EX2013 (co-existence with 2010)

I noticed some issues today while on VPN - getting "no info available" for some users in free/busy, and ews unavailable in Lync

Running test-outlookwebservices against the 2013 servers returns Autodiscover-OutlookProvider "The remote server returned an error (401 unauthorized).  2010 servers report no error when running this.  Should add that all DNS currently points to the 2010 environment, I am simply using local host files on my machine pointed to the 2013 cas for testing (so mail, autodiscover all point to the 2013 environment on my machine)

the urls for autodisover are correct

the certificate includes the sans

permissions look correct on iis directory and autodiscover folder

I'm not sure where to look from here.  Any

A few more oddities............use the scheduling assistant - choose User1 - no free/busy info.  go to add user 2, free busy is there and fine, and suddenly free/busy for user 1 is fine too?  This continues - add User 3, no free/busy, add user 4, free/busy is good, and now free/busy is good for user 3 as well........

Interesting - found this post: https://social.technet.microsoft.com/Forums/office/en-US/0a2a085b-389b-4081-8e6a-468f9c033913/exchange-2013-testoutlookwebservices-requires-mailboxcredential-parameter-for-autodiscover-outlook?forum=exchangesvrgeneral

Indeed, when I use:

Test-OutlookWebServices -identity someone@test.lab -MailboxCredential (get-credential test\someone) - I get success on Autodiscover, Web Services, Availability and address book services - and the serviceEndpoints point to my proper urls (ie - mail.domain.com)

If I run: Test-OutlookWebServices -clientaccessserver EX2013 -identity someone@test.lab -MailboxCredential (get-credential test\someone) - I get failures on Autodiscover, Web Services, Availability and address book services - and the ServiceEndPoints show up as EX2013CasServname