I experienced this issue on one of my Exchange 2013 deployments running CU2.
AD PREP, Forest prep and installations completed successfully without a single error, however the “Health Monitoring” Mailboxes are missing from the “Monitoring Mailboxes” container under “Microsoft Exchange System Objects” in AD.
Typical Event Log Entry:
Error 2014-01-30 01:15:39 AM ManagedAvailability 4 Monitoring
The mail delivery smtp probe failed 6 times over 42 minutes.
Active Directory operation failed on servername.com . This error is not retriable. Additional information: Access is denied.
Active directory response: 00000005: SecErr: DSID-031A1256, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
The only real way to fix this is running “setup /r” again which would fix the permissions, which is not always something that can be done at a whim, so you could wait for the next update to be available and schedule your maintenance or you could perform this workaround
Change that startup type on the “Microsoft Exchange Health Manager” to the credentials of the Exchange Administrator.
Restart the service and wait for the Health Service to initiate a probe which requires the existance of the accounts.
Review the containers in AD and you will see the mailboxes have now been created:
Whilst this is a temporary workaround I have also used this when setting up the OATH between my Exchange 2013 and Lync 2013 Deployments when the accounts for oath cannot be created due to AD permissions.
Once you are done just remember to change the startup account back to the local system account.