question

KK-1143 avatar image
0 Votes"
KK-1143 asked JeffYang-MSFT commented

On Premisis Exchange 2019 EAC text only, no pictures after CU9

EMS works, OWA works, EAC shows logon page, allows logon, but opens to a text only page and none of the links are functional. The timing was after CU9 installed via the Microsoft Update (was not manual installation). CU9 Installation showed as successful and wasn't a retry. The prerequisite update from May 2021 is present.

When I discovered some 1003 errors in event viewer, they started the same date the CU9 update was installed. I followed the correction method published by Microsoft, removed the CU9 update rebooted, installed the CU9 manually from an elevated admin command prompt. No errors.. Oh I tried using the EAC before installing CU9, but the same result. After reinstalling CU9 problem persists.

I attempted also to manually install CU10, but for some unknown to me cause, it fails to find Exchange and says there is no product to update installed.

This is a new production server (less than 30 days) and EAC was working and was how I populated users. I've tried everything I could find in this forum, and others on the web.

I've tried four different browsers in normal mode, with and without 3rd party cookies blocked. I've tried them in privacy modes, safe modes etc. All the same result. I've tried logging in from a Windows 10 workstation on the same network, same result.

I've made certain that all the recommended bindings and certificates are present and matched on the Default Web Site and the Background Web Site.

I've made sure the authentication methods are properly set.

I looked at the config files but didn't spot anything fouled there.

I've tried all the various combinations of URL's I can think of, at least 5 different ones, and appended the 12.2 at the end.

Passes testconnectivity.microsoft.com successfully.

I've been through DNS a bunch. The only firewall is Microsoft. Windows Defender Anti-virus. Very much standard setup. Only variation is Sage 300 has it's own PSQL but EAC was working with that installed. There are 15 users, and I've assigned 2 processors and 64GB RAM (32GB was definitely not enough) to this Hyper-V VM. There appears to be no strain on resources. It's nice and quick. Email works. I haven't tried adding another user, except through EMS and that worked properly.

I've seen mentioned something about an older version of EAC, but I suppose that is for Online Exchange only.

If anyone knows how I can either reinstall EAC, or has an idea how I might find a different Exchange Admin Console (even 3rd party) I sure would appreciate hearing about it.

This is the only Exchange server in this domain, and I have no other 2019 Exchange to reference. All the rest I have are 2010. No 2013 or 2016 available.

If anyone knows this issue please please help! I've been 3 days now trying everything that sounds reasonable to try.

I've attached a screenshot.

office-exchange-server-connectivity
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

KK-1143 avatar image
0 Votes"
KK-1143 answered

Corrections, URL appended with 15.2 (Not 12.2)
Now attempting

https://docs.microsoft.com/en-us/exchange/troubleshoot/administration/cannot-access-owa-or-ecp-if-oauth-expired

I missed that because I verified my expiry date was 2026. I've since read another post describing almost the same thing (not the text only part that I'm experiencing) even though their certs were not expired. My new cert is already published, but I'm waiting as others have said for several hours and then check again. Keeping my fingers crossed.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

JeffYang-MSFT avatar image
0 Votes"
JeffYang-MSFT answered

Hi @KK-1143,

Welcome to Microsoft Q&A!

It has been for a while, have you ever checked if your new certificate could help solve your issue?

If the issue still continues, you could try the suggestions below to see if the issue could be resolved:

Hope these can be helpful.


If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


image.png (80.0 KiB)
image.png (18.0 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

KK-1143 avatar image
0 Votes"
KK-1143 answered

Thanks Jeff. I recreated the ECP virtual directory and recycled the Application Pools. No change, no joy. I added IISreset as well and tried MSEdge in Private mode and Firefox in safe mode. I tried a couple of different URLs. Was there anything related to recreating the ECP virtual directory, like a binding or certificate or some other service to restart?

If I try my user without prefixing the domain name, it will give me a text page that does have three icons:
(Icon) Outlook
403
Sorry! Access denied :(
You don't have permission to open this page. If you're a new user or were recently assigned credentials, please wait 15 minutes and try again.
You're still signed in. If you want to sign out, use the link below.
(Icon) sign out sign out
(Icon) Office

This page looks about right and the sign out links work.

I mention this because I've always needed to prefix the domain\username when EAC was working.
Since I don't know what's wrong, I'm giving details in case it means something to anyone else.

Additional info, recreating the Cert even though it wasn't expired did not work here. I'm on EST (GMT+5) and I've been past 19 hours now. EAC will not function. It still opens to the text only page with non functioning links.

In all the web searches I've done, I've only seen two other people report this exact text only screen. Fortunately, for one of those, theirs was a lab setup and after a lot of back and forth the person wiped out the VM entirely and reinstalled from scratch. The other never reported back.

I don't have that easy luxury because this is a production server.

I hope someone here can help!

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

KK-1143 avatar image
0 Votes"
KK-1143 answered JeffYang-MSFT commented

Log Name: Application
Source: MSExchange Front End HTTP Proxy
Date: 7/23/2021 12:21:04 PM
Event ID: 1003
Task Category: Core
Level: Error
Keywords: Classic
User: N/A
Computer: SERV1.Corp.contoso.com
Description:
[Owa] An internal server error occurred. The unhandled exception was: System.ArgumentException: Invalid input value
Parameter name: input
at Microsoft.Exchange.Data.ApplicationLogic.Cafe.BackEndServer.FromString(String input)
at Microsoft.Exchange.HttpProxy.OwaResourceProxyRequestHandler.ResolveAnchorMailbox()
at Microsoft.Exchange.HttpProxy.ProxyRequestHandler.InternalBeginCalculateTargetBackEnd(AnchorMailbox& anchorMailbox)
at Microsoft.Exchange.HttpProxy.ProxyRequestHandler.<BeginCalculateTargetBackEnd>b_280_0()
at Microsoft.Exchange.Common.IL.ILUtil.DoTryFilterCatch(Action tryDelegate, Func`2 filterDelegate, Action`1 catchDelegate)
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">;
<System>
<Provider Name="MSExchange Front End HTTP Proxy" />
<EventID Qualifiers="49152">1003</EventID>
<Level>2</Level>
<Task>1</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2021-07-23T16:21:04.188249200Z" />
<EventRecordID>370930</EventRecordID>
<Channel>Application</Channel>
<Computer>SERV1.Corp.contoso.com</Computer>
<Security />
</System>
<EventData>
<Data>Owa</Data>
<Data>System.ArgumentException: Invalid input value
Parameter name: input
at Microsoft.Exchange.Data.ApplicationLogic.Cafe.BackEndServer.FromString(String input)
at Microsoft.Exchange.HttpProxy.OwaResourceProxyRequestHandler.ResolveAnchorMailbox()
at Microsoft.Exchange.HttpProxy.ProxyRequestHandler.InternalBeginCalculateTargetBackEnd(AnchorMailbox&amp; anchorMailbox)
at Microsoft.Exchange.HttpProxy.ProxyRequestHandler.&lt;BeginCalculateTargetBackEnd&gt;b
_280_0()
at Microsoft.Exchange.Common.IL.ILUtil.DoTryFilterCatch(Action tryDelegate, Func`2 filterDelegate, Action`1 catchDelegate)</Data>
</EventData>
</Event>

· 5
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi KK-1143,

Please run:
Get-ExchangeCertificate (Get-AuthConfig).CurrentCertificateThumbprint

Get-ExchangeCertificate |fl

Double check "Microsoft Exchange Server Auth Certificate"

IIf thumbprint values are different, you will need to fix it in order to clear event ID 1003.

0 Votes 0 ·

Thanks the thumbprints do match.

Probleem persists.

Can any Exchange guru please tell me if there is anything that I would have to use EAC for instead of EMS? Are they equal to each other 100%? Would it be a really bad move to leave it unfixed?

The only other thing I can think of is to back up all the workstations, and uninstall and reinstall Exchange. Is it worth that just to fix EAC?

I found the cause for CU10 refusing to install was some sort of prerequisite or mismatch must be in play. Is it possible that going to CU10 could repair EAC? Or would that just permanently break EAC?

0 Votes 0 ·

Hi @KK-1143,

Thanks for your reply.

As I know, usually we can use EMS to finish more operations that EAC. And there are some operations or commands can only be finished in EMS. Personally, it is not quite a good idea to leave it unfixed.

I did some more research and found that if the SU is not installed properly, issues like missing images in ECP may indeed occur. So, please check if you have installed any SU recently before this issue occurred, if yes, please try the resolution mentioned in this document: Missing images in ECP and see if there is any difference.

0 Votes 0 ·
Show more comments