I can no longer connect to my exchange server from outlook either outside or inside my network.

Outlook shows as disconnected and keeps saying Exchange Admin has made changes and needs to restart.

I can connect to ECP ok but it takes ages like several minutes to come up.

Trying to connect OWA brings up the login, also takes ages and then generates a 404 failure

I've been pulling my hair out for several days, not sure what has changed to stop it from working?

My certificate hasn't expired and I believe all my auth settings and paths are correct, I have internal and external domains both set to my external domain.

I can connect via powershell ok.

I think my dns settings in my DC are correct but there could be something I'm missing.

If someone could please help me it would be greatly appreciated.

Exchange is installed on my my DC which I know is not ideal or recommended but it's been working fine upto a few days ago .

Kind Regards

Jamie

It's really hard to diagnose such a general problem, but I do have one thing for you to check.  If you have a multi-role (Mailbox & CAS) server, be sure that in IIS Manager the Exchange Back End web site has the "Microsoft Exchange" self-signed certificate bound to it on port 444.  I've seen this certificate get detached or replaced and symptoms like yours occur.

Hi Ed,

Thanks for the reply, I checked this and it's assigned to Microsoft Exchange correctly.

If I add an account to Outlook it adds ok but when I restart outlook I get The connection to Microsoft Exchange is Unavailable. Outlook must be online or connected to completed this action.

My problems started around the time that RAS role was accidently added to my DC, I've removed this but maybe it's changed some settings, I'm not sure to be honest.

Can you advise what logs I should be looking at to help fix this problem?

Kind Regards

Jamie

Can any client connect to your Exchange server via Outlook? What does autodiscover present for URL's when you run the Test E-Mail Auto Configuration?

Check the logs on your Exchange server (app logs). Also have you been able to recycle the Exchange services and or reboot the server?

If this is only affecting one mailbox try moving the mailbox to another database or disable the mailbox and re-enable.

Will.

Hi Jamie,

Thank you for your question.

We could refer to the following steps to troubleshoot:

1.        Make sure all necessary Exchange service is running
2.        Restart IIS to check if the issue persist
3.        Remove RAS completely by delete Window profile
4.        Disable A/V on Exchange server(DC) to check
5.        Check if there are any errors in application log

If there are any questions regarding this issue, please be free to let me know.

Best Regard,

Jim

Hi Will,

Thanks for your input it's extremely appreciated

no accounts can connect to exchange from outlook or owa from inside or outside my network

Apple Devices ipads/iphones seem to be able to view the inboxes but there is no mailflow so I'm unsure if they are just seeing a cached copy.

I can connect to exchange ECP but it takes ages to bring up the login page.

the outlook auto config shows as follows;

Protocol: Exchange RPC

Server: b4cfca7-b194-4d48-bd13-609478819c1b@walhouse.net.au
Login Namie: jamie
Auth Package: Unspecified

The log file Says

HttpSatus=200

Regards

Jamie

ems can see exchange server but takes several minutes to connect

• Edited by Jamie Walhouse 22 hours 4 minutes ago

Hi Will,

Thanks for your input it's extremely appreciated

no accounts can connect to exchange from outlook or owa from inside or outside my network

Apple Devices ipads/iphones seem to be able to view the inboxes but there is no mailflow so I'm unsure if they are just seeing a cached copy.

I can connect to exchange ECP but it takes ages to bring up the login page.

the outlook auto config shows as follows;

Protocol: Exchange RPC

Server: b4cfca7-b194-4d48-bd13-609478819c1b@walhouse.net.au
Login Namie: jamie
Auth Package: Unspecified

The log file Says

HttpSatus=200

Regards

Jamie

ems can see exchange server but takes several minutes to connect

• Edited by Jamie Walhouse Friday, July 17, 2015 9:22 AM

Hi Will,

Thanks for your input it's extremely appreciated

no accounts can connect to exchange from outlook or owa from inside or outside my network

Apple Devices ipads/iphones seem to be able to view the inboxes but there is no mailflow so I'm unsure if they are just seeing a cached copy.

I can connect to exchange ECP but it takes ages to bring up the login page.

the outlook auto config shows as follows;

Protocol: Exchange RPC

Server: b4cfca7-b194-4d48-bd13-609478819c1b@walhouse.net.au
Login Namie: jamie
Auth Package: Unspecified

The log file Says

HttpSatus=200

Regards

Jamie

ems can see exchange server but takes several minutes to connect

• Edited by Jamie Walhouse Friday, July 17, 2015 9:22 AM

Bump!

I noticed this in the logs

Log Name:      Application
Source:        MSExchange Mid-Tier Storage
Date:          18/07/2015 11:49:58 AM
Event ID:      10004
Task Category: (10)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      Server.walhouse.local
Description:
Failed to discover Ews Url for mailbox 'Microsoft Exchange:9ed5f4f6-931a-4350-92a4-a6e8f567f731:Mailbox Database 2016987774:Server.walhouse.local'.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="MSExchange Mid-Tier Storage" />
    <EventID Qualifiers="49152">10004</EventID>
    <Level>2</Level>
    <Task>10</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2015-07-18T01:49:58.000000000Z" />
    <EventRecordID>11255363</EventRecordID>
    <Channel>Application</Channel>
    <Computer>Server.walhouse.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Microsoft Exchange:9ed5f4f6-931a-4350-92a4-a6e8f567f731:Mailbox Database 2016987774:Server.walhouse.local</Data>
  </EventData>
</Event>

Name                                                        RpcClientAccessServer                                      
----                                                        ---------------------                                      
Mailbox Database 2016987774                                 Server.walhouse.local                                      

Hi,

I ended up removing exchange but now having reinstalling, if someone could please help it would be appreciated.

[07/19/2015 00:58:47.0354] [1] [ERROR] The following error was generated when "$error.Clear();
                  $defaultPort = 25;
                  $localServer = get-exchangeserver $RoleFqdnOrName -DomainController $RoleDomainController;

                  if ($localServer.IsFrontendTransportServer)
                  {
                    Write-ExchangeSetupLog -Info "Using port 2525 for the default hub receive connector since frontend role already present.";
                    $defaultPort = 2525;
                  }

                  $bindingString1 = '0.0.0.0:' + $defaultPort;
                  $bindingString2 = ':::' + $defaultPort;
                  $binding1 =  new-object Microsoft.Exchange.Data.IPBinding $bindingString1;
                  $binding2 =  new-object Microsoft.Exchange.Data.IPBinding $bindingString2;

                  new-receiveconnector `
                  -Name ("Default " + [String][System.Environment]::MachineName ) `
                  -MaxRecipientsPerMessage 5000 `
                  -Fqdn $RoleFqdnOrName `
                  -Bindings $binding1,$binding2 `
                  -RemoteIPRanges 0.0.0.0-255.255.255.255,[::]-FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF `
                  -DomainController $RoleDomainController `
                  -MaxInboundConnectionPerSource Unlimited `
                  -MaxInboundConnectionPercentagePerSource 100 `
                  -SizeEnabled EnabledWithoutValue;
                " was run: "Active Directory operation failed on Server.walhouse.local. The object 'CN=Default SERVER,CN=SMTP Receive Connectors,CN=Protocols,CN=SERVER,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=Walhouse,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=walhouse,DC=local' already exists.".
[07/19/2015 00:58:47.0354] [1] [ERROR] Active Directory operation failed on Server.walhouse.local. The object 'CN=Default SERVER,CN=SMTP Receive Connectors,CN=Protocols,CN=SERVER,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=Walhouse,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=walhouse,DC=local' already exists.
[07/19/2015 00:58:47.0354] [1] [ERROR] The object exists.
[07/19/2015 00:58:47.0354] [1] [ERROR-REFERENCE] Id=BridgeheadComponent___a525250ab5a4442c868ad368c34aad21 Component=EXCHANGE14:\Current\Release\Shared\Datacenter\Setup
[07/19/2015 00:58:47.0354] [1] Setup is stopping now because of one or more critical errors.

Did you uninstall. It gracefully or did it fail during the initial uninstall? Will.

Hi Will,

Thanks for your help this is driving me nuts, I tried removing gracefully and it failed so I had to use adsi as nothing would work, this is so frustrating and painful.

I don't really want to format the DC, surely there is a way to get this to work.

I'm at my wits end, I've looked on google and tried removing roles and re adding all sorts of things.

I really appreciate your help

Kind Regards

Jamie

At this point I do not know what you have all done with your environment, and using ADSIEdit is not a supported method to remove Exchange. Have you tried to install Exchange on a new server?

Will.

I don't have another server and it wouldn't remove using normal methods, I've spent all weekend trying to reinstall, what do you suggest?, the error message is kind of cryptic.
I don't know what else to try.

If anyone has some suggestions or have seen this error before and can help I would truly appreciate it.

Regards

Jamie

Looking at the error message look at the part where it says "active directory operation failed". It is saying the object for this exchange server already exists in the Configuration partition. Based on how you removed Exchange using ADSIEdit, you did not remove all of the entries. At this point if nothing else is working simply try removing this entry where it is failing and see if the install completes. However I think you may get further but you will then fight with another error message, however you won't know until you try. Will.

Hi Will,

I appreciate your help,

I'm getting the following error now

[07/19/2015 22:33:56.0189] [1] [ERROR] The following error was generated when "$error.Clear();
          Install-ExchangeCertificate -services IIS -DomainController $RoleDomainController
          if ($RoleIsDatacenter -ne $true -And $RoleIsPartnerHosted -ne $true)
          {
            Install-AuthCertificate -DomainController $RoleDomainController
          }
        " was run: "An IIS directory entry couldn't be created. The error message is The system cannot find the path specified.
. HResult = -2147024893".
[07/19/2015 22:33:56.0189] [1] [ERROR] An IIS directory entry couldn't be created. The error message is The system cannot find the path specified.
. HResult = -2147024893
[07/19/2015 22:33:56.0189] [1] [ERROR] The system cannot find the path specified.

Any Ideas ?

Regards

Jamie Walhouse

Hi Will,

Sorry to bother you again, I'm looking at getting another server machine and was wondering what's the best option

I was thinking of making it the DC and retiring the old one (format and use as a backup maybe) and then creating a VM on new server too install Exchange 2013

I'm looking at the following speced machine on ebay

Server Type: DELL POWEREDGE R710 

Processors: 2 X INTEL XEON QUAD CORE PROCESSOR E5504 2GHZ 4MB SMART CACHE 4.8GT/S  

Memory: 8GB MEMORY (SUPPORTS UP TO 288GB OF MEMORY TOTAL, 18 DIMM SLOTS)

Hard Drives: 2 X DELL 300GB 3.5 INCH 15K HARD DRIVE

Drive Bays: 6 X 3.5 INCH SFF SAS/SATA BAYS

Raid Controller: PERC 6/I SAS RAID CONTROLLER

Optical Drive(s): DVD-ROM DRIVE

DRAC: IDRAC6 EXPRESS

Networking: TWO DUAL PORT EMBEDDED BROADCOM NETXTREME II 5709C GIGABIT ETHERNET NIC WITH FAILOVER AND LOAD BALANCING

Slots: 2 PCIE X8 PLUS 2 PCIE X4 G2 OR 1 X16 PLUS 2 X4 G2

Graphics: INTEGRATED MATROX G200

Power Supply: 1 POWER SUPPLY'S

Dimensions: 2U RACK 26.80 INCH (68.07CM) X 17.44 INCH (44.31CM) X 3.40 INCH (8.64CM)

Rail Kit: NO RAIL KIT 

Bezel: BEZEL INCLUDED

Would this work or would all the old exchange problems get copied over to new server?
would the above machine run it ok?

Thanks again

Kind Regards

Jamie

The specs really depend on how big your Exchange environemnet is. It is not recommended to install Exchange on a DC except when you are running in an SBS environment.

Exchange should be installed (all roles) on its own server. This might also be why you ran into issues in the first place. If you install Exchange on another new machine then you should not run into any issues. However you may still have remnats of the old Exchange install in Active Directory which you should also try and cleanup.

Will.

Hi Will,

Sorry to bother you again, I'm looking at getting another server machine and was wondering what's the best option

I was thinking of making it the DC and retiring the old one (format and use as a backup maybe) and then creating a VM on new server too install Exchange 2013

I'm looking at the following speced machine on ebay

Server Type: DELL POWEREDGE R710 

Processors: 2 X INTEL XEON QUAD CORE PROCESSOR E5504 2GHZ 4MB SMART CACHE 4.8GT/S  

Memory: 8GB MEMORY (SUPPORTS UP TO 288GB OF MEMORY TOTAL, 18 DIMM SLOTS)

Hard Drives: 2 X DELL 300GB 3.5 INCH 15K HARD DRIVE

Drive Bays: 6 X 3.5 INCH SFF SAS/SATA BAYS

Raid Controller: PERC 6/I SAS RAID CONTROLLER

Optical Drive(s): DVD-ROM DRIVE

DRAC: IDRAC6 EXPRESS

Networking: TWO DUAL PORT EMBEDDED BROADCOM NETXTREME II 5709C GIGABIT ETHERNET NIC WITH FAILOVER AND LOAD BALANCING

Slots: 2 PCIE X8 PLUS 2 PCIE X4 G2 OR 1 X16 PLUS 2 X4 G2

Graphics: INTEGRATED MATROX G200

Power Supply: 1 POWER SUPPLY'S

Dimensions: 2U RACK 26.80 INCH (68.07CM) X 17.44 INCH (44.31CM) X 3.40 INCH (8.64CM)

Rail Kit: NO RAIL KIT 

Bezel: BEZEL INCLUDED

Would this work or would all the old exchange problems get copied over to new server?
would the above machine run it ok?

Thanks again

Kind Regards

Jamie

Hi Jamie,

Thank you for your question.

The hardware of Exchange 2013 could be referred by the following link:

https://technet.microsoft.com/en-us/library/aa996719(v=exchg.150).aspx

If there are any questions regarding this issue, please be free to let me know.

Best Regard,

Jim

Hi Will,

I'm thinking of creating 2 new VM's both running server 2012 on the new server box, having one as the DC and the other as purely for Exchange.
If I demote the old DC and Promote the new DC will it copy all the old Exchange corruption into the new DC and if it does is that likely to cause problems if I use the 2nd VM server 2012 to run exchange?
Or am I better to keep the existing DC running and just install Server 2012 & Exchange 2013 onto the new server.

Cheers

Jamie

Install Windows Server 2012 R2 and then Exchange 2013 CU9.

Hi Ed,
Thanks for your reply, do you mean create a whole new domain controller and forget about my old one?

or keep my existing domain controller on existing server box and install server 2012 & Exchange 2013 onto new server box.
I'm trying to figure the best way of doing it, if I build a new DC in a VM and then Promote it to be the new DC and then in another VM do a separate server 2012 build and install Exchange in this VM will that be ok.
Or will all the leftover settings from previous DC be copied to new DC if I promote it.
Sorry I'm confused lol.

Regards

Jamie

No, I'm specifically referring to the Exchange server.

Hi Ed,

I'm not sure I understand what you mean

Regards

Jamie

Hi Will/Anyone,

I built another server and installed a new copy of server 2012 and exchange 2013
I removed exchange from my DC and Exchange installed ok on new server, so it's now not on the same box as the DC.

I can bring up OWA and also ECP but if I log into ECP most of the items are missing and I can't add mail boxes or adjust transports etc.

I checked the Administrator user in AD and found it was missing the correct security access and have added these in but it doesn't seem to make any difference.

I gave the access to another account and it doesn't even allow login saying that It's not authorized to login into ECP.
I have checked that CAS role is installed which it is.
any idea's what might be causing the problem? do I need to restart DC when adding in the security groups for administrator? as I didn't do that.

Regards

Jamie

Hi Will/Anyone,

I built another server and installed a new copy of server 2012 and exchange 2013
I removed exchange from my DC and Exchange installed ok on new server, so it's now not on the same box as the DC.

I can bring up OWA and also ECP but if I log into ECP most of the items are missing and I can't add mail boxes or adjust transports etc.

I checked the Administrator user in AD and found it was missing the correct security access and have added these in but it doesn't seem to make any difference.

I gave the access to another account and it doesn't even allow login saying that It's not authorized to login into ECP.
I have checked that CAS role is installed which it is.
any idea's what might be causing the problem? do I need to restart DC when adding in the security groups for administrator? as I didn't do that.

Regards

Jamie

Bump anyone this is driving me mad it shouldn't be so hard

It doesn't seem to be picking up the security permissions from active directory and thinks the user is not a member of the security groups.

it allows administrator to login to ECP but doesn't have all the options to mange it

if I give another user access to server administrator group it doesn't make any difference they get a 403 error saying access is denied.

is it maybe picking up some old settings from the DC ? if so how do I fix this without blowing away the domain controller.

If someone could please help me I would really appreciate.

Regards

Jamie

Is your account in Organization Management?

Hi Ed,

Yes it is, it's like it's picking up other details from somewhere and totally ignoring whats in AD on domain Controller.
My old exchange that broke was on the domain Controller box, I thought I'd removed all the settings but maybe something is hanging around.
I'd prefer not having to Build another DC as that means blowing away both and starting totally from scratch.
This is so frustrating.
If you have any suggestions please advise as I'm pulling my hair out.

Kind Regards

Jamie Walhouse

Well, I'd start a new thread with your current problem.