Exchange Online Hybrid Migration- Cannot create Migration Endpoint

%3CLINGO-SUB%20id%3D%22lingo-sub-184615%22%20slang%3D%22en-US%22%3EExchange%20Online%20Hybrid%20Migration-%20Cannot%20create%20Migration%20Endpoint%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-184615%22%20slang%3D%22en-US%22%3E%3CP%3EExchange%202013%20Server.%20Ran%20Hybrid%20Wizard%20Successfully.%26nbsp%3B%20AD%20Accounts%20Synced%20through%20ADConnect.%26nbsp%3B%20Ran%20into%20a%20problem%20.%20Cannot%20create%20Migration%20Endpoint.%20Getting%20an%20Error%20%22%20Connection%20to%20the%20Server%20could%20not%20be%20completed.%3C%2FP%3E%3CP%3EChecked%20all%20the%20settings.%20MRSProxy%20enabled.%26nbsp%3B%20Followed%20this%20link%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fblogs.technet.microsoft.com%2Fexovoice%2F2016%2F09%2F19%2Ftroubleshooting-issues-where-the-migration-endpoint-cannot-be-created-in-hybrid-scenarios%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fblogs.technet.microsoft.com%2Fexovoice%2F2016%2F09%2F19%2Ftroubleshooting-issues-where-the-migration-endpoint-cannot-be-created-in-hybrid-scenarios%2F%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EStill%20No%20Luck.%26nbsp%3B%20Opened%20a%20Support%20case%20with%20Exchange%20ON%20PREM%20Team%2C%20they%20said%20no%20issue.%20Another%20ticket%20opened%20with%20o365%20team.%26nbsp%3B%20Still%20couldn't%20figure%20it%20out.%26nbsp%3B%20Any%20inputs%20%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-184615%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EExchange%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-187907%22%20slang%3D%22en-US%22%3ERe%3A%20Exchange%20Online%20Hybrid%20Migration-%20Cannot%20create%20Migration%20Endpoint%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-187907%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20found%20a%20resolution%20at%20last.%26nbsp%3B%20%26nbsp%3BAnd%20got%20it%20resolved.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EExchange%20On%20prem%20Server%20was%20giving%20a%20permission%20issue%20with%20Token%20Serialization.%3C%2FP%3E%3CP%3E%26nbsp%3BEvent%20ID%203002%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fsupport.microsoft.com%2Fen-us%2Fhelp%2F2898571%2Ferror-message-in-ems-eac-ecp-owa-or-outlook-on-the-web-in-exchange-ser%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsupport.microsoft.com%2Fen-us%2Fhelp%2F2898571%2Ferror-message-in-ems-eac-ecp-owa-or-outlook-on-the-web-in-exchange-ser%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-187090%22%20slang%3D%22en-US%22%3ERe%3A%20Exchange%20Online%20Hybrid%20Migration-%20Cannot%20create%20Migration%20Endpoint%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-187090%22%20slang%3D%22en-US%22%3EWhat%20did%20you%20get%20when%20you%20ran%20Test-MigrationServerAvailability%20from%20Exchange%20Online%20PowerShell%3F%20You%20did%20not%20post%20the%20message%20here%2C%20so%20it's%20very%20hard%20to%20guess%20to%20assist%20you.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-186827%22%20slang%3D%22en-US%22%3ERe%3A%20Exchange%20Online%20Hybrid%20Migration-%20Cannot%20create%20Migration%20Endpoint%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-186827%22%20slang%3D%22en-US%22%3E%3CDIV%3E%3CDIV%20class%3D%22_rp_45%22%3E%3CDIV%20class%3D%22_rp_55%20ms-font-weight-regular%20ms-font-color-neutralDark%20rpHighlightAllClass%20rpHighlightBodyClass%22%3E%3CDIV%3E%3CDIV%3E%3CDIV%3E%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%3EI%20tried%20all%20the%20Solutions%20and%20running%3Atired_face%3A%3C%2Fimg%3E%20out%20pf%20options%20now%26nbsp%3B%3C%2FDIV%3E%3CDIV%3EOpened%20a%20MS%20Ticket%2C%20still%20no%20luck..%3C%2FDIV%3E%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%3ERe%20ran%20the%20Hybrid%20Wizard%2C%20Isolated%20Firewall%2C%26nbsp%3B%20But%20still%20cannot%20create%20endpoint...%20If%20anyone%20can%20help%20me%20today%2C%20please%20let%20me%20know.%20Its%20Urgent!!%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%3E%3CDIV%20class%3D%22_pe_d%20_pe_92%22%3E%26nbsp%3B%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22_rp_a5%22%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%20class%3D%22_rp_h5%22%3E%26nbsp%3B%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-185432%22%20slang%3D%22en-US%22%3ERe%3A%20Exchange%20Online%20Hybrid%20Migration-%20Cannot%20create%20Migration%20Endpoint%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-185432%22%20slang%3D%22en-US%22%3E%3CP%3EHave%20you%20tried%20Test-MigrationServerAvailability%20cmdlet%2C%20it%20gives%20proper%20error%20messages!%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fpowershell%2Fmodule%2Fexchange%2Fmove-and-migration%2Ftest-migrationserveravailability%3Fview%3Dexchange-ps%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fpowershell%2Fmodule%2Fexchange%2Fmove-and-migration%2Ftest-migrationserveravailability%3Fview%3Dexchange-ps%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-185191%22%20slang%3D%22en-US%22%3ERe%3A%20Exchange%20Online%20Hybrid%20Migration-%20Cannot%20create%20Migration%20Endpoint%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-185191%22%20slang%3D%22en-US%22%3E%3CP%3EComputer%20account%20is%20a%20member%20of%20only%20following%20groups...%3C%2FP%3E%3CUL%3E%3CLI%3EDomain%20Computers%3C%2FLI%3E%3CLI%3EExchange%20Install%3C%2FLI%3E%3CLI%3EExchange%20Servers%3C%2FLI%3E%3CLI%3EExchange%20Trusted%20Subsystem%3C%2FLI%3E%3CLI%3EManaged%20Availability%20Servers%3C%2FLI%3E%3C%2FUL%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22text-base%20x-hidden-focus%22%3EFound%20adminCount%3C%2FSPAN%3E%20attribute%20was%20set%20to%201%2C%20Changed%20it%20to%200%2C%20Restarted%20the%20Exchange%20Server...%20Still%20the%20Same!!%20No%20Luck!!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-184976%22%20slang%3D%22en-US%22%3ERe%3A%20Exchange%20Online%20Hybrid%20Migration-%20Cannot%20create%20Migration%20Endpoint%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-184976%22%20slang%3D%22en-US%22%3EYou%20can't%20just%20change%20it%2C%20you%20have%20to%20see%20why%20it%20was%20set%20to%20one%2C%20checking%20those%20groups%20and%20making%20sure%20it%20didn't%20get%20added%20to%20another%20group.%20I%20had%20this%20issue%20cause%20I%20added%20the%20computer%20to%20another%20group%20when%20messing%20with%20something%20related%20to%20DAG%20a%20long%20time%20ago%20and%20didn't%20know%20it.%20And%20figure%20this%20out%20somehow%20before%20this%20article%20existed%2C%20but%20make%20sure%20you%20check%20that%20computer%20for%20all%20the%20groups%20it's%20a%20member%20of%20and%20check%20it%20out.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-184933%22%20slang%3D%22en-US%22%3ERe%3A%20Exchange%20Online%20Hybrid%20Migration-%20Cannot%20create%20Migration%20Endpoint%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-184933%22%20slang%3D%22en-US%22%3E%3CP%3EI%20already%20did%20IIS%20reset.%20I%20will%20try%20Chris%20Webb's%20Suggestion%20today%20to%20change%20the%20admincount%20attribute%20to%200%20and%20restart%20the%20server%20this%20evening.%26nbsp%3B%26nbsp%3B%20I%20will%20post%20the%20update%20here%20tomorrow.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-184628%22%20slang%3D%22en-US%22%3ERe%3A%20Exchange%20Online%20Hybrid%20Migration-%20Cannot%20create%20Migration%20Endpoint%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-184628%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Niju%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EPlease%20follow%20the%20article%20that%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F875%22%20target%3D%22_blank%22%3E%40Christopher%20Webb%3C%2FA%3E%20said%2C%20but%20if%20you%20do%20not%20have%20the%20MRS%20Proxy%20active%20before%20the%20wizard%20the%20wizard%20only%20enable%20it%2C%20you%20will%20need%20to%20do%20a%20iisreset%20on%20the%20server%20to%20make%20it%20full%20available.%20I%20past%20few%20time%20was%20only%20the%20iisreset%20on%20Hybrid%20server%20the%20issue.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-184618%22%20slang%3D%22en-US%22%3ERe%3A%20Exchange%20Online%20Hybrid%20Migration-%20Cannot%20create%20Migration%20Endpoint%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-184618%22%20slang%3D%22en-US%22%3EI%20had%20this%20issue%20awhile%20back%20and%20went%20round%20and%20round%20with%20it%20and%20it%20was%20something%20stupid%20easy%20to%20fix%20but%20unrelated%20to%20the%20error%20message%20but%20I%20can%E2%80%99t%20find%20any%20email%20related.%3CBR%20%2F%3E%3CBR%20%2F%3EYou%20check%20on%20this%20it%20might%20have%20been%20this%20bit%20I%20can%E2%80%99t%20rememebr%20clearly%20it%E2%80%99s%20late.%20But%20think%20it%20was%20related.%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fsupport.microsoft.com%2Fen-us%2Fhelp%2F2975731%2Faccess-is-denied-error-when-you-try-to-move-mailboxes-to-exchange-onli%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsupport.microsoft.com%2Fen-us%2Fhelp%2F2975731%2Faccess-is-denied-error-when-you-try-to-move-mailboxes-to-exchange-onli%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FLINGO-BODY%3E
Highlighted
Occasional Contributor

Exchange 2013 Server. Ran Hybrid Wizard Successfully.  AD Accounts Synced through ADConnect.  Ran into a problem . Cannot create Migration Endpoint. Getting an Error " Connection to the Server could not be completed.

Checked all the settings. MRSProxy enabled.  Followed this link

https://blogs.technet.microsoft.com/exovoice/2016/09/19/troubleshooting-issues-where-the-migration-e...

 

Still No Luck.  Opened a Support case with Exchange ON PREM Team, they said no issue. Another ticket opened with o365 team.  Still couldn't figure it out.  Any inputs ?

9 Replies
Highlighted
I had this issue awhile back and went round and round with it and it was something stupid easy to fix but unrelated to the error message but I can’t find any email related.

You check on this it might have been this bit I can’t rememebr clearly it’s late. But think it was related.

https://support.microsoft.com/en-us/help/2975731/access-is-denied-error-when-you-try-to-move-mailbox...

Highlighted

Hi Niju,

 

Please follow the article that @Deleted said, but if you do not have the MRS Proxy active before the wizard the wizard only enable it, you will need to do a iisreset on the server to make it full available. I past few time was only the iisreset on Hybrid server the issue.

Highlighted

I already did IIS reset. I will try Chris Webb's Suggestion today to change the admincount attribute to 0 and restart the server this evening.   I will post the update here tomorrow.

Highlighted
You can't just change it, you have to see why it was set to one, checking those groups and making sure it didn't get added to another group. I had this issue cause I added the computer to another group when messing with something related to DAG a long time ago and didn't know it. And figure this out somehow before this article existed, but make sure you check that computer for all the groups it's a member of and check it out.
Highlighted

Computer account is a member of only following groups...

  • Domain Computers
  • Exchange Install
  • Exchange Servers
  • Exchange Trusted Subsystem
  • Managed Availability Servers

 

Found adminCount attribute was set to 1, Changed it to 0, Restarted the Exchange Server... Still the Same!! No Luck!!

Highlighted
Highlighted
 
I tried all the Solutions and running:tired_face: out pf options now 
Opened a MS Ticket, still no luck..
 
Re ran the Hybrid Wizard, Isolated Firewall,  But still cannot create endpoint... If anyone can help me today, please let me know. Its Urgent!!
 
 
 
Highlighted
What did you get when you ran Test-MigrationServerAvailability from Exchange Online PowerShell? You did not post the message here, so it's very hard to guess to assist you.
Highlighted

We found a resolution at last.   And got it resolved.

 

Exchange On prem Server was giving a permission issue with Token Serialization.

 Event ID 3002,

 

https://support.microsoft.com/en-us/help/2898571/error-message-in-ems-eac-ecp-owa-or-outlook-on-the-...