DAG - This user can't sign in because this account is currently disabled issue.

[Karandras]

Hey,

So We have an exchange setup with 2 Exchange servers and 1 FSW. However, for some reason the FSW stopped working on the DAG and I've been trying to figure out how to get it working again.

The error is:

Unable to save property changes for 'File Share Witness'.

This user can't sign in because this account is currently disabled

This is what I've done so far:
-Checked for any disabled accounts, don't see a way to disable a computer or group.
-Verified that the Exchange Trusted Subsystem is part of the local admin group on the FSW
-Verified that both Exchange servers are part of the Exchange Trusted Subsystem
-Shared the folder to everyone (not a requirement but thought I would try it)
-Tried two different servers on the same domain to setup the FSW
-Tested - browse/write to the share using Administrator credentials from both Exchange servers
-Tried to add all domain computers to the Local Administrator group on the FSW
-Added Exchange Trusted Subsystem to the Share with full permissions, no change.
-Grasping at straws, didn't help.

I'm not exactly sure what else I can try, so I'm turning to the [H] to help out.
Can anyone suggest anything to assist me past this error?

Thanks!

 

[AltTabbins]

Edit: nevermind

 

[Karandras]

Well, I guess I'm a bit of a liar,

Looking through these instructions on setting up a DAG:

http://windowsitpro.com/blog/exchange-2013-dags-windows-2012-and-cno

It indicates to disable the DAG CNO in AD. With that disabled it wasn't able to connect to the FSW, when I enabled that I could connect to the FSW to get the DAG going again. Why do the instructions indicate to disable the DAG CNO?

Thanks!