HCW8078 - Migration Endpoint Could not be created (Exchange 2010)

%3CLINGO-SUB%20id%3D%22lingo-sub-2279753%22%20slang%3D%22en-US%22%3EHCW8078%20-%20Migration%20Endpoint%20Could%20not%20be%20created%20(Exchange%202010)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2279753%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20all%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI'm%20trying%20to%20setup%20a%20hybrid%20with%20Exchange%202010%20(%3CSPAN%3E14.3.513.0%3C%2FSPAN%3E%3CSPAN%3E)%20and%20I%20get%20the%20error%20%22HCW8078%20-%20Migration%20Endpoint%20Could%20not%20be%20created%22%20at%20the%20end%20of%20the%20Wizard.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20I%20run%20Test-MigrationServerAvailability%20from%20the%20EOL%20Powershell%20I%20get%20the%20following%20error%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CFONT%20size%3D%222%22%20color%3D%22%23000080%22%3ERunspaceId%20%3A%20537c3401-d723-40f8-a9c9-9a82eeff5fbd%3C%2FFONT%3E%3CBR%20%2F%3E%3CFONT%20size%3D%222%22%20color%3D%22%23000080%22%3EResult%20%3A%20Failed%3C%2FFONT%3E%3CBR%20%2F%3E%3CFONT%20size%3D%222%22%20color%3D%22%23000080%22%3EMessage%20%3A%20The%20connection%20to%20the%20server%20'remote.xxxxxxxx.com'%20could%20not%20be%20completed.%3C%2FFONT%3E%3CBR%20%2F%3E%3CFONT%20size%3D%222%22%20color%3D%22%23000080%22%3ESupportsCutover%20%3A%20False%3C%2FFONT%3E%3CBR%20%2F%3E%3CFONT%20size%3D%222%22%20color%3D%22%23000080%22%3EErrorDetail%20%3A%20Microsoft.Exchange.Migration.MigrationServerConnectionFailedException%3A%20The%20connection%20to%20the%20server%20'remote.mydconsulting.com'%20could%20not%20be%20completed.%20---%26gt%3B%3C%2FFONT%3E%3CBR%20%2F%3E%3CFONT%20size%3D%222%22%20color%3D%22%23000080%22%3EMicrosoft.Exchange.MailboxReplicationService.MRSRemoteTransientException%3A%20%3CFONT%20color%3D%22%23FF0000%22%3EThe%20call%20to%3C%2FFONT%3E%20%3CFONT%20color%3D%22%23FF0000%22%3E'%3CA%20href%3D%22https%3A%2F%2Fremote.xxxxxxx.com%2FEWS%2Fmrsproxy.svc%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3Ehttps%3A%2F%2Fremote.xxxxxxx.com%2FEWS%2Fmrsproxy.svc%3C%2FA%3E'%20failed.%20Error%20details%3A%20Access%20is%20denied..%20---%26gt%3B%3C%2FFONT%3E%3C%2FFONT%3E%3CBR%20%2F%3E%3CFONT%20size%3D%222%22%20color%3D%22%23000080%22%3EMicrosoft.Exchange.MailboxReplicationService.MRSRemotePermanentException%3A%20Access%20is%20denied.%3C%2FFONT%3E%3CBR%20%2F%3E%3CFONT%20size%3D%222%22%20color%3D%22%23000080%22%3E---%20End%20of%20inner%20exception%20stack%20trace%20---%3C%2FFONT%3E%3CBR%20%2F%3E%3CFONT%20size%3D%222%22%20color%3D%22%23000080%22%3Eat%20Microsoft.Exchange.MailboxReplicationService.MailboxReplicationServiceFault.ReconstructAndThrow(String%20serverName%2C%20VersionInformation%20serverVersion)%3C%2FFONT%3E%3CBR%20%2F%3E%3CFONT%20size%3D%222%22%20color%3D%22%23000080%22%3Eat%20Microsoft.Exchange.Connections.Common.WcfClientWithFaultHandling%602.%26lt%3B%26gt%3Bc__DisplayClass4_0.%3CCALLSERVICE%3Eb__0()%3C%2FCALLSERVICE%3E%3C%2FFONT%3E%3CBR%20%2F%3E%3CFONT%20size%3D%222%22%20color%3D%22%23000080%22%3Eat%20Microsoft.Exchange.Net.WcfClientBase%601.CallService(Action%20serviceCall%2C%20String%20context)%3C%2FFONT%3E%3CBR%20%2F%3E%3CFONT%20size%3D%222%22%20color%3D%22%23000080%22%3Eat%20Microsoft.Exchange.Connections.Common.WcfClientWithFaultHandling%602.CallService(Action%20serviceCall%2C%20String%20context)%3C%2FFONT%3E%3CBR%20%2F%3E%3CFONT%20size%3D%222%22%20color%3D%22%23000080%22%3Eat%20Microsoft.Exchange.MailboxReplicationService.WcfClientWithVersion%602.CallService(Action%20serviceCall%2C%20String%20context)%3C%2FFONT%3E%3CBR%20%2F%3E%3CFONT%20size%3D%222%22%20color%3D%22%23000080%22%3Eat%20Microsoft.Exchange.Migration.MigrationExchangeProxyRpcClient.CanConnectToMrsProxy(Fqdn%20serverName%2C%20Guid%20mbxGuid%2C%20NetworkCredential%20credentials%2C%20LocalizedException%26amp%3B%20error)%3C%2FFONT%3E%3CBR%20%2F%3E%3CFONT%20size%3D%222%22%20color%3D%22%23000080%22%3E---%20End%20of%20inner%20exception%20stack%20trace%20---%3C%2FFONT%3E%3CBR%20%2F%3E%3CFONT%20size%3D%222%22%20color%3D%22%23000080%22%3Eat%20Microsoft.Exchange.Migration.MigrationEndpointVerifier.VerifyConnectivity(MigrationEndpointBase%20endpoint)%3C%2FFONT%3E%3CBR%20%2F%3E%3CFONT%20size%3D%222%22%20color%3D%22%23000080%22%3Eat%20Microsoft.Exchange.Management.Migration.MigrationService.Endpoint.TestMigrationServerAvailability.InternalProcessEndpoint(Boolean%20fromAutoDiscover)%3C%2FFONT%3E%3CBR%20%2F%3E%3CFONT%20size%3D%222%22%20color%3D%22%23000080%22%3ETestedEndpoint%20%3A%3C%2FFONT%3E%3CBR%20%2F%3E%3CFONT%20size%3D%222%22%20color%3D%22%23000080%22%3EIsValid%20%3A%20True%3C%2FFONT%3E%3CBR%20%2F%3E%3CFONT%20size%3D%222%22%20color%3D%22%23000080%22%3EIdentity%20%3A%3C%2FFONT%3E%3CBR%20%2F%3E%3CFONT%20size%3D%222%22%20color%3D%22%23000080%22%3EObjectState%20%3A%20New%3C%2FFONT%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20confirmed%20ports%20are%20opened%20on%20the%20firewall%2C%20in%20fact%2C%20I%20can%20see%20the%20connection%20coming%20in%20through%20port%20443.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI've%20also%20confirmed%20that%20the%20MRSPROXY%20is%20enabled%2C%20with%20Basic%2C%20NTLM%2C%20WindowsIntegrated%20and%20WSSecurity%20authentication%20set%20to%20true.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20can%20access%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fremote.xxxxx.com%2FEWS%2Fmrsproxy.svc'%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3Ehttps%3A%2F%2Fremote.xxxxx.com%2FEWS%2Fmrsproxy.svc'%3C%2FA%3E%26nbsp%3Bfrom%20outside%20and%20get%20the%20prompt%20to%20enter%20the%20credentials%2C%20which%20work.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20tried%20resetting%20IIS.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20also%20found%20that%20the%20computer%20object%20had%20the%20adminCount%20attribute%20set%20to%201%2C%20and%20that%20was%20part%20of%20the%20Cert%20Publishers%20security%20group.%20I%20removed%20the%20object%20from%20that%20group%2C%20set%20the%26nbsp%3BadminCount%20atribute%20set%20to%200%2C%20then%20restarted%20and%20the%20attribute%20was%20set%20back%20to%201%20automatically.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20ideas%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3CP%3EGabriel%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2279753%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EHybrid%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2281660%22%20slang%3D%22en-US%22%3ERe%3A%20HCW8078%20-%20Migration%20Endpoint%20Could%20not%20be%20created%20(Exchange%202010)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2281660%22%20slang%3D%22en-US%22%3EExactly...%20service%20issue.%20Waiting%20until%20tomorrow%20for%20the%20next%20update...%20Hopefully%20they%20will%20have%20it%20fixed.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2280936%22%20slang%3D%22en-US%22%3ERe%3A%20HCW8078%20-%20Migration%20Endpoint%20Could%20not%20be%20created%20(Exchange%202010)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2280936%22%20slang%3D%22en-US%22%3EThis%20explains%20it!%20%3CA%20href%3D%22https%3A%2F%2Fportal.microsoft.com%2FAdminportal%2FHome%3F%23%2Fservicehealth%2Fadvisories%2F%3A%2Falerts%2FEX250992%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fportal.microsoft.com%2FAdminportal%2FHome%3F%23%2Fservicehealth%2Fadvisories%2F%3A%2Falerts%2FEX250992%3C%2FA%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2280889%22%20slang%3D%22en-US%22%3ERe%3A%20HCW8078%20-%20Migration%20Endpoint%20Could%20not%20be%20created%20(Exchange%202010)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2280889%22%20slang%3D%22en-US%22%3EStill%20no%20success.%20I%20think%20the%20last%20patch%20we%20all%20had%20to%20install%20broke%20the%20hybrid%2C%20because%20we%20have%20another%20client%20with%20Exchange%202010%20which%20was%20running%20smoothly%20for%20some%20time%20and%20it%20broke%20a%20few%20days%20ago%2C%20we%20think%2C%20after%20installing%20the%20patch.%20That%20one%20was%20easy%20though%20because%20all%20mailboxes%20were%20already%20migrated%20so%20we%20could%20get%20rid%20of%20the%20hybrid%2C%20but%20in%20this%20case%20we%20haven't%20even%20started!%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2280681%22%20slang%3D%22en-US%22%3ERe%3A%20HCW8078%20-%20Migration%20Endpoint%20Could%20not%20be%20created%20(Exchange%202010)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2280681%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F1032957%22%20target%3D%22_blank%22%3E%40MTerf%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFound%20another%20article%20following%20this%20topic%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fgroups.google.com%2Fg%2Fntexchange%2Fc%2FpIJwUpBmfos%3Fpli%3D1%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3EHybrid%20Configuration%20Wizard%20for%20SBS%202011%20(Exchange%202010)%20migration%20-%20any%20and%20all%20help%20appreciated....%20(google.com)%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2280572%22%20slang%3D%22en-US%22%3ERe%3A%20HCW8078%20-%20Migration%20Endpoint%20Could%20not%20be%20created%20(Exchange%202010)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2280572%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F811355%22%20target%3D%22_blank%22%3E%40grever_sn%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20am%20having%20exactly%20the%20same%20problem.%26nbsp%3B%20It%20was%20working%20about%202%20weeks%20ago%2C%20I%20added%20the%20MRS%20Proxy%20at%20that%20time%2C%20performed%20a%20test%20migration%20without%20issue%2C%20then%20waited%20for%20the%20customer%20to%20be%20ready%20to%20start%20migrating%2C%20then%20when%20we%20were%20going%20to%20do%20the%20first%20migration%20batch%2C%20it%20stated%20that%20our%20migration%20endpoint%20was%20not%20functioning.%26nbsp%3B%20Now%20I%20cannot%20get%20it%20to%20add%20again.%26nbsp%3B%20I%20have%20done%20the%20same%20steps%20and%20I%20see%20this%20adminCount%20set%20to%201%20on%20my%20server%20too.%26nbsp%3B%20I%20removed%20the%20policy%20certificate%20authority%20from%20the%20server%20and%20removed%20it%20from%20the%20Cert%20Publishers%20group%20as%20well.%26nbsp%3B%20Still%20not%20able%20to%20add%20a%20migration%20endpoint%20on%20this%20server.%26nbsp%3B%20Have%20you%20had%20any%20success%20in%20resolving%20this%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2297303%22%20slang%3D%22en-US%22%3ERe%3A%20HCW8078%20-%20Migration%20Endpoint%20Could%20not%20be%20created%20(Exchange%202010)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2297303%22%20slang%3D%22en-US%22%3ESame%20issue%20here%20trying%20to%20implement%20a%20hybrid%20on%20an%20Exchange%202010%20server.%20Has%20anyone%20had%20any%20success%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2297357%22%20slang%3D%22en-US%22%3ERe%3A%20HCW8078%20-%20Migration%20Endpoint%20Could%20not%20be%20created%20(Exchange%202010)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2297357%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F1038114%22%20target%3D%22_blank%22%3E%40cjm-1993%3C%2FA%3E%26nbsp%3Bjust%20wait%20until%20the%20service%20health%20issue%20has%20been%20fully%20resolved%20and%20it%20should%20work%20normally%20again.%20%26nbsp%3BWatch%20this%20advisory%20for%20updates%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fportal.microsoft.com%2FAdminportal%2FHome%3F%23%2Fservicehealth%2Fadvisories%2F%3A%2Falerts%2FEX250992%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fportal.microsoft.com%2FAdminportal%2FHome%3F%23%2Fservicehealth%2Fadvisories%2F%3A%2Falerts%2FEX250992%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHope%20this%20helps!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2300321%22%20slang%3D%22en-US%22%3ERe%3A%20HCW8078%20-%20Migration%20Endpoint%20Could%20not%20be%20created%20(Exchange%202010)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2300321%22%20slang%3D%22en-US%22%3EFYI%2C%20I've%20just%20tried%20to%20run%20the%20Hybrid%20Wizard%20again%20and%20it%20completed%20successfully.%3C%2FLINGO-BODY%3E
New Contributor

Hi all,

 

I'm trying to setup a hybrid with Exchange 2010 (14.3.513.0) and I get the error "HCW8078 - Migration Endpoint Could not be created" at the end of the Wizard.

 

If I run Test-MigrationServerAvailability from the EOL Powershell I get the following error:

 

RunspaceId : 537c3401-d723-40f8-a9c9-9a82eeff5fbd
Result : Failed
Message : The connection to the server 'remote.xxxxxxxx.com' could not be completed.
SupportsCutover : False
ErrorDetail : Microsoft.Exchange.Migration.MigrationServerConnectionFailedException: The connection to the server 'remote.mydconsulting.com' could not be completed. --->
Microsoft.Exchange.MailboxReplicationService.MRSRemoteTransientException: The call to 'https://remote.xxxxxxx.com/EWS/mrsproxy.svc' failed. Error details: Access is denied.. --->
Microsoft.Exchange.MailboxReplicationService.MRSRemotePermanentException: Access is denied.
--- End of inner exception stack trace ---
at Microsoft.Exchange.MailboxReplicationService.MailboxReplicationServiceFault.ReconstructAndThrow(String serverName, VersionInformation serverVersion)
at Microsoft.Exchange.Connections.Common.WcfClientWithFaultHandling`2.<>c__DisplayClass4_0.<CallService>b__0()
at Microsoft.Exchange.Net.WcfClientBase`1.CallService(Action serviceCall, String context)
at Microsoft.Exchange.Connections.Common.WcfClientWithFaultHandling`2.CallService(Action serviceCall, String context)
at Microsoft.Exchange.MailboxReplicationService.WcfClientWithVersion`2.CallService(Action serviceCall, String context)
at Microsoft.Exchange.Migration.MigrationExchangeProxyRpcClient.CanConnectToMrsProxy(Fqdn serverName, Guid mbxGuid, NetworkCredential credentials, LocalizedException& error)
--- End of inner exception stack trace ---
at Microsoft.Exchange.Migration.MigrationEndpointVerifier.VerifyConnectivity(MigrationEndpointBase endpoint)
at Microsoft.Exchange.Management.Migration.MigrationService.Endpoint.TestMigrationServerAvailability.InternalProcessEndpoint(Boolean fromAutoDiscover)
TestedEndpoint :
IsValid : True
Identity :
ObjectState : New

 

I have confirmed ports are opened on the firewall, in fact, I can see the connection coming in through port 443.

 

I've also confirmed that the MRSPROXY is enabled, with Basic, NTLM, WindowsIntegrated and WSSecurity authentication set to true.

 

I can access https://remote.xxxxx.com/EWS/mrsproxy.svc' from outside and get the prompt to enter the credentials, which work.

 

I tried resetting IIS.

 

I also found that the computer object had the adminCount attribute set to 1, and that was part of the Cert Publishers security group. I removed the object from that group, set the adminCount atribute set to 0, then restarted and the attribute was set back to 1 automatically.

 

Any ideas?

 

Thanks

Gabriel

 

 

 

9 Replies

@grever_sn 

 

I am having exactly the same problem.  It was working about 2 weeks ago, I added the MRS Proxy at that time, performed a test migration without issue, then waited for the customer to be ready to start migrating, then when we were going to do the first migration batch, it stated that our migration endpoint was not functioning.  Now I cannot get it to add again.  I have done the same steps and I see this adminCount set to 1 on my server too.  I removed the policy certificate authority from the server and removed it from the Cert Publishers group as well.  Still not able to add a migration endpoint on this server.  Have you had any success in resolving this?

Still no success. I think the last patch we all had to install broke the hybrid, because we have another client with Exchange 2010 which was running smoothly for some time and it broke a few days ago, we think, after installing the patch. That one was easy though because all mailboxes were already migrated so we could get rid of the hybrid, but in this case we haven't even started!
Exactly... service issue. Waiting until tomorrow for the next update... Hopefully they will have it fixed.
Same issue here trying to implement a hybrid on an Exchange 2010 server. Has anyone had any success?

@cjm-1993 just wait until the service health issue has been fully resolved and it should work normally again.  Watch this advisory for updates:

 

https://portal.microsoft.com/Adminportal/Home?#/servicehealth/advisories/:/alerts/EX250992

 

Hope this helps!

FYI, I've just tried to run the Hybrid Wizard again and it completed successfully.
Unfortunately, mine has not. Still waiting on all of the servers in 365 to be patched today. Mine must be on one of the last ones being patched or I have something else wrong too...