Owaproxy component is in Inactive State and will not successfully activate

ISSUE:

My customer put their Exchange 2016 environment into maintenance mode so they could apply bitlocker to their drives. After applying bitlocker following the guidances outlined in the following article, they were not able to set the ServerComponentState to Active for OWA Proxy:

https://blogs.technet.microsoft.com/exchange/2015/10/20/enabling-bitlocker-on-exchange-servers/

The customer runs the following command to see whether the state is enabled or not:

Get-ServerComponentState ServerName | ?{$_.Component -eq "OwaProxy"}

It returns the following:

Server                                  Component                               State
------                                     ---------                                      -----
ServerName                      OwaProxy                                  Inactive

They then tried to set it manually, using the following command, specifying the Maintenance Requester because that is the one that is actually showing Inactive:

Set-ServerComponentState ServerName -Component OwaProxy -Requester Maintenance -State Active

We do not get an error but when we do the Get command again, it still shows inactive.

CAUSE:

We noticed in Active Directory, that the OwaProxy.Maintenance values in msExchComponentStates had two opposing settings that looked as such:

1:OwaProxy:Maintenance :0:636264117313332389

1:OwaProxy:Maintenance :1:636272763659703237

These values will also exist in the registry of the Exchange server. Because it has competing values in there, the server will side with the most restrictive which is to keep it at Inactive.

RESOLUTION:

In Active Directory Users and Computers, go to the computer object of the server that you are having the issue on, and right-click on it and select properties. Then click on the msExchComponentStates attribute. You should see the various component values. From there, delete the OwaProxy values from the attribute.

Then go to the registry on the Exchange server and delete up the OWA Proxy reg key using the following process:

Backup and delete the reg key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ExchangeServer\v15\ServerComponentStates\OwaProxy

Allow enough time for Active Directory to replicate and then run the set command again:

Set-ServerComponentState ServerName -Component OwaProxy -Requester Maintenance -State Active

Finally, test again to see if the component is now active:

Get-ServerComponentState DENXCHMBXC1N4P -Component OwaProxy | fl

The component value should then be recreated in AD and in the registry reflecting the proper value for the active state.