question

DanielKaliel-3171 avatar image
0 Votes"
DanielKaliel-3171 asked MorTallaGueye-3135 commented

Event ID:4002;

We are seeing the following error in our On-Premise Exchange server (2013) which is in a hybrid setup. We don't have any users complaining of the Free/Busy schedule not working and our testing shows it is working.

Process 18424: ProxyWebRequest FederatedCrossForest from S-1-5-21-4055847394-2181167018-4057280825-11054 to https://outlook.office365.com/EWS/Exchange.asmx failed. Caller SIDs: OAuth. The exception returned is Microsoft.Exchange.InfoWorker.Common.Availability.ProxyWebRequestProcessingException: Proxy web request failed. ---> System.Net.WebException: The request failed with HTTP status 404: Not Found.
at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall)
at System.Web.Services.Protocols.SoapHttpClientProtocol.EndInvoke(IAsyncResult asyncResult)
at Microsoft.Exchange.InfoWorker.Common.Availability.Proxy.Service.EndGetUserPhoto(IAsyncResult asyncResult)
at Microsoft.Exchange.InfoWorker.Common.UserPhotos.UserPhotoApplication.EndProxyWebRequest(ProxyWebRequest proxyWebRequest, QueryList queryList, IService service, IAsyncResult asyncResult)
at Microsoft.Exchange.InfoWorker.Common.Availability.ProxyWebRequest.EndInvoke(IAsyncResult asyncResult)
at Microsoft.Exchange.InfoWorker.Common.Availability.AsyncWebRequest.EndInvokeWithErrorHandling()
--- End of inner exception stack trace ---
. Name of the server where exception originated: MREDMEXCH12. Make sure that the Active Directory site/forest that contain the user's mailbox has at least one local Exchange 2010 server running the Availability service. Turn up logging for the Availability service and test basic network connectivity.

office-exchange-hybrid-itpro
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

joyceshen-MSFT avatar image
0 Votes"
joyceshen-MSFT answered

Hi @DanielKaliel-3171

What's your on-prem Exchange server CU version? And where are your users located now, on-prem or cloud?

Could you please share the result of the below command in your on-premise organization

 Get-OrganizationRelationship | FL Identity, TargetSharingEpr

I see the error that free/busy information for some mailboxes which were recently moved to O365 is not available, and will get the similar error log like yours.

That issue is caused by Office 365 Autodiscover service which returns incorrect endpoint for calendar sharing for some mailboxes. To fix the issue you could configure TargetSharingEpr property in Organization relationship in your on-premise organization. It will force connection directly to correct O365 endpoint without using Autodiscover.

  Set-OrganizationRelationship -Identity "On Premises to Exchange Online Organization Relationship" -TargetSharingEpr "https://outlook.office365.com/ews/Exchange.asmx"

In addition, have you checked the freebusy result in ExRCA tool, does it return any error information?
https://testconnectivity.microsoft.com/tests/FreeBusy/input

Here is also an article introduces about Demystifying Hybrid Free/Busy: Finding errors and troubleshooting


If an Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.



5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DanielKaliel-3171 avatar image
0 Votes"
DanielKaliel-3171 answered joyceshen-MSFT commented

We are on Exchange 2013 CU23 with the July security update installed. The vast majority of users 95%+ are still on premise with only a small test group in Exchange Online. Here are the results of the command:

[PS] C:\Windows\system32>Get-OrganizationRelationship | FL Identity, TargetSharingEpr

Identity : On-premises to O365 - 106de261-21f5-44b3-bc2e-b1ba3d3efa98
TargetSharingEpr :

The free/busy test came back with no errors:

118714-free-busy-test.jpg



free-busy-test.jpg (62.6 KiB)
· 5
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi,

Thanks for sharing your information, if you have most of your users still on-prem, try running the command below in your environment:

Get-OrganizationRelationship | Set-OrganizationRelationship -TargetSharingEpr "https://mail.yourdomain.com/ews/exchange.asmx"

0 Votes 0 ·

I restarted both servers for good measure after issuing this command. The error remains however. Is there a way to test OAUTH from the internal Exchange servers to Exchange Online? I know it is working from the general internet.

0 Votes 0 ·

Hi,

Test-OAuthConnectivity can be used to test OAuth authentication to partner applications for a user.

For more information we could refer to the official document: Configure OAuth authentication between Exchange and Exchange Online organizations
And the usage: How do you know this worked?


0 Votes 0 ·
Show more comments
DanielKaliel-3171 avatar image
0 Votes"
DanielKaliel-3171 answered

I've run that and will post back if the error is gone.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

MorTallaGueye-3135 avatar image
0 Votes"
MorTallaGueye-3135 answered MorTallaGueye-3135 commented

Hello,

I know this post is a bit older. How was the problem solved ? What was the cause ?

Thank you very much !

· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Integration was only setup one way by the MS provided tool to create the hybrid environment. We needed to go to organization > Sharing within our on-premise environment and configure sharing to Exchange Online.

1 Vote 1 ·

Thank you for the feedback.
we have to create a new relationship
O365-TO-Onprem? or modify the first?


with url ; https://mydomain.com:444/EWS/Exchange.asmx ?

0 Votes 0 ·