Forum Discussion
Exchange 2016 EAC redirects to OWA
- Hello Navishkar,
These are from the EWS but could you check them for the OWA and ECP directories?
And do they match with IIS?
Also, could you recycle the IIS sites?
Aaah I have been dealing with this a lot lately, this is because for some reason the EWS directory isn't accessible through basic auth.
You can resolve this with the following PowerShell commands:
get-WebServicesVirtualDirectory | Set-WebServicesVirtualDirectory -MRSproxyenabled $false
get-WebServicesVirtualDirectory | Set-WebServicesVirtualDirectory -basicauthentication $true
get-WebServicesVirtualDirectory | Set-WebServicesVirtualDirectory -MRSproxyenabled $true
EWS is used by Office 365 to process mailbox onboarding.
BemmelenPatrick Thanks for that info but I never had to change anything on the EWS virtual directory. Only after I made changes to the OWA directory was Office 365 able to connect to the migration endpoint.
- Hello Navishkar,
That's strange that this was the solution but if it works it works 😉
Did you already change the virtual directory permissions to the article I've added in my previous message?Seems like those settings you want me to apply are already on there:
[PS] C:\Windows\system32>Get-WebServicesVirtualDirectory -Server ttafdatvxmr2 | Select *auth*, *mrs*
CertificateAuthentication :
InternalAuthenticationMethods : {Basic, Ntlm, WindowsIntegrated, WSSecurity, OAuth}
ExternalAuthenticationMethods : {Basic, Ntlm, WindowsIntegrated, WSSecurity, OAuth}
LiveIdNegotiateAuthentication :
WSSecurityAuthentication : True
LiveIdBasicAuthentication : False
BasicAuthentication : True
DigestAuthentication : False
WindowsAuthentication : True
OAuthAuthentication : True
AdfsAuthentication : False
MRSProxyEnabled : True- Hello Navishkar,
These are from the EWS but could you check them for the OWA and ECP directories?
And do they match with IIS?
Also, could you recycle the IIS sites?
Do you think running the HCW will help correct all the authentication settings on the virtual directories? We last ran the HCW on the 2010 server, we haven't done it since adding the 2016 box.
Also, I noticed in 2016 there's a "default web site" and then there's "exchange backend". Do I need to correct the authentication settings on both?
Ah yes this makes sense now, yes you should run the HCW on the Exchange 2016 server and also make sure your external ports are forwarding to your Exchange 2016 server.
When you are in a Hybrid scenario the Exchange server with the most recent version of Exchange should always be the Hybrid configured server.And you should indeed also check both the virtual directories in IIS and via the get-owavirtualdirectory and get-ecpvirtualdirectory commands if these match.
