@ Keith -- That's a bit strange that this patch fixed the EWS issue while OWA and ECP was already working without this patch. So I don't think this is a bug as such but I am investigating this behaviour. Also, this patch is for IIS 7.0 and IIS 7.5 so applies
to both Windows Server 2008 R2 and Windows Server 2012. Anyway, happy to hear that you have this all working now.
@Cameron -- That is correct, IIS ARR doesn't provide any pre-authentication. If pre-auth is a requirement then you can look at Web Application Proxy (WAP) which is available in Windows Server 2012 R2.
Enable Work from Anywhere without Losing Sleep: Remote Access with the Web Application Proxy and VPN Solutions
http://channel9.msdn.com/Events/TechEd/NorthAmerica/2013/WCA-B333#fbid=EQlpravP4PN
@ High Availability -- You can configure two IIS ARR boxes either in an Active/Passive or Active/Active configuration.
Active/Passive - This configuration achieves high availability.
Active/Active - This configuration achieves both high availability and scalability.
Achieving High Availability and Scalability - ARR and NLB
http://www.iis.net/learn/extensions/configuring-application-request-routing-(arr)/achieving-high-availability-and-scalability-arr-and-nlb