question

Windykacja-1762 avatar image
0 Votes"
Windykacja-1762 asked ZhengqiLou-MSFT commented

[Exchange Server 2016\ EWS not working properly after CU Update

Hello Guys, I need some help. I updated my Exchange Serves 2016 (Dag), everything working without EWS. I tried before recreate EWS Virtual Directories, but after removing both directories i had possibility to add only one EWS Directory. When I added to other server i got communicate: ![77991-exchange1.jpg][1] SMTP and ActiveSync working properly but when i had failed test in microsoft activity with EWS and RCP: EWS ![77937-exchange2.jpg][2] RCP: ![77897-exchange3.jpg][3] And my checks from Powershells ![77955-exchange4.jpg][4] ![78001-exchange5.jpg][5] When i'm entrying to EWS URL im getting request for WIndows Auth and i can see that: URL with internl server is avaible too. ![78002-exchange6.jpg][6] Organization Config: EwsAllowEntourage : EwsAllowList : {Outlook-Android/, Outlook-iOS/} EwsAllowMacOutlook : EwsAllowOutlook : EwsApplicationAccessPolicy : EnforceAllowList EwsBlockList : EwsEnabled : True CAS Config: EwsEnabled : True EwsAllowOutlook : EwsAllowMacOutlook : EwsAllowEntourage : EwsApplicationAccessPolicy : EwsAllowList : EwsBlockList : After use Get-ClientAccessServer and Test Outlook Webservices Source ServiceEndpoint Scenario Result Latency (MS) ------ --------------- -------- ------ ------- DEIMOS.pak.local sun.pak.local Autodiscover: Outlook Provider Failure 5 DEIMOS.pak.local sun.pak.local Exchange Web Services Failure 24 DEIMOS.pak.local Availability Service Skipped 0 DEIMOS.pak.local sun.pak.local Offline Address Book Failure 6 DEIMOS.pak.local deimos.pak.local Autodiscover: Outlook Provider Failure 4 DEIMOS.pak.local deimos.pak.local Exchange Web Services Failure 23 DEIMOS.pak.local Availability Service Skipped 0 DEIMOS.pak.local deimos.pak.local Offline Address Book Failure 4 When i used just Test-Outlookwebservices i got "Unable to to find the client access monitoring user". Windows Firewall is disabled. I have Eset Email Security but i checked with turned off. Next check. Get-WebServicesVirtualDirectory | fl Identity,auth Identity : DEIMOS\EWS (Default Web Site) CertificateAuthentication : InternalAuthenticationMethods : {Ntlm, WindowsIntegrated, WSSecurity, OAuth} ExternalAuthenticationMethods : {Ntlm, WindowsIntegrated, WSSecurity, OAuth} LiveIdNegotiateAuthentication : WSSecurityAuthentication : True LiveIdBasicAuthentication : False BasicAuthentication : False DigestAuthentication : False WindowsAuthentication : True OAuthAuthentication : True AdfsAuthentication : False Any ideas for resolution ? I can not add new outlook clients desktop, and i had disconnected Macs with outlook after updated CU. [1]: /answers/storage/attachments/77991-exchange1.jpg [2]: /answers/storage/attachments/77937-exchange2.jpg [3]: /answers/storage/attachments/77897-exchange3.jpg [4]: /answers/storage/attachments/77955-exchange4.jpg [5]: /answers/storage/attachments/78001-exchange5.jpg [6]: /answers/storage/attachments/78002-exchange6.jpg Please help me, any ideas ? Whats is wrong ?

office-exchange-server-administrationoffice-exchange-server-connectivityoffice-exchange-server-itpro
exchange1.jpg (64.3 KiB)
exchange2.jpg (274.5 KiB)
exchange3.jpg (212.3 KiB)
exchange4.jpg (132.2 KiB)
exchange5.jpg (156.8 KiB)
exchange6.jpg (365.6 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

ZhengqiLou-MSFT avatar image
0 Votes"
ZhengqiLou-MSFT answered Windykacja-1762 commented

Hi @Windykacja-1762 ,

Do you mean you tried to create EWS Virtual Directory on both servers and failed?
Please remove them first and then retry creating.

 Remove-WebServicesVirtualDirectory -Identity Server\"EWS (Default Web Site)"
 New-WebServicesVirtualDirectory -ServerName -InternalURL Https://Server.Domain.com/EWS/Exchange.asmx

Replace the Server & Domain to your Exchange Server names and Domain names.

The 2nd picture shows the 403 Forbidden error of EWS, please check the Auth method of EWS, by default it's

78048-image.png

For the 4th picture you provided, it seems that the certificate bindings of Autodiscover and ActiveSync has problems.
And the Test-OutlookWebServices errors, you could use the Test-OutlookWebServices | FL to find the error messages.

When i used just Test-Outlookwebservices i got "Unable to to find the client access monitoring user".

You can do this:
1. Open PowerShell in Admin mode.
2. CD 'C:\Program Files\Microsoft\Exchange Server\V15\Scripts'
3. .\new-TestCasConnectivityUser.ps1
4. Type a Password.
5. Test-OutlookWebServices | FL

Regards,
Lou


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


image.png (10.3 KiB)
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi, thanks for your response.
So, when i used this command: Remove-WebServicesVirtualDirectory -Identity Server\"EWS (Default Web Site)"

78167-exchange10.jpg

I have problem with one.

I have only windows auth
78175-exchange11.png

You can do this:
1. Open PowerShell in Admin mode.
2. CD 'C:\Program Files\Microsoft\Exchange Server\V15\Scripts'
3. .\new-TestCasConnectivityUser.ps1
4. Type a Password.
5. Test-OutlookWebServices | FL

Not working :(

78251-exchange12.png




0 Votes 0 ·
exchange11.png (26.1 KiB)
exchange12.png (262.4 KiB)
exchange10.jpg (31.2 KiB)

EWS Recreated, still not working

0 Votes 0 ·
Windykacja-1762 avatar image
0 Votes"
Windykacja-1762 answered Windykacja-1762 commented

78495-exchange13.jpg

Seem like Outlook Servcies dont have access to Address book etc.



exchange13.jpg (138.4 KiB)
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi @Windykacja-1762 ,

Then can you use the cmdlet with | FL to check the error details?

And as for the auth, you could find it in IIS
78656-image.png

Regards,
Lou

0 Votes 0 ·
image.png (104.2 KiB)

78745-exchange14.jpg



Looks good

0 Votes 0 ·
exchange14.jpg (69.2 KiB)
Windykacja-1762 avatar image
0 Votes"
Windykacja-1762 answered

78689-exchange14.jpg



Looks good...


exchange14.jpg (69.2 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Windykacja-1762 avatar image
0 Votes"
Windykacja-1762 answered ZhengqiLou-MSFT commented

Any help ideas ?
Shared calendar in outlook clients doesnt work. I OWA is working properly.The same situation with searching messages in outlook destkop.

Update
Resolution:
Rebuilidng OWA on other server - any effects
After rebulidng
https://github.com/MicrosoftDocs/OfficeDocs-Support/blob/public/Exchange/ExchangeServer/administration/403-forbidden-view-free-busy-information.md

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi @Windykacja-1762 ,

Very happy to hear you have found the resolution.
If you don't mind, you can mark your answer as an Accepted Answer so when other people have this issue, they will get help from this thread.
Thanks for your understanding & Have a nice day!!!

Best regards,
Lou

0 Votes 0 ·