Exchange System Manager Error - The token supplied to the function is invalid ID no: 80090308...
I have a Microsoft Small Business Server 2003 SP1 running Exchange (SP1). I have a wildcard SSL Certificate from Network Solutions. I installed this certificate using the "Email and Internet Connection Wizard (CEICW)". Outlook Web Access (OWA) and Remote Web Workplace (RWW) both appear to work correctly.
Since the installation of this Wildcard SSL Certificate, I have been experiencing the following issues:
1 - I am unable to access "Public Folders" using the "Exchange System Manager" . I receive the following error "The token supplied to the function is invalid. ID no: 80090308 Exchange System Manager".
2 - I am no longer able to do a "mailbox" backup using "Symantec Backup Exec 10d for Windows Servers". I am able to do a full store backup, but not the individual backup (which saves a lot of headache when one person has an issue). When I try a "mailbox" level backup I receive an error stating that my credentials are invalid.
I found what appears to be an abandoned EE Article ID: 22100684 titled "in Public Folders: Token Supplied is invalid" but it was not much help.
I have also found a Microsoft Knowledge Base (KB) Article #324345 (http://support.microsoft.com/kb/324345) However, it references installing an SSL with a Fully Qualified Domain Name (FQDN) and I am not sure how to do this with a wildcard.
Network Solutions website has nothing and the tech support individual was completely clueless.
I am a newbie with this "SSL Certificate" stuff. Any help and/or guidance would be greatly appreciated.
Since the installation of this Wildcard SSL Certificate, I have been experiencing the following issues:
1 - I am unable to access "Public Folders" using the "Exchange System Manager" . I receive the following error "The token supplied to the function is invalid. ID no: 80090308 Exchange System Manager".
2 - I am no longer able to do a "mailbox" backup using "Symantec Backup Exec 10d for Windows Servers". I am able to do a full store backup, but not the individual backup (which saves a lot of headache when one person has an issue). When I try a "mailbox" level backup I receive an error stating that my credentials are invalid.
I found what appears to be an abandoned EE Article ID: 22100684 titled "in Public Folders: Token Supplied is invalid" but it was not much help.
I have also found a Microsoft Knowledge Base (KB) Article #324345 (http://support.microsoft.com/kb/324345) However, it references installing an SSL with a Fully Qualified Domain Name (FQDN) and I am not sure how to do this with a wildcard.
Network Solutions website has nothing and the tech support individual was completely clueless.
I am a newbie with this "SSL Certificate" stuff. Any help and/or guidance would be greatly appreciated.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Hi, to resolve your backup issue with backup exec. Make sure that the account you are using for the system account in backup exec has two things.
1 a mailbox
2 it is listed in the GAL.
I see this a lot, people use administrator as the service account and will hide administrator from the GAL.
1 a mailbox
2 it is listed in the GAL.
I see this a lot, people use administrator as the service account and will hide administrator from the GAL.
ASKER
plimpias - please excuse my ignorance what is the "GAL"
Sorry its the global address list. Go into the user properties in active directory that is configured to run with backup exec. Under the exchange advaned tab make sure that hide from global address list is unchecked. if you don't see exchange advanced tab then you have to create a mailbox for that account.
ASKER
Sorry it took so long to get back...I have made the following modifications and continue to have the same problem with the Exchange Public Folders:
(per Jeff TechSoEasy ID: 19349408)
- exchanged SSL wildcard certificate, for two individual SSL certificates (WWW.domain.com & servername.domain.com)
- confirmed "HTTP Keep-alives Enabled" was already enabled (per Jeff TechSoEasy ID: 19349408)
- Did not try removing the Cert as I had just installed the new Server SSL Cert.
- Removed SSL from Exadmin Virtual Root
Regarding Backup Exec issues:
(Per Plimpias ID: 19352280)
- I have tried creating a separate system account for BE with mailbox listed in GAL, however, this did not work
Do either of you have any new theories or things I should be looking into? Thank you for all your help!
- chelle
(per Jeff TechSoEasy ID: 19349408)
- exchanged SSL wildcard certificate, for two individual SSL certificates (WWW.domain.com & servername.domain.com)
- confirmed "HTTP Keep-alives Enabled" was already enabled (per Jeff TechSoEasy ID: 19349408)
- Did not try removing the Cert as I had just installed the new Server SSL Cert.
- Removed SSL from Exadmin Virtual Root
Regarding Backup Exec issues:
(Per Plimpias ID: 19352280)
- I have tried creating a separate system account for BE with mailbox listed in GAL, however, this did not work
Do either of you have any new theories or things I should be looking into? Thank you for all your help!
- chelle
ASKER
BTW - I realized this may be pertinent information:
- The Exchange Database resides on the D: drive
- Two months ago SBS was reinstalled to a reformatted C: after a virus took down the server (user brought in viral external hard drive from home...lesson learned)
Not sure if this means anything but thought it might be important
- The Exchange Database resides on the D: drive
- Two months ago SBS was reinstalled to a reformatted C: after a virus took down the server (user brought in viral external hard drive from home...lesson learned)
Not sure if this means anything but thought it might be important
So, you exchanged your certificate for one that says servername.domain.com? Did you generate a Certificate Request from your SBS for that? There are specific instructions which must be followed on how to request a 3rd party certificate and then install it.
But those steps I copied and pasted above were not for using a 3rd party certificate, but a self-signed one. I merely put them there for reference.
If you are going to use a 3rd party certificate you should review the instructions on how to create the certificate request which you'll find inside the Configure Email and Internet Connection Wizard (CEICW) by clicking on the More Information button on the SSL Certificate Screen.
Jeff
TechSoEasy
But those steps I copied and pasted above were not for using a 3rd party certificate, but a self-signed one. I merely put them there for reference.
If you are going to use a 3rd party certificate you should review the instructions on how to create the certificate request which you'll find inside the Configure Email and Internet Connection Wizard (CEICW) by clicking on the More Information button on the SSL Certificate Screen.
Jeff
TechSoEasy
ASKER
I used the CEICW to remove my wildcard (*.domain.com) and then to generate a request for a new certificate servername.domain.com from Network Solutions.
However, when I tried to install the certificated via CEICW, it prompted me for a *.cer file and wouldn't allow the *.crt file that Network Solutions gave me. So I installed it via IIS Certificate Wizard. Could this be the problem?
However, when I tried to install the certificated via CEICW, it prompted me for a *.cer file and wouldn't allow the *.crt file that Network Solutions gave me. So I installed it via IIS Certificate Wizard. Could this be the problem?
Yes, you need to use the CEICW to install the certificate properly. Just change the browsing paramaters to *.* "all files" so you can see the .crt file and then select that.
Jeff
TechSoEasy
Jeff
TechSoEasy
ASKER
I tried that, but it would give me an error after I selected it. I can try it again. Do I have to generate a new request, etc.?
Click on the More Information button on the SSL screen of the CEICW for complete step-by-step instructions.
Jeff
TechSoEasy
Jeff
TechSoEasy
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
thx, this was a helpful reminder/tip!
The last post saved me so much time researching. Excellent! Thank you
TechSoEasy,
Thanks for your top comment. I was having the same problem and your suggestion fixed it.
-Ken
Thanks for your top comment. I was having the same problem and your suggestion fixed it.
-Ken
Yup, if removing the SSL check doesn't do it, the above answer will...GREAT WORK!
Thanks Guys, the fiirst answer was the one that saved my butt big time.
Excellent answer and explaination.
Cheers
Excellent answer and explaination.
Cheers
You do not want to do this, it is not necessary for SSL to work.
As for brick level or mailbox backups, it could also be related, but I don't understand how you think it is easier when one person has a problem. 99 times out of 100, deleted item retention means that I never need to go to tape.
-red