Testing HTTP Authentication Methods for URL https://mail.domain.co.nz/rpc/rpcproxy.dll?cl-cas01.domain.local:6002.
 	The HTTP authentication test failed.
 	 Tell me more about this issue and how to resolve it
	Additional Details
 	Not all the required authentication methods were found.
Methods Found: Negotiate
Methods Required: NTLM

I am working with Exchange 2013 and want to be able to schedule a recurring meeting using a room. If the room is booked, I want the room to accept all meetings with the exception of the conflicting appointment.

I already looked at this post http://blogs.technet.com/b/exchange/archive/2011/02/07/3411956.aspx and have it setup as explained, however this is not the behavior I am getting. Instead the resource get booked with the conflict and I receive an message with a list of the dates that have the conflict.

My question is. How do I setup my Room so it has this behavior: Accept recurring meetings if room is available and decline the days that has a conflict.

Juan

Dear Experts,

I am in a face of migrating Exchange 2010 to Exchange 2013. Below are my infrastructure details,

1) Parent Domain in Site A (abc.com)

2) One Child domain in Site A named child1.abc.com and Exchange 2007 is running in Site A child domain

3) One Child domain in Site B named me.abc.com and currently Exchange 2010 is running in Site B.

I have installed Exchange 2013 in Site B in coexistence scenario now Exchange 2013 users in Site B trying to attempt connection with a public folder store in the Site A Exchange 2007 servers instead of Site B Exchange 2010 servers.

Anyone help will be highly appreciated.

Thanks & Regards,

ZB

So I am in Exchange 2010 SP3 / Exchange 2013 SP1 co-existence. 

I can send from a test 2013 user to external and 2010 users internally on the domain. But I cannot send to the 2013 test user. I get:

--------

451 4.4.0 Primary target IP address responded with: "421 4.4.2 Connection dropped due to SocketError." Attempted to failover to alternate host, but that did not succeed. Either there are no alternate hosts, or delivery failed to all alternate hosts.

-------

I've been looking at this for example: 

http://support.microsoft.com/kb/979175

But no matter where on the 2013 receive connectors I add Exchange Server Authentication, it still doesnt work.

Theres so much stuff on this error message, but everyhing I find seems to be 2003 / 2010 or other coexistance which is different to my environment. 

We don't have accounts@ourdomain.com user, but today we received a virus email addressed to that account.

How can this happen and what can I do to prevent?

Dennis

Setup - Exchange 2013 Standard with SP1 - Mailbox and CAs in one server.

We are getting hundreds and sometimes thousands of event id 4625 from w3wp process daily. Is anyone experiencing this issue and were you able to fix it? We opened a case with the Exchange team for this issue and they are telling us that this is by design. Everyone using Exchange 2013 should be experiencing the same issue if the event is by design.

Log Name:      Security
Source:        Microsoft-Windows-Security-Auditing
Date:          5/15/2014 3:31:42 AM
Event ID:      4625
Task Category: Logon
Level:         Information
Keywords:      Audit Failure
User:          N/A
Computer:      mailserver.domain.local
Description:
An account failed to log on.

Subject:
    Security ID:        S-1-5-18
    Account Name:        mailserver$
    Account Domain:        DOMAIN
    Logon ID:        0x3E7

Logon Type:            3

Account For Which Logon Failed:
    Security ID:        S-1-0-0
    Account Name:        
    Account Domain:        

Failure Information:
    Failure Reason:        Account currently disabled.
    Status:            0xC000006E
    Sub Status:        0xC0000072

Process Information:
    Caller Process ID:    0x21e4
    Caller Process Name:    C:\Windows\System32\inetsrv\w3wp.exe

Network Information:
    Workstation Name:    mailserver
    Source Network Address:    -
    Source Port:        -

Detailed Authentication Information:
    Logon Process:        Authz   
    Authentication Package:    Kerberos
    Transited Services:    -
    Package Name (NTLM only):    -
    Key Length:        0

This event is generated when a logon request fails. It is generated on the computer where access was attempted.

The Subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.

The Logon Type field indicates the kind of logon that was requested. The most common types are 2 (interactive) and 3 (network).

The Process Information fields indicate which account and process on the system requested the logon.

The Network Information fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.

The authentication information fields provide detailed information about this specific logon request.
    - Transited services indicate which intermediate services have participated in this logon request.
    - Package name indicates which sub-protocol was used among the NTLM protocols.
    - Key length indicates the length of the generated session key. This will be 0 if no session key was requested.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-A5BA-3E3B0328C30D}" />
    <EventID>4625</EventID>
    <Version>0</Version>
    <Level>0</Level>
    <Task>12544</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8010000000000000</Keywords>
    <TimeCreated SystemTime="2014-05-15T10:31:42.051407100Z" />
    <EventRecordID>15165636</EventRecordID>
    <Correlation />
    <Execution ProcessID="780" ThreadID="13320" />
    <Channel>Security</Channel>
    <Computer>mailserver.domain.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="SubjectUserSid">S-1-5-18</Data>
    <Data Name="SubjectUserName">mailserver$</Data>
    <Data Name="SubjectDomainName">DOMAIN</Data>
    <Data Name="SubjectLogonId">0x3e7</Data>
    <Data Name="TargetUserSid">S-1-0-0</Data>
    <Data Name="TargetUserName">
    </Data>
    <Data Name="TargetDomainName">
    </Data>
    <Data Name="Status">0xc000006e</Data>
    <Data Name="FailureReason">%%2310</Data>
    <Data Name="SubStatus">0xc0000072</Data>
    <Data Name="LogonType">3</Data>
    <Data Name="LogonProcessName">Authz   </Data>
    <Data Name="AuthenticationPackageName">Kerberos</Data>
    <Data Name="WorkstationName">mailserver</Data>
    <Data Name="TransmittedServices">-</Data>
    <Data Name="LmPackageName">-</Data>
    <Data Name="KeyLength">0</Data>
    <Data Name="ProcessId">0x21e4</Data>
    <Data Name="ProcessName">C:\Windows\System32\inetsrv\w3wp.exe</Data>
    <Data Name="IpAddress">-</Data>
    <Data Name="IpPort">-</Data>
  </EventData>
</Event>

Hello,

in my environment i can send/receive mail.

When doing some checks i will end up with this error :

451 4.7.0 temporary server error. please try again later. prx4

I have tried the following without results :

Exchange 2013 SMTP error "451 4.7.0 Temporary server error. Please try again later. PRX3"

This error message seems to be caused by DNS issues in the Exchange 2013 set up. Exchange then rejects all emails like this. It is not quite clear what Microsoft means with this error code and the various PRX-numbers at the end - we've also seen PRX1, PRX3, PRX7. There is no list and no documentation on them available.

From customer feedback we found these ways to solve the problem:

1. Disable all unused network cards.
2. Check all DNS server entries in the configuration of your network cards (checkall network adapters) and make sure not to reference server 127.0.0.1 as DNS server but to use the real IP address instead.
3. If you have more than one fixed IP address in the server add an entry for each IP address in the hosts file (C:\Windows\System32\drivers\etc\hosts) formatted like "192.168.1.1 SERVERNAME".
4. Important: Do load the latest Exchange 2013 updates, especially CU1 if you haven't done that already.
5. Please delete the receive connectors in Exchange and create one new receive connector. Use the "front end" instead of "hub transport" setting and vice versa.

What do do, to fix this issue?

Thx

Hi all,

I have Exchange Server 2013 hosting email for 3 domains, I purchased a SAN Cert (Geotrust) with "Certificate Subject Alt Name" : webmail.mydomain1.com , autodiscover.mydomain1.com , autodiscover.mydomain2.com , autodiscover.mydomain1.com , everything works fine with OWA, OutlookAnyWhere, AutoDiscover, ...

Now I want to host email for another domain : mynewdomain.com, but I don't want to extend SAN Cert. I added new domain to "Accepted Domains", created new mailboxs with new domain, "new domain users" can use OWA, MS Outlook normally (we ignore SSL Certificate warning) but when they set Exchange mailbox in their smart phone they get error :

Testing the SSL certificate to make sure it's valid ==>
Certificate name validation failed ==>
Validating the certificate name ==>
Certificate name validation failed
and
Attempting to contact the Autodiscover service using the HTTP redirect method ==>
The attempt to contact Autodiscover using the HTTP Redirect method failed ==>
The Microsoft Connectivity Analyzer is checking the host autodiscover.newdomain.com for an HTTP redirect to the Autodiscover service ==>
The Microsoft Connectivity Analyzer failed to get an HTTP redirect response for Autodiscover ==>
An HTTP 403 forbidden response was received. The response appears to have come from Unknown. Body of the response:

HTTP Response Headers:
X-FEServer: ExchangeServer
Content-Length: 0
Date: Tue, 03 Jun 2014 07:18:28 GMT
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET

Elapsed Time: 374 ms. 

Hello,

      I want to know how the communication happens between 2 smtp servers. I precisely means this,

Lets Say that I have  Server A which is Exchange Server with a domain name abc.com and In another city I have another Linux Mail Server which is Server B with domain name xyz.com

When Serve A is sending an email to Server B how does the communication happens ?

 I know how client communicates with the mail servers

http://support.microsoft.com/kb/153119/en-us

In an Exchange2013 CU2 environment with 4 mailbox servers (2 each in a different site) and separate front end servers (also 2 each in a different site) I find the application evenlogs on mailbox servers littered (500 events per 24 hours) with Event ID: 1309, Event Source: ASP.NET. With common underlying exeptions "MapiExceptionMailboxInTransit" and "MapiExceptionIllegalCrossServerConnection"
The errors seem to be caused by attempts to login to https://localhost:444/owa/proxylogon.owa using the userID of a Health monitoring mailbox that is actively mounted on a different mailboxserver.

I theorize that this to be a bug in the Exchange Health manager (not keeping track of where mailboxes are actively mounted) but can't say that for sure.

Any suggestion on how to "turn off" this check in the health manager configuration so I don't get all these false positive messages ?

Examples of message below --------------------------

Log Name:      Application
Source:        ASP.NET 4.0.30319.0
Date:          8/5/2013 9:55:45 AM
Event ID:      1309
Task Category: Web Event
Level:         Warning
Keywords:      Classic
User:          N/A
Computer:      den-s-mbx4.mydomain.com
Description:
Event code: 3005
Event message: An unhandled exception has occurred.
Event time: 8/5/2013 9:55:45 AM
Event time (UTC): 8/5/2013 3:55:45 PM
Event ID: ec427c24c3d74b3d80c99d8e8612c8f1
Event sequence: 79334
Event occurrence: 11067
Event detail code: 0
 
Application information:
    Application domain: /LM/W3SVC/2/ROOT/owa-1-130188945774437279
    Trust level: Full
    Application Virtual Path: /owa
    Application Path: C:\Program Files\Microsoft\Exchange Server\V15\ClientAccess\owa\
    Machine name: DEN-S-MBX4
 
Process information:
    Process ID: 18388
    Process name: w3wp.exe
    Account name: NT AUTHORITY\SYSTEM
 
Exception information:
    Exception type: MapiExceptionMailboxInTransit
    Exception message: MapiExceptionMailboxInTransit: DatabaseLocationProvider detected site violation (hr=0x0, ec=1292)

 
 
Request information:
    Request URL: https://localhost:444/owa/proxylogon.owa
    Request path: /owa/proxylogon.owa
    User host address: 127.0.0.1
    User: MYDOMAIN\SM_4275121dabc948258
    Is authenticated: True
    Authentication Type: Kerberos
    Thread account name: NT AUTHORITY\SYSTEM
 
Thread information:
    Thread ID: 49
    Thread account name: NT AUTHORITY\SYSTEM
    Is impersonating: False
    Stack trace:
 
 
Custom event details:

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="ASP.NET 4.0.30319.0" />
    <EventID Qualifiers="32768">1309</EventID>
    <Level>3</Level>
    <Task>3</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2013-08-05T15:55:45.000000000Z" />
    <EventRecordID>6270698</EventRecordID>
    <Channel>Application</Channel>
    <Computer>den-s-mbx4.mydomain.com</Computer>
    <Security />
  </System>
  <EventData>
    <Data>3005</Data>
    <Data>An unhandled exception has occurred.</Data>
    <Data>8/5/2013 9:55:45 AM</Data>
    <Data>8/5/2013 3:55:45 PM</Data>
    <Data>ec427c24c3d74b3d80c99d8e8612c8f1</Data>
    <Data>79334</Data>
    <Data>11067</Data>
    <Data>0</Data>
    <Data>/LM/W3SVC/2/ROOT/owa-1-130188945774437279</Data>
    <Data>Full</Data>
    <Data>/owa</Data>
    <Data>C:\Program Files\Microsoft\Exchange Server\V15\ClientAccess\owa\</Data>
    <Data>DEN-S-MBX4</Data>
    <Data>
    </Data>
    <Data>18388</Data>
    <Data>w3wp.exe</Data>
    <Data>NT AUTHORITY\SYSTEM</Data>
    <Data>MapiExceptionMailboxInTransit</Data>
    <Data>MapiExceptionMailboxInTransit: DatabaseLocationProvider detected site violation (hr=0x0, ec=1292)

</Data>
    <Data>https://localhost:444/owa/proxylogon.owa</Data>
    <Data>/owa/proxylogon.owa</Data>
    <Data>127.0.0.1</Data>
    <Data>MYDOMAIN\SM_4275121dabc948258</Data>
    <Data>True</Data>
    <Data>Kerberos</Data>
    <Data>NT AUTHORITY\SYSTEM</Data>
    <Data>49</Data>
    <Data>NT AUTHORITY\SYSTEM</Data>
    <Data>False</Data>
    <Data>
    </Data>
  </EventData>
</Event>

----------------------------------

Log Name:      Application
Source:        ASP.NET 4.0.30319.0
Date:          8/5/2013 12:08:32 PM
Event ID:      1309
Task Category: Web Event
Level:         Warning
Keywords:      Classic
User:          N/A
Computer:      wal-vm-mbx1.mydomain.com
Description:
Event code: 3005
Event message: An unhandled exception has occurred.
Event time: 8/5/2013 12:08:32 PM
Event time (UTC): 8/5/2013 4:08:32 PM
Event ID: 77d613a2c42344348fd215f4ad092708
Event sequence: 325843
Event occurrence: 7098
Event detail code: 0
 
Application information:
    Application domain: /LM/W3SVC/3/ROOT/owa-1-130191699398831006
    Trust level: Full
    Application Virtual Path: /owa
    Application Path: C:\Program Files\Microsoft\Exchange Server\V15\ClientAccess\owa\
    Machine name: WAL-VM-MBX1
 
Process information:
    Process ID: 31516
    Process name: w3wp.exe
    Account name: NT AUTHORITY\SYSTEM
 
Exception information:
    Exception type: MapiExceptionIllegalCrossServerConnection
    Exception message: MapiExceptionIllegalCrossServerConnection: Monitoring mailbox [] with application ID [Client=OWA;Action=ViaProxy] is not allowed to make cross-server calls to [wal-s-mbx2.mydomain.com]
   at Microsoft.Mapi.MonitoringBlockingExRpcConnectionFactory.Create(ExRpcConnectionInfo connectionInfo)
   at Microsoft.Mapi.MapiStore.OpenMapiStore(String serverDn, String userDn, String mailboxDn, Guid guidMailbox, Guid guidMdb, String userName, String domainName, String password, String httpProxyServerName, ConnectFlag connectFlags, OpenStoreFlag storeFlags, CultureInfo cultureInfo, Boolean wantRedirect, String& correctServerDN, ClientIdentityInfo clientIdentity, String applicationId, Client xropClient, Boolean wantWebServices, Byte[] clientSessionInfo, TimeSpan connectionTimeout, Byte[] tenantHint)
   at Microsoft.Exchange.Data.Storage.MailboxSession.ForceOpen(MapiStore linkedStore)

 
 
Request information:
    Request URL: https://localhost:444/owa/proxylogon.owa
    Request path: /owa/proxylogon.owa
    User host address: ::1
    User: MYDOMAIN\SM_9d047d8145014f31b
    Is authenticated: True
    Authentication Type: Kerberos
    Thread account name: NT AUTHORITY\SYSTEM
 
Thread information:
    Thread ID: 41
    Thread account name: NT AUTHORITY\SYSTEM
    Is impersonating: False
    Stack trace:    at Microsoft.Mapi.MonitoringBlockingExRpcConnectionFactory.Create(ExRpcConnectionInfo connectionInfo)
   at Microsoft.Mapi.MapiStore.OpenMapiStore(String serverDn, String userDn, String mailboxDn, Guid guidMailbox, Guid guidMdb, String userName, String domainName, String password, String httpProxyServerName, ConnectFlag connectFlags, OpenStoreFlag storeFlags, CultureInfo cultureInfo, Boolean wantRedirect, String& correctServerDN, ClientIdentityInfo clientIdentity, String applicationId, Client xropClient, Boolean wantWebServices, Byte[] clientSessionInfo, TimeSpan connectionTimeout, Byte[] tenantHint)
   at Microsoft.Exchange.Data.Storage.MailboxSession.ForceOpen(MapiStore linkedStore)
 
 
Custom event details:

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="ASP.NET 4.0.30319.0" />
    <EventID Qualifiers="32768">1309</EventID>
    <Level>3</Level>
    <Task>3</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2013-08-05T16:08:32.000000000Z" />
    <EventRecordID>1841325</EventRecordID>
    <Channel>Application</Channel>
    <Computer>wal-vm-mbx1.mydomain.com</Computer>
    <Security />
  </System>
  <EventData>
    <Data>3005</Data>
    <Data>An unhandled exception has occurred.</Data>
    <Data>8/5/2013 12:08:32 PM</Data>
    <Data>8/5/2013 4:08:32 PM</Data>
    <Data>77d613a2c42344348fd215f4ad092708</Data>
    <Data>325843</Data>
    <Data>7098</Data>
    <Data>0</Data>
    <Data>/LM/W3SVC/3/ROOT/owa-1-130191699398831006</Data>
    <Data>Full</Data>
    <Data>/owa</Data>
    <Data>C:\Program Files\Microsoft\Exchange Server\V15\ClientAccess\owa\</Data>
    <Data>WAL-VM-MBX1</Data>
    <Data>
    </Data>
    <Data>31516</Data>
    <Data>w3wp.exe</Data>
    <Data>NT AUTHORITY\SYSTEM</Data>
    <Data>MapiExceptionIllegalCrossServerConnection</Data>
    <Data>MapiExceptionIllegalCrossServerConnection: Monitoring mailbox [] with application ID [Client=OWA;Action=ViaProxy] is not allowed to make cross-server calls to [wal-s-mbx2.mydomain.com]
   at Microsoft.Mapi.MonitoringBlockingExRpcConnectionFactory.Create(ExRpcConnectionInfo connectionInfo)
   at Microsoft.Mapi.MapiStore.OpenMapiStore(String serverDn, String userDn, String mailboxDn, Guid guidMailbox, Guid guidMdb, String userName, String domainName, String password, String httpProxyServerName, ConnectFlag connectFlags, OpenStoreFlag storeFlags, CultureInfo cultureInfo, Boolean wantRedirect, String&amp; correctServerDN, ClientIdentityInfo clientIdentity, String applicationId, Client xropClient, Boolean wantWebServices, Byte[] clientSessionInfo, TimeSpan connectionTimeout, Byte[] tenantHint)
   at Microsoft.Exchange.Data.Storage.MailboxSession.ForceOpen(MapiStore linkedStore)

</Data>
    <Data>https://localhost:444/owa/proxylogon.owa</Data>
    <Data>/owa/proxylogon.owa</Data>
    <Data>::1</Data>
    <Data>MYDOMAIN\SM_9d047d8145014f31b</Data>
    <Data>True</Data>
    <Data>Kerberos</Data>
    <Data>NT AUTHORITY\SYSTEM</Data>
    <Data>41</Data>
    <Data>NT AUTHORITY\SYSTEM</Data>
    <Data>False</Data>
    <Data>   at Microsoft.Mapi.MonitoringBlockingExRpcConnectionFactory.Create(ExRpcConnectionInfo connectionInfo)
   at Microsoft.Mapi.MapiStore.OpenMapiStore(String serverDn, String userDn, String mailboxDn, Guid guidMailbox, Guid guidMdb, String userName, String domainName, String password, String httpProxyServerName, ConnectFlag connectFlags, OpenStoreFlag storeFlags, CultureInfo cultureInfo, Boolean wantRedirect, String&amp; correctServerDN, ClientIdentityInfo clientIdentity, String applicationId, Client xropClient, Boolean wantWebServices, Byte[] clientSessionInfo, TimeSpan connectionTimeout, Byte[] tenantHint)
   at Microsoft.Exchange.Data.Storage.MailboxSession.ForceOpen(MapiStore linkedStore)
</Data>
  </EventData>
</Event>

I completed a Exchange migration a few months ago and used a product called 'Code Two Exchange Migration'.

All went well but there was an option configured called Address rewriting

Address rewriting

Rewriting local EX email addresses to their corresponding SMTP addresses during the

migration process is necessary if you are migrating between different domains. Though it

is recommended to keep the checkbox below ticked unless you are sure you do not want

to change EX to SMTP addresses.

Since this was a domain migration I ticked this box. When the migration completed all internal emails had the name change from Peter Sheridan (peters@domain.com.au) to peters@domain.com.au.

Once again not a huge deal except for when users change the outlook view from 'Date Received' to 'From' emails from the same person don't show up in the same group. There will be a group for 'Peter Sheridan (peters@domain.com.au)' and a domain for 'peters@domain.com.au'

My question - Is there a powershell script or similar that can run through a mailbox and match up email address so that they get changed back to 'Peter Sheridan (peters@domain.com.au'?

Hopefully that makes sense.

Recently upgraded to CU3.  I'm not sure if my EAC problems are due to that or something else.  I could have swore this worked before, but I am not 100% positive.

If I go to "Recipients > Mailboxes > Properties on a mailbox > Mailbox Delegation" it says "Please wait...".  It stays like that for about 15-20 seconds, then finally comes back with:  "error.  Your request couldn't be completed.  Please try again in a few minutes".  I hit OK and the boxes for Send As, Send on Behalf, and Full Access are all empty.

I can view permissions on that same mailbox with PowerShell.

Also, if I do the same process for a Distribution Group, then that works okay in EAC!

G'Day All,

Is it possible to move Exchange 2007 mailboxes to Exchange 2013 in a different forest? Both environment has all the required patches and service packs.

There is a two way trust, and I don't want to introduce Exchange 2010 CAS in the source forest if I don't need to.

I have read the following article http://msexchangeguru.com/2013/11/03/e2013crossforestmigration/ but it is not clear what is the required to setup in Exchange 2007.  I have read many other articles to do with Exchange 2013 mailbox moves, endpoints, etc, but non of them is clear of how does it work having Exchange 2007 source.

Thanks in advance.

Hi, so in short, a external contact to one of my internal employees is trying to send an email to us via their email relay server which is: "server.lanworx.com.sg". This appear to have been blacklisted on a content/keyword basis (the server isnt blacklisted, just the text string on a content level). So any email sent with that string in it in the subject, body or header is blocked by our EOP.

So I'm trying to whitelist this in EOP as submitting false positives generally takes to long.

Questions:

1. How long after I make a change, such as creating a new Mail Flow rulesuntil I can test this new rule? (does it take effect immediately or do I need to wait a while before testing it?)

2. If I send an email from a test Outlook.com account with the body of "server.lanworx.com.sg" this is blocked, even though I have a mail flow rule that says:

---------------------------

Why would this rule not allow the email through? 

I am able to get into the log in screen and upon entering my creds "example\example" and my password I receive the following error:

Server Error in '/ecp' Application.

---

Invalid provider type specified.

[CryptographicException: Invalid provider type specified.
]
   System.Security.Cryptography.Utils.CreateProvHandle(CspParameters parameters, Boolean randomKeyContainer) +5368074
   System.Security.Cryptography.Utils.GetKeyPairHelper(CspAlgorithmType keyType, CspParameters parameters, Boolean randomKeyContainer, Int32 dwKeySize, SafeProvHandle& safeProvHandle, SafeKeyHandle& safeKeyHandle) +138
   System.Security.Cryptography.RSACryptoServiceProvider.GetKeyPair() +221
   System.Security.Cryptography.X509Certificates.X509Certificate2.get_PrivateKey() +516
   Microsoft.Exchange.HttpProxy.FbaModule.ParseCadataCookies(HttpApplication httpApplication) +1222
   Microsoft.Exchange.HttpProxy.FbaModule.OnBeginRequestInternal(HttpApplication httpApplication) +254
   Microsoft.Exchange.HttpProxy.<>c__DisplayClass8.<OnBeginRequest>b__7() +1479
   Microsoft.Exchange.Common.IL.ILUtil.DoTryFilterCatch(TryDelegate tryDelegate, FilterDelegate filterDelegate, CatchDelegate catchDelegate) +40
   Microsoft.Exchange.HttpProxy.Diagnostics.SendWatsonReportOnUnhandledException(MethodDelegate methodDelegate) +408
   System.Web.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() +80
   System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) +165

This situation was dropped into my lap and I am looking to get access to EAC through my browser.

Hey there, I have multi role exchange 2013. in my "Exchange Back End" website I have a Rpc virtual directory. I understand the physical path for this VD is %windir%\System32\RpcProxy.  My issue is that this keeps reverting back to C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\rpc which is the same path as the "Default Web Site" Rpc virtual directory.  When it does this Outlook breaks.  So I set it back to %windir%\System32\RpcProxy, outlook works again, then after a few minutes, it reverts back to c:\program files... and outlook breaks again.

help?

To clarify, I have included two screens below.  The first image shows the physical paths after I change it.  Then about 5 or 10 minutes later, the path reverts as seen in the bottom image.