none
Exchange Web Services, EWS, OOF 401 Error (Blank Page) RRS feed

  • Question

  • Hi,

    We have just set up a new exchange 2007 server and have migrated about 100 mailboxes over to it from the other exchange servers.

    Everything is working fine except for OOF and shared calendars.

    When the user tries to open the automatic replies from outlook they receive the message:

    "Your automatic reply settings cannot be displayed because the server is currently unavailable. Try again later"

    When the user tries to the open the shared calendar of a user on the new server they can open the calendar however they get a message which says no connection next to the calendar.

    This issue is only affecting users on the new server. I am about 99% sure this is to do with Exchange Web Services (EWS).

    When I browse to the OOF URL from the outlook autoconfig tester the page just comes up blank. When checking the IIS logs I see this:

    2016-01-25 11:47:36 172.18.0.101 POST /EWS/Exchange.asmx - 443 - 37.191.97.194 Microsoft+Office/15.0+(Windows+NT+6.1;+Microsoft+Outlook+15.0.4787;+Pro) 401 2 5 218

    I only have Windows authentication enabled on the EWS virtual directory as per the defaults.

    Can anyone shed some light on this as it is driving me insane!

    Thanks in advance!

    Alex

    Monday, January 25, 2016 12:40 PM

Answers

  • Hi Alex,

    According to your description, please try to enable Kernel-Mode Authentication for EWS and OAB.

    Try below:
    1. Open IIS manager, switch to Site---> Default Web Site.
    2. Click EWS, Authentication. Ensure "Windows Authentication" is enabled, and click Advanced Settings to check Enable Kernel-Mode Authentication, then click OK. Figure as below:

    3. Click OAB to enable Kernel-Mode Authentication.
    4. Once above complete, run IISRESET /NOFORCE to take effect.

    If this issue persists, please remove EWS virtual directory, then recreate it for testing.
    For your reference: https://technet.microsoft.com/en-us/library/ff629372(v=exchg.141).aspx


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Allen Wang
    TechNet Community Support

    • Marked as answer by alexcarter404 Tuesday, January 26, 2016 9:43 AM
    Tuesday, January 26, 2016 8:56 AM
    Moderator
  • Allen you are a genius!

    Recreated the virtual directory and it works perfectly!

    I have been tearing my hair out for 2 weeks trying to fix this so thank you very much for your help!

    Cheers,

    Alex

    • Marked as answer by alexcarter404 Tuesday, January 26, 2016 9:43 AM
    Tuesday, January 26, 2016 9:43 AM

All replies

  • You shouldn't be changing the virtual directory settings in IIS, instead check the settings with Get-WebServicesVirtualDirectory and change them with Set-WebServicesVirtualDirectory.

    Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."
    Celebrating 20 years of providing Exchange peer support!

    Monday, January 25, 2016 9:16 PM
    Moderator
  • Hi Alex,

    According to your description, please try to enable Kernel-Mode Authentication for EWS and OAB.

    Try below:
    1. Open IIS manager, switch to Site---> Default Web Site.
    2. Click EWS, Authentication. Ensure "Windows Authentication" is enabled, and click Advanced Settings to check Enable Kernel-Mode Authentication, then click OK. Figure as below:

    3. Click OAB to enable Kernel-Mode Authentication.
    4. Once above complete, run IISRESET /NOFORCE to take effect.

    If this issue persists, please remove EWS virtual directory, then recreate it for testing.
    For your reference: https://technet.microsoft.com/en-us/library/ff629372(v=exchg.141).aspx


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Allen Wang
    TechNet Community Support

    • Marked as answer by alexcarter404 Tuesday, January 26, 2016 9:43 AM
    Tuesday, January 26, 2016 8:56 AM
    Moderator
  • Hi Ed,

    The Virtual directories are already set up.

    Please see the below output from the Get-WebServicesVirtualDirectory command:

    InternalNLBBypassUrl            : https://ims.network.hgf.com/ews/exchange.asmx
    Name                            : EWS (Default Web Site)
    InternalAuthenticationMethods   : {Ntlm, WindowsIntegrated}
    ExternalAuthenticationMethods   : {Ntlm, WindowsIntegrated}
    BasicAuthentication             : False
    DigestAuthentication            : False
    WindowsAuthentication           : True
    MetabasePath                    : IIS://ims.network.hgf.com/W3SVC/1/ROOT/EWS
    Path                            : C:\Program Files\Microsoft\Exchange Server\Cl
                                      ientAccess\exchweb\EWS
    ExtendedProtectionTokenChecking : None
    ExtendedProtectionFlags         : {}
    ExtendedProtectionSPNList       : {}
    Server                          : IMS
    InternalUrl                     : https://ims.network.hgf.com/EWS/Exchange.asmx
    ExternalUrl                     : 
    AdminDisplayName                : 
    ExchangeVersion                 : 0.1 (8.0.535.0)
    DistinguishedName               : CN=EWS (Default Web Site),CN=HTTP,CN=Protocol
                                      s,CN=IMS,CN=Servers,CN=Exchange Administrativ
                                      e Group (FYDIBOHF23SPDLT),CN=Administrative G
                                      roups,CN=HGF,CN=Microsoft Exchange,CN=Service
                                      s,CN=Configuration,DC=network,DC=hgf,DC=com
    Identity                        : IMS\EWS (Default Web Site)
    Guid                            : b761640c-698e-4d02-8bb3-6b6697ae9ea5
    ObjectCategory                  : network.hgf.com/Configuration/Schema/ms-Exch-
                                      Web-Services-Virtual-Directory
    ObjectClass                     : {top, msExchVirtualDirectory, msExchWebServic
                                      esVirtualDirectory}
    WhenChanged                     : 12/01/2016 12:53:10
    WhenCreated                     : 27/01/2010 14:43:51
    OriginatingServer               : ad6.network.hgf.com
    IsValid                         : True
    
    InternalNLBBypassUrl            : https://mail1.network.hgf.com/ews/exchange.as
                                      mx
    Name                            : EWS (Default Web Site)
    InternalAuthenticationMethods   : {Ntlm, WindowsIntegrated}
    ExternalAuthenticationMethods   : {Ntlm, WindowsIntegrated}
    BasicAuthentication             : False
    DigestAuthentication            : False
    WindowsAuthentication           : True
    MetabasePath                    : IIS://mail1.network.hgf.com/W3SVC/1/ROOT/EWS
    Path                            : D:\Program Files\MS Exchange Server 2007\Clie
                                      ntAccess\exchweb\EWS
    ExtendedProtectionTokenChecking : None
    ExtendedProtectionFlags         : {}
    ExtendedProtectionSPNList       : {}
    Server                          : MAIL1
    InternalUrl                     : https://mail1.network.hgf.com/EWS/Exchange.as
                                      mx
    ExternalUrl                     : 
    AdminDisplayName                : 
    ExchangeVersion                 : 0.1 (8.0.535.0)
    DistinguishedName               : CN=EWS (Default Web Site),CN=HTTP,CN=Protocol
                                      s,CN=MAIL1,CN=Servers,CN=Exchange Administrat
                                      ive Group (FYDIBOHF23SPDLT),CN=Administrative
                                       Groups,CN=HGF,CN=Microsoft Exchange,CN=Servi
                                      ces,CN=Configuration,DC=network,DC=hgf,DC=com
    Identity                        : MAIL1\EWS (Default Web Site)
    Guid                            : 531199ca-b82d-4f22-91aa-b17dc549d68f
    ObjectCategory                  : network.hgf.com/Configuration/Schema/ms-Exch-
                                      Web-Services-Virtual-Directory
    ObjectClass                     : {top, msExchVirtualDirectory, msExchWebServic
                                      esVirtualDirectory}
    WhenChanged                     : 12/01/2016 12:53:10
    WhenCreated                     : 16/03/2007 12:25:44
    OriginatingServer               : ad6.network.hgf.com
    IsValid                         : True
    
    InternalNLBBypassUrl            : https://mail2.network.hgf.com/ews/exchange.as
                                      mx
    Name                            : EWS (Default Web Site)
    InternalAuthenticationMethods   : {Ntlm, WindowsIntegrated}
    ExternalAuthenticationMethods   : {Ntlm, WindowsIntegrated}
    BasicAuthentication             : False
    DigestAuthentication            : False
    WindowsAuthentication           : True
    MetabasePath                    : IIS://mail2.network.hgf.com/W3SVC/1/ROOT/EWS
    Path                            : C:\Program Files\Microsoft\Exchange Server\Cl
                                      ientAccess\exchweb\EWS
    ExtendedProtectionTokenChecking : None
    ExtendedProtectionFlags         : {}
    ExtendedProtectionSPNList       : {}
    Server                          : MAIL2
    InternalUrl                     : https://mail2.network.hgf.com/EWS/Exchange.as
                                      mx
    ExternalUrl                     : 
    AdminDisplayName                : 
    ExchangeVersion                 : 0.1 (8.0.535.0)
    DistinguishedName               : CN=EWS (Default Web Site),CN=HTTP,CN=Protocol
                                      s,CN=MAIL2,CN=Servers,CN=Exchange Administrat
                                      ive Group (FYDIBOHF23SPDLT),CN=Administrative
                                       Groups,CN=HGF,CN=Microsoft Exchange,CN=Servi
                                      ces,CN=Configuration,DC=network,DC=hgf,DC=com
    Identity                        : MAIL2\EWS (Default Web Site)
    Guid                            : 1dc2ed3a-3c63-4a78-a535-1bf132a0c1fa
    ObjectCategory                  : network.hgf.com/Configuration/Schema/ms-Exch-
                                      Web-Services-Virtual-Directory
    ObjectClass                     : {top, msExchVirtualDirectory, msExchWebServic
                                      esVirtualDirectory}
    WhenChanged                     : 12/01/2016 12:53:10
    WhenCreated                     : 05/01/2011 11:32:06
    OriginatingServer               : ad6.network.hgf.com
    IsValid                         : True
    
    InternalNLBBypassUrl            : https://mail3.network.hgf.com/ews/exchange.as
                                      mx
    Name                            : EWS (Default Web Site)
    InternalAuthenticationMethods   : {Ntlm, WindowsIntegrated}
    ExternalAuthenticationMethods   : {Ntlm, WindowsIntegrated}
    BasicAuthentication             : False
    DigestAuthentication            : False
    WindowsAuthentication           : True
    MetabasePath                    : IIS://mail3.network.hgf.com/W3SVC/1/ROOT/EWS
    Path                            : C:\Program Files\Microsoft\Exchange Server\Cl
                                      ientAccess\exchweb\EWS
    ExtendedProtectionTokenChecking : None
    ExtendedProtectionFlags         : {}
    ExtendedProtectionSPNList       : {}
    Server                          : MAIL3
    InternalUrl                     : https://mail3.network.hgf.com/EWS/Exchange.as
                                      mx
    ExternalUrl                     : 
    AdminDisplayName                : 
    ExchangeVersion                 : 0.1 (8.0.535.0)
    DistinguishedName               : CN=EWS (Default Web Site),CN=HTTP,CN=Protocol
                                      s,CN=MAIL3,CN=Servers,CN=Exchange Administrat
                                      ive Group (FYDIBOHF23SPDLT),CN=Administrative
                                       Groups,CN=HGF,CN=Microsoft Exchange,CN=Servi
                                      ces,CN=Configuration,DC=network,DC=hgf,DC=com
    Identity                        : MAIL3\EWS (Default Web Site)
    Guid                            : 7f97c034-40e5-4f97-9fd9-4d59b1aaa9d0
    ObjectCategory                  : network.hgf.com/Configuration/Schema/ms-Exch-
                                      Web-Services-Virtual-Directory
    ObjectClass                     : {top, msExchVirtualDirectory, msExchWebServic
                                      esVirtualDirectory}
    WhenChanged                     : 12/01/2016 12:53:10
    WhenCreated                     : 07/01/2011 14:24:10
    OriginatingServer               : ad6.network.hgf.com
    IsValid                         : True
    
    InternalNLBBypassUrl            : https://mail4.network.hgf.com/ews/exchange.as
                                      mx
    Name                            : EWS (Default Web Site)
    InternalAuthenticationMethods   : {Ntlm, WindowsIntegrated}
    ExternalAuthenticationMethods   : {Ntlm, WindowsIntegrated}
    BasicAuthentication             : False
    DigestAuthentication            : False
    WindowsAuthentication           : True
    MetabasePath                    : IIS://MAIL4.network.hgf.com/W3SVC/1/ROOT/EWS
    Path                            : C:\Program Files\Microsoft\Exchange Server\Cl
                                      ientAccess\exchweb\EWS
    ExtendedProtectionTokenChecking : None
    ExtendedProtectionFlags         : {}
    ExtendedProtectionSPNList       : {}
    Server                          : MAIL4
    InternalUrl                     : https://mail4.network.hgf.com/EWS/Exchange.as
                                      mx
    ExternalUrl                     : https://mail.hgf.com/EWS/Exchange.asmx
    AdminDisplayName                : 
    ExchangeVersion                 : 0.1 (8.0.535.0)
    DistinguishedName               : CN=EWS (Default Web Site),CN=HTTP,CN=Protocol
                                      s,CN=MAIL4,CN=Servers,CN=Exchange Administrat
                                      ive Group (FYDIBOHF23SPDLT),CN=Administrative
                                       Groups,CN=HGF,CN=Microsoft Exchange,CN=Servi
                                      ces,CN=Configuration,DC=network,DC=hgf,DC=com
    Identity                        : MAIL4\EWS (Default Web Site)
    Guid                            : 12e81def-be51-4a9a-a031-d7d4d3dd89e6
    ObjectCategory                  : network.hgf.com/Configuration/Schema/ms-Exch-
                                      Web-Services-Virtual-Directory
    ObjectClass                     : {top, msExchVirtualDirectory, msExchWebServic
                                      esVirtualDirectory}
    WhenChanged                     : 14/01/2016 10:56:07
    WhenCreated                     : 22/12/2015 14:12:37
    OriginatingServer               : ad6.network.hgf.com
    IsValid                         : True
    
    
    

    Regards,

    Alex

    Tuesday, January 26, 2016 9:29 AM
  • Hi Allen,

    Thanks for your reply. However kernel mode auth is already set on the EWS directory, Kernel mode authentication is greyed out on the OAB directory. I have also tried enabling anonymous auth and then running an IISRESET which does not work either. I will rebuild the EWS VD now and update shortly.

    Cheers,

    Alex

    Tuesday, January 26, 2016 9:31 AM
  • Allen you are a genius!

    Recreated the virtual directory and it works perfectly!

    I have been tearing my hair out for 2 weeks trying to fix this so thank you very much for your help!

    Cheers,

    Alex

    • Marked as answer by alexcarter404 Tuesday, January 26, 2016 9:43 AM
    Tuesday, January 26, 2016 9:43 AM