OK, need help. So, was working on another issue and broke some virtual directory settings :(

In ECP, went to OWA Virtual Directory, and under Owa, Default website, Authentication

Basic Authentication was checked, however, "User one or more standard authentication methods" button was not checked.  Again, troubleshooting another issue - I checked the "Use one or more standard authentication methods" button.  Now, I cannot access the ECP.  I get the EAC login page, and then once I login, I get "400 Page not found"

When I looked at the OWA virtual directory settings after I did this, InternalAuthenticationMethods showed only "Basic".  Ran set-owavirtualdirectory to set InternalAuthenticationMethods to "Basic,NTLM,WindowAuthetication", but still get the same error when I try to login to ECP.

Any ideas?  I was right on the verge of cutting over to 2013 (2010/2013 co-existence).  As we are close to cutover, don't really want to start deleting - recreating virtual directories.

Should note:

IIS Permission (default web site) - ECP - anon, basic and windows are enabled, all others disabled.  Owa - just basic and windows are enabled

Hi Theresa,

Thank you for your question.

Are there any update in recently?

We could restart IIS to check if we could logon. When we have a coexisted environment(Exchange 2010 and Exchange 2013), we could use the following link to access EAC:

https://CAS-Server-Name/ecp/?ExchClientVer=15

we could run Ipconfig /flushdns in CMD, then we could check if we could logon.

In another option, we create a new administrator account to check if the issue persist, if we could access EAC with new account, we could delete Windows profile with crrrent account.

If the issue persist, we could check application log if there are any errors, I suggest we send those errors to ibsexc@microsoft.com for our troubleshooting.

If there are any questions regarding this issue, please be free to let me know. 

Best Regard,

Jim

OK - got this working again.

As the vdir authentication got "messed up", I simply reset both of them (ECP and OWA) vdirs to the defaults, and ran iisreset:

set-ECPVirtualDirectory -Identity "servername\ecp (default web site)" -FormsAuthentication $true -WindowsAuthentication $false -BasicAuthinitcation $true

set-OWAVirtualDirectory -Identity "servername\Owa (default web site)" -FormsAuthentication $true -WindowsAuthentication $false -BasicAuthinitcation $true

IISReset

After that, was able to login to https://server/ecp/?exchclinetver=15 (because my admin mailbox is still on 2010)

Thanks!