Exchange 2016 Fails MRCA RPC Check

Copper Contributor

I have an Exchange 2016 server that is failing the Remote Connectivity Analyser RPC check at the Test Address Book "Check Name" step with An Error Occurred Attempting To Resolve The Name and RPC_E_ACCESS_DENIED:

 

mrca.pngThe MAPI test prior to this works fine, and Outlook clients are able to access and download the OAB.  But there must be something I've missed.  The link to tell me more about this issue is difficult to understand, and doesn't seem to be applicable...

 

1. Analyse the LAN Manager Authentication Level... this is Not Defined, so should be defaulting to Send NTLMv2 responses only according to the explanation.  Seems correct, we don't have anything earlier than Windows Server 2008 R2 on the server network, and the oldest client is Windows 7.

2. Make sure replication is working between domain controllers... there is only one domain controller.

3. Make sure appropriate user rights are granted... this is an admin account with full rights, and everything else seems to work.  The account can certainly log into the server.

 

It seems really strange that the ping to the MAPI Address Book endpoint is working, but when checking a name the error says it can't resolve the name.

 

These are the relevant Exchange properties, I believe...

 

Get-OutlookAnywhere | fl

RunspaceId                         : a9c741b4-af3a-4cab-aab8-1a0f735b6b69
ServerName                         : SN1
SSLOffloading                      : True
ExternalHostname                   : remote.externaldomain.com.au
InternalHostname                   : remote.externaldomain.com.au
ExternalClientAuthenticationMethod : Negotiate
InternalClientAuthenticationMethod : Negotiate
IISAuthenticationMethods           : {Basic, Ntlm, Negotiate}
XropUrl                            :
ExternalClientsRequireSsl          : True
InternalClientsRequireSsl          : True
MetabasePath                       : IIS://SN1.internaldomain.local/W3SVC/1/ROOT/Rpc
Path                               : C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\rpc
ExtendedProtectionTokenChecking    : None
ExtendedProtectionFlags            : {}
ExtendedProtectionSPNList          : {}
AdminDisplayVersion                : Version 15.1 (Build 2044.4)
Server                             : SN1
AdminDisplayName                   :
ExchangeVersion                    : 0.20 (15.0.0.0)
Name                               : Rpc (Default Web Site)
DistinguishedName                  : CN=Rpc (Default Web Site),CN=HTTP,CN=Protocols,CN=SN1,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=Customer Site Name,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=internaldomain,DC=local
Identity                           : SN1\Rpc (Default Web Site)
Guid                               : 6e12dcc5-06e2-45ea-8b10-950ce70c84b2
ObjectCategory                     : internaldomain.local/Configuration/Schema/ms-Exch-Rpc-Http-Virtual-Directory
ObjectClass                        : {top, msExchVirtualDirectory, msExchRpcHttpVirtualDirectory}
WhenChanged                        : 21/08/2020 3:46:31 PM
WhenCreated                        : 31/07/2020 4:04:00 PM
WhenChangedUTC                     : 21/08/2020 5:46:31 AM
WhenCreatedUTC                     : 31/07/2020 6:04:00 AM
OrganizationId                     :
Id                                 : SN1\Rpc (Default Web Site)
OriginatingServer                  : SN1.internaldomain.local
IsValid                            : True
ObjectState                        : Changed

---

Get-OutlookProvider | fl

RunspaceId             : a9c741b4-af3a-4cab-aab8-1a0f735b6b69
CertPrincipalName      :
Server                 :
TTL                    : 1
OutlookProviderFlags   : None
RequiredClientVersions :
AdminDisplayName       :
ExchangeVersion        : 0.1 (8.0.535.0)
Name                   : EXCH
DistinguishedName      : CN=EXCH,CN=Outlook,CN=AutoDiscover,CN=Client Access,CN=Customer Site Name,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=internaldomain,DC=local
Identity               : EXCH
Guid                   : 74590803-dbb5-4ad7-aca6-642a4b258613
ObjectCategory         : internaldomain.local/Configuration/Schema/ms-Exch-Auto-Discover-Config
ObjectClass            : {top, msExchAutoDiscoverConfig}
WhenChanged            : 31/07/2020 3:51:22 PM
WhenCreated            : 31/07/2020 3:51:22 PM
WhenChangedUTC         : 31/07/2020 5:51:22 AM
WhenCreatedUTC         : 31/07/2020 5:51:22 AM
OrganizationId         :
Id                     : EXCH
OriginatingServer      : SN1.internaldomain.local
IsValid                : True
ObjectState            : Unchanged
RunspaceId             : a9c741b4-af3a-4cab-aab8-1a0f735b6b69
CertPrincipalName      :
Server                 :
TTL                    : 1
OutlookProviderFlags   : None
RequiredClientVersions :
AdminDisplayName       :
ExchangeVersion        : 0.1 (8.0.535.0)
Name                   : EXPR
DistinguishedName      : CN=EXPR,CN=Outlook,CN=AutoDiscover,CN=Client Access,CN=Customer Site Name,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=internaldomain,DC=local
Identity               : EXPR
Guid                   : b175dc2e-7d79-48aa-be0c-e1e4e37600f9
ObjectCategory         : internaldomain.local/Configuration/Schema/ms-Exch-Auto-Discover-Config
ObjectClass            : {top, msExchAutoDiscoverConfig}
WhenChanged            : 31/07/2020 3:51:22 PM
WhenCreated            : 31/07/2020 3:51:22 PM
WhenChangedUTC         : 31/07/2020 5:51:22 AM
WhenCreatedUTC         : 31/07/2020 5:51:22 AM
OrganizationId         :
Id                     : EXPR
OriginatingServer      : SN1.internaldomain.local
IsValid                : True
ObjectState            : Unchanged
RunspaceId             : a9c741b4-af3a-4cab-aab8-1a0f735b6b69
CertPrincipalName      :
Server                 :
TTL                    : 1
OutlookProviderFlags   : None
RequiredClientVersions :
AdminDisplayName       :
ExchangeVersion        : 0.1 (8.0.535.0)
Name                   : WEB
DistinguishedName      : CN=WEB,CN=Outlook,CN=AutoDiscover,CN=Client Access,CN=Customer Site Name,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=internaldomain,DC=local
Identity               : WEB
Guid                   : 2b1c3d9c-ec07-45a1-89d9-aa2f5bbb10d9
ObjectCategory         : internaldomain.local/Configuration/Schema/ms-Exch-Auto-Discover-Config
ObjectClass            : {top, msExchAutoDiscoverConfig}
WhenChanged            : 31/07/2020 3:51:22 PM
WhenCreated            : 31/07/2020 3:51:22 PM
WhenChangedUTC         : 31/07/2020 5:51:22 AM
WhenCreatedUTC         : 31/07/2020 5:51:22 AM
OrganizationId         :
Id                     : WEB
OriginatingServer      : SN1.internaldomain.local
IsValid                : True
ObjectState            : Unchanged

---

Get-OabVirtualDirectory | fl

RunspaceId                      : a9c741b4-af3a-4cab-aab8-1a0f735b6b69
Name                            : OAB (Default Web Site)
PollInterval                    : 480
OfflineAddressBooks             : {}
RequireSSL                      : True
BasicAuthentication             : False
WindowsAuthentication           : True
OAuthAuthentication             : True
MetabasePath                    : IIS://SN1.internaldomain.local/W3SVC/1/ROOT/OAB
Path                            : C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\OAB
ExtendedProtectionTokenChecking : None
ExtendedProtectionFlags         : {}
ExtendedProtectionSPNList       : {}
AdminDisplayVersion             : Version 15.1 (Build 2044.4)
Server                          : SN1
InternalUrl                     : https://remote.externaldomain.com.au/OAB
InternalAuthenticationMethods   : {WindowsIntegrated, OAuth}
ExternalUrl                     : https://remote.externaldomain.com.au/OAB
ExternalAuthenticationMethods   : {WindowsIntegrated, OAuth}
AdminDisplayName                :
ExchangeVersion                 : 0.10 (14.0.100.0)
DistinguishedName               : CN=OAB (Default Web Site),CN=HTTP,CN=Protocols,CN=SN1,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=Customer Site Name,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=internaldomain,DC=local
Identity                        : SN1\OAB (Default Web Site)
Guid                            : 325c9658-29ff-40d5-bb3b-33bc2f446e5d
ObjectCategory                  : internaldomain.local/Configuration/Schema/ms-Exch-OAB-Virtual-Directory
ObjectClass                     : {top, msExchVirtualDirectory, msExchOABVirtualDirectory}
WhenChanged                     : 21/08/2020 1:41:58 AM
WhenCreated                     : 31/07/2020 4:04:30 PM
WhenChangedUTC                  : 20/08/2020 3:41:58 PM
WhenCreatedUTC                  : 31/07/2020 6:04:30 AM
OrganizationId                  :
Id                              : SN1\OAB (Default Web Site)
OriginatingServer               : SN1.internaldomain.local
IsValid                         : True
ObjectState                     : Changed

 

 Can anyone see where I have gone wrong?

2 Replies
Were you able to resolve this? I'm experiencing the exact same issue,

@prl77 Nope.  I just ran the test again twice, and it passed on the second attempt, so perhaps the timeout value set in the test is too low.

 

Fortunately there doesn't appear to be an impact on users, internal or external.