest, Domain, and Domain controller, and "Group Policy Objects" folders in the navigation pane.
3. Right click the "Default domain policy" and select Edit.
4. In the resulting "Group Policy Management Editor" window, Expand "Computer Configuration", then "Policies", then "Administrative Templates", then "Windows Components", then "Windows PowerShell".
5. In the right pane, right click the "Turn on Script Execution" policy, and set it to either "Allow local scripts and remote signed scripts" or set the policy to "Not Configured". Any other configuration of this policy will result in further errors.
6. On the Exchange server, open the a command prompt (Start -> Run, cmd) and type "gpupdate" then press Enter.
   
   After the group policy updates, re-run the SMSMSE installer, the install should now complete successfully.