coexistence 2010/2016 access to EAC 2016 when mailbox is in 2010

%3CLINGO-SUB%20id%3D%22lingo-sub-200518%22%20slang%3D%22en-US%22%3Ecoexistence%202010%2F2016%20access%20to%20EAC%202016%20when%20mailbox%20is%20in%202010%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-200518%22%20slang%3D%22en-US%22%3E%3CP%3EHello%20All%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EProblem%3A-%26nbsp%3B%20During%20coexistence%202010%2F2016%2C%20you%20use%20your%20administrator%20login%20to%20access%20the%20new%20EAC%202016%2C%20but%20you%20get%20redirected%20to%20ECP%202010.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20appreciate%20any%20feedback%20and%20if%20you%20can%20actually%20replicate%20this%20issue%20in%20your%20test%20lab%20and%20share%20your%20findings.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20know%26nbsp%3Bthat%20if%20the%20administrator%20account%20is%20still%20located%20in%20a%20database%20that%20is%20not%20on%20Exchange%202016%2C%20you%20must%20use%20the%20specially%20formed%20URL%20to%20route%20the%20administrator%20to%20EAC%20-%26gt%3B%20(%2Fecp%3FExchClientVer%3D15)%2C%3CSTRONG%3E%26nbsp%3B%26nbsp%3B%3C%2FSTRONG%3Elets%20just%20say%20you%20don't%20want%20to%20change%20DNS%20settings%20yet%20and%20just%20want%20to%20have%20a%20look%20at%20the%20EAC%20after%20introducing%20your%20new%202016%20Exchange%20servers%20to%20your%20existing%202010%20organization%20and%20mailboxes%20are%20still%20in%202010.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESo%20I%20created%20an%20admin%20account%20with%20a%20mailbox%20via%20EMC%20in%20my%20exchange%202010%20and%20added%20it%20to%20organizational%20management%20role%2C%20server%20management%2C%20public%20folder%20management%2C%20view-only%2C%20recipient%20management%20roles%20%2C%20and%20that's%20all.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20went%20over%20to%20my%20Exchange%202016%2C%20opened%20internet%20explorer%20in-private%20browsing%20used%20the%20URL%20(%3CEM%3E%2Fecp%3FExchClientVer%3D15)%26nbsp%3B%3C%2FEM%3Eto%20login%20to%20EAC%2C%20but%26nbsp%3Bafter%20loading%20it%20redirects%20me%20still%20to%20ECP%202010%2C%20i%20tried%20this%20a%20few%20times%2C%20the%20URL%20is%20correct%2C%20i%20type%20it%20in%20myself%2C%20still%20it%20keeps%20redirecting%20to%20ECP%202010%2C%20restart%20owaapppool%2C%20iis%2C%20reboot%20server%2C%20flushdns%20-%20still%20redirects%20to%202010.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESo%20I%20went%20back%20to%202010%20server%2C%20I%20checked%20the%20admin%20account%20in%20AD%20and%20the%20membership%20role%20i%20assigned%2C%20then%20i%20added%20'discovery%20management%20role'%20to%20the%20account%2C%20which%20I%20did%20not%20add%20previously.%20I%20went%20back%20to%20Exchange%202016%20and%20on%20the%20first%20attempt%20using%20the%20URL%20(%3CEM%3E%2Fecp%3FExchClientVer%3D15)%3C%2FEM%3E%2C%20EAC%202016%20opens%20successfully%2C%20no%20more%20redirecting%20to%20ECP%202010.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESo%2C%20I%20go%20back%20to%20my%20admin%20AD%20account%2C%20removed%20the%20discovery%20management%20role%2C%20flushdns%20cache%20in%20Exchange%202016%20server%2C%20restart%20owaapppool%2C%20use%20internet%20explorer%20in%20private%20browsing%2C%20tried%20to%20login%20to%20EAC%202016%20-%20Again%2C%20problem%20returns%20and%20I%20am%20redirected%20to%20ECP%202010.%26nbsp%3B%20I%20repeated%20above%202%20steps%20again%20and%20again%20and%20its%20the%20same%20results%20each%20time.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20expert%20knowledge%20why%20the%20'discovery%20management%20role'%26nbsp%3B%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-200518%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EExchange%20Server%202016%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-214224%22%20slang%3D%22en-US%22%3ERe%3A%20coexistence%202010%2F2016%20access%20to%20EAC%202016%20when%20mailbox%20is%20in%202010%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-214224%22%20slang%3D%22en-US%22%3E%3CP%3EMaybe%20the%20account%20is%20a%20member%20of%20a%20AdminSDHolder%20security%20group%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-213292%22%20slang%3D%22en-US%22%3ERe%3A%20coexistence%202010%2F2016%20access%20to%20EAC%202016%20when%20mailbox%20is%20in%202010%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-213292%22%20slang%3D%22en-US%22%3E%3CP%3EI%20can%20only%20imagine%20that%20permission%20inheritance%20is%20blocked%20on%20that%20(admin)%20user%20object%20you%20try%20to%20access%20ECP.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAre%20you%20running%20the%20latest%20RU%20and%20CU%20updates%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-213052%22%20slang%3D%22en-US%22%3ERe%3A%20coexistence%202010%2F2016%20access%20to%20EAC%202016%20when%20mailbox%20is%20in%202010%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-213052%22%20slang%3D%22en-US%22%3EDoesn't%20click%2C%20must%20be%20some%20bug.%3CBR%20%2F%3ETry%20this%20if%20you%20notice%20any%20change%3CBR%20%2F%3Ehttps%3A%2F%2Flocalhost%2Fecp%2F%3FExchClientVer%3D15.1%3C%2FLINGO-BODY%3E
Highlighted
Occasional Contributor

Hello All,

 

Problem:-  During coexistence 2010/2016, you use your administrator login to access the new EAC 2016, but you get redirected to ECP 2010.

 

I appreciate any feedback and if you can actually replicate this issue in your test lab and share your findings.

 

I know that if the administrator account is still located in a database that is not on Exchange 2016, you must use the specially formed URL to route the administrator to EAC -> (/ecp?ExchClientVer=15),  lets just say you don't want to change DNS settings yet and just want to have a look at the EAC after introducing your new 2016 Exchange servers to your existing 2010 organization and mailboxes are still in 2010. 

 

So I created an admin account with a mailbox via EMC in my exchange 2010 and added it to organizational management role, server management, public folder management, view-only, recipient management roles , and that's all.

 

I went over to my Exchange 2016, opened internet explorer in-private browsing used the URL (/ecp?ExchClientVer=15) to login to EAC, but after loading it redirects me still to ECP 2010, i tried this a few times, the URL is correct, i type it in myself, still it keeps redirecting to ECP 2010, restart owaapppool, iis, reboot server, flushdns - still redirects to 2010.

 

So I went back to 2010 server, I checked the admin account in AD and the membership role i assigned, then i added 'discovery management role' to the account, which I did not add previously. I went back to Exchange 2016 and on the first attempt using the URL (/ecp?ExchClientVer=15), EAC 2016 opens successfully, no more redirecting to ECP 2010. 

 

So, I go back to my admin AD account, removed the discovery management role, flushdns cache in Exchange 2016 server, restart owaapppool, use internet explorer in private browsing, tried to login to EAC 2016 - Again, problem returns and I am redirected to ECP 2010.  I repeated above 2 steps again and again and its the same results each time.

 

Any expert knowledge why the 'discovery management role' ?

3 Replies
Highlighted
Doesn't click, must be some bug.
Try this if you notice any change
https://localhost/ecp/?ExchClientVer=15.1
Highlighted

I can only imagine that permission inheritance is blocked on that (admin) user object you try to access ECP.

 

Are you running the latest RU and CU updates?

Maybe the account is a member of a AdminSDHolder security group?