Rebuild or reinstall Exchange 2010 on SBS 2011

I would recommend against a repair install or any kind of update until the issues have been resolved. I also don't believe that IIS is causing all of your problems. I have a feeling the underlying cause may be more related to the internal workings of Exchange, eg. database integrity, active directory schema, DNS. Start with the Event Viewer and look for Exchange related errors and warnings. Look for patterns. Dates / times that correspond with when users try to access OWA or Out of Office assistant. That might just point you in the right direction.

What is wrong with OWA?

Have you tried installing SP1 for Exchange 2010? Or does that say that Exchange does not exist too?

Since OOF in exchange relies on exchange web services (EWS) and that relies on IIS, the symptoms are consistent with a clobbered IIS instance.

Luckily this is very easy to fix with exchange 2010.

First, MAKE A BACKUP!

Then, run a powershell command from EMS to repair OWA.

http://technet.microsoft.com/en-us/library/bb124811.aspx

test OWA.

In that same technet library are the details for a similar command to repair EWS. Do so and test.

Repair other IIS virtual directories as necessary.

-Cliff

FYI, forgot to mention, UR5 failing to install is NOT a sign of an issue. SBS 2011 shipped with exchange 2010 w/ SP1, so no UR for exchange 2010 RTM will install, and will report the error you gAcpve, as exchange 2010 RTM is, in fact, not installed. The latest UR for exchange 2010 SP1 is UR3, released on march 14th. While you are welcome to install it ( and encouraged to do so) it won't fix your IIS issues.

-Cliff

RU3 was pulled due to blackberry duplication issues, it has now been re-released. So, if you are going to install it, ensure you have the latest version of it.

thanks for the replies. Sorry for the delay responding.

Using Shell I cannot first remove OWA so that I can re-add it. Can I simply right click and 'remove' does this do the same thing as remove via shell?

After I remove OWA, I will rebuild (using shell, hopefully it works...) Is there anything else you suggest I try or you think this should sort out the issues?

............................

Yes, I am running SBS 2011 so does include Exchange 2010 SP1.

I've downloaded and will run RU3v3 tonight.
(http://www.microsoft.com/downloads/en/details.aspx?FamilyID=413b8979-76b8-4be4-a18b-015d025eb368)

With exchange, the GUI elements actually run powershell in the background, so if the powershell command is failing, so too will the GUI. IF you could tell us why OWA is failing to remove (error messages, etc) that would be more helpful.

-Cliff

I just removed it... and re-created, went perfectly. I may have been typing the wrong thing into Shell.


Hopefully Ive done the right thing.

It says now I have to create corresponding ECP. Did this but another error... am I missing something?

Drop "-Name ECP" off the command. It knows you are creating an ECP app/VD

Have a look at Example1 from here:
http://technet.microsoft.com/en-us/library/dd351218.aspx

Great! That worked, thanks!

OK, so now I have a rebuilt OWA and ECP. But still no go....

Here is the error I get when going to OWA.


 

Outlook Web App didn't initialize. If the problem continues, please contact your helpdesk. 
The Microsoft Exchange Active Directory Topology service on server localhost can't be contacted via RPC. Error 0x5.  

--------------------------------------------------------------------------------

 Copy error details to clipboard
 Show details



Request
Url: https://mail.XXmydomainXX.com.au:443/owa/auth/error.aspx
User host address: 192.168.1.50
OWA version: 14.1.270.1

Exception
Exception type: Microsoft.Exchange.Clients.Owa.Core.OwaInvalidConfigurationException
Exception message: The Microsoft Exchange Active Directory Topology service on server localhost can't be contacted via RPC. Error 0x5.

Call stack

Microsoft.Exchange.Clients.Owa.Core.OwaConfigurationManager.CreateAndLoadConfigurationManager() 
Microsoft.Exchange.Clients.Owa.Core.OwaSettingsLoader.Load() 
Microsoft.Exchange.Clients.Owa.Core.OwaApplicationBase.ExecuteApplicationStart(Object sender, EventArgs e)

Inner Exception
Exception type: Microsoft.Exchange.Data.Directory.ADTransientException
Exception message: The Microsoft Exchange Active Directory Topology service on server localhost can't be contacted via RPC. Error 0x5.

Call stack

Microsoft.Exchange.Data.Directory.DSAccessTopologyProvider.GetServersForRole(String[] currentlyUsedServers, ADServerRole role, Int32 serversRequested, Int32[]& mapping) 
Microsoft.Exchange.Data.Directory.DSAccessTopologyProvider.GetConfigDCInfo(Boolean throwOnFailure) 
Microsoft.Exchange.Data.Directory.TopologyProvider.PopulateConfigNamingContexts() 
Microsoft.Exchange.Data.Directory.ADSession.GetConfigurationNamingContext() 
Microsoft.Exchange.Data.Directory.SystemConfiguration.ADSystemConfigurationSession.GetRootOrgContainerId(String fqdn, NetworkCredential credential) 
Microsoft.Exchange.Clients.Owa.Core.Utilities.CreateADSystemConfigurationSessionScopedToFirstOrg(Boolean readOnly, ConsistencyMode consistencyMode) 
Microsoft.Exchange.Clients.Owa.Core.OwaConfigurationManager.InitializeConfigurationManager() 
Microsoft.Exchange.Clients.Owa.Core.OwaConfigurationManager.CreateAndLoadConfigurationManager()

Inner Exception
Exception type: Microsoft.Exchange.Rpc.RpcException
Exception message: Error 0x5 (Access is denied) from HrGetServersForRole

Call stack

ThrowRpcException(Int32 rpcStatus, String message) 
Microsoft.Exchange.Rpc.RpcClientBase.ThrowRpcException(Int32 rpcStatus, String routineName) 
Microsoft.Exchange.Rpc.ADTopology.ADTopoRpcClient.HrGetServersForRole(String[] currentlyUsedServers, ServerRole role, Int32 serversRequested, ServerInfo[]& suitableServers, Int32[]& mapping) 
Microsoft.Exchange.Data.Directory.DSAccessTopologyProvider.GetServersForRole(String[] currentlyUsedServers, ADServerRole role, Int32 serversRequested, Int32[]& mapping)

Select allOpen in new window

If you ping mail.XXmydomainXX.com.au from internal does it resolve to the internal IP address of the CAS server? make sure it does not resolve to the external IP address.

i changed that, was not sure if it was secure to put these adressess out there. That address does actually work, but if I go to mail.XXXX.com/owa this is where I get the error. or if I go to mail.xxxx.com and then log in and click mail. (which is the same as /owa).

yes, but if you ping it internally do you get a reply from an internal IP address?

yes i do get a reply from an internal ip address. If I ping /owa, I do not get a response.

If you have 2 NICs in that server try disabling the 2nd one and rebooting.

Also check your IIS bindings

Now that you've repaired your actual IIS directories, I'd simply try rerunning the IAMW followed by the FMNW. These two will address both of MegaNuk3's suggestions (the IAMW will set up an internal DNS zone to ensure the internal IP is used and the FMNW will resolve 2-nic and binding issues.) I'm guessing that the rebuild has just left your network stack a bit misconfigured and the one-two punch (and a reboot) will finish things up.

-Cliff

I've just done the IAMW and got this error.

 

I also got this pop up on my outlook

 

You must choose "advanced" in the IAMW, and set the external name to mail.*.  Otherwise it defaults to remote.* and the certificate doesn't match.

As long as you manually opened ports inyour firewall, the first warning can safely ge ignored.

-Cliff

i thought that might be the case. I've fixed. Will do a restart soon, and hopefully it all works....

RMA opens very slowly, then I click "check email" icon, it pops a window up and thinks for a long time, then pops up with a separate login. Then... an error.

But im feel good because the error has changed, which hopefully means we have progressed.

Request
Url: https://mail.mydomain.com:443/OWA
User host address: 192.168.1.50
OWA version: 14.1.270.1

Exception
Exception type: System.Web.HttpException
Exception message: Request timed out.

Call stack

No callstack available

If RWA is opening slowly then you  just have plain old resource issues. My *first* guess would be that your CRM app is chewing up enough memory that IIS doesn't have enough to run apps. Check your RAM usage and limit your CRM app if you need to. Try temporarily disabling it and rebooting to see if things are better.

With that said, you haven't mentioned your server specs, but SBS 2011 really needs 8 megs minimum to perform even halfway decent and that is *without* 3rd-party apps. If your server is under powered, even adjusting your CRM memory usage may not be enough. You may be looking at upgrades.

-Cliff

Server specs are good. Its brand new.
16GB Ram
2x E5630 Xeon

I tested again and I'm getting the same error again.


 

Outlook Web App didn't initialize. If the problem continues, please contact your helpdesk. 
The Microsoft Exchange Active Directory Topology service on server localhost can't be contacted via RPC. Error 0x5.  

--------------------------------------------------------------------------------

 Copy error details to clipboard
 Show details



Request
Url: https://mail.xxxx.com.au:443/owa/auth/error.aspx
User host address: 192.168.1.2
OWA version: 14.1.270.1

Exception
Exception type: Microsoft.Exchange.Clients.Owa.Core.OwaInvalidConfigurationException
Exception message: The Microsoft Exchange Active Directory Topology service on server localhost can't be contacted via RPC. Error 0x5.

Call stack

Microsoft.Exchange.Clients.Owa.Core.OwaConfigurationManager.CreateAndLoadConfigurationManager() 
Microsoft.Exchange.Clients.Owa.Core.OwaSettingsLoader.Load() 
Microsoft.Exchange.Clients.Owa.Core.OwaApplicationBase.ExecuteApplicationStart(Object sender, EventArgs e)

Inner Exception
Exception type: Microsoft.Exchange.Data.Directory.ADTransientException
Exception message: The Microsoft Exchange Active Directory Topology service on server localhost can't be contacted via RPC. Error 0x5.

Call stack

Microsoft.Exchange.Data.Directory.DSAccessTopologyProvider.GetServersForRole(String[] currentlyUsedServers, ADServerRole role, Int32 serversRequested, Int32[]& mapping) 
Microsoft.Exchange.Data.Directory.DSAccessTopologyProvider.GetConfigDCInfo(Boolean throwOnFailure) 
Microsoft.Exchange.Data.Directory.TopologyProvider.PopulateConfigNamingContexts() 
Microsoft.Exchange.Data.Directory.ADSession.GetConfigurationNamingContext() 
Microsoft.Exchange.Data.Directory.SystemConfiguration.ADSystemConfigurationSession.GetRootOrgContainerId(String fqdn, NetworkCredential credential) 
Microsoft.Exchange.Clients.Owa.Core.Utilities.CreateADSystemConfigurationSessionScopedToFirstOrg(Boolean readOnly, ConsistencyMode consistencyMode) 
Microsoft.Exchange.Clients.Owa.Core.OwaConfigurationManager.InitializeConfigurationManager() 
Microsoft.Exchange.Clients.Owa.Core.OwaConfigurationManager.CreateAndLoadConfigurationManager()

Inner Exception
Exception type: Microsoft.Exchange.Rpc.RpcException
Exception message: Error 0x5 (Access is denied) from HrGetServersForRole

Call stack

ThrowRpcException(Int32 rpcStatus, String message) 
Microsoft.Exchange.Rpc.RpcClientBase.ThrowRpcException(Int32 rpcStatus, String routineName) 
Microsoft.Exchange.Rpc.ADTopology.ADTopoRpcClient.HrGetServersForRole(String[] currentlyUsedServers, ServerRole role, Int32 serversRequested, ServerInfo[]& suitableServers, Int32[]& mapping) 
Microsoft.Exchange.Data.Directory.DSAccessTopologyProvider.GetServersForRole(String[] currentlyUsedServers, ADServerRole role, Int32 serversRequested, Int32[]& mapping)

Select allOpen in new window

Install RU3 and we'll go from there, if the issue still exists...

I removed RU2 and tried RU3 but its failed and did not say why?

 

I managed to get it going by turning off UAC temporarily. Its running now, I'll let you know how it goes.

yep... same error after 3v3 and restart.

 Outlook Web App didn't initialize. If the problem continues, please contact your helpdesk.
The Microsoft Exchange Active Directory Topology service on server localhost can't be contacted via RPC. Error 0x5.  

--------------------------------------------------------------------------------

 Copy error details to clipboard
 Show details



Request
Url: http://mail.mezzaninemedia.com.au:80/owa/auth/error.aspx
User host address: 192.168.1.2
OWA version: 14.1.287.0

Exception
Exception type: Microsoft.Exchange.Clients.Owa.Core.OwaInvalidConfigurationException
Exception message: The Microsoft Exchange Active Directory Topology service on server localhost can't be contacted via RPC. Error 0x5.

Call stack

Microsoft.Exchange.Clients.Owa.Core.OwaConfigurationManager.CreateAndLoadConfigurationManager()
Microsoft.Exchange.Clients.Owa.Core.OwaSettingsLoader.Load()
Microsoft.Exchange.Clients.Owa.Core.OwaApplicationBase.ExecuteApplicationStart(Object sender, EventArgs e)

Inner Exception
Exception type: Microsoft.Exchange.Data.Directory.ADTransientException
Exception message: The Microsoft Exchange Active Directory Topology service on server localhost can't be contacted via RPC. Error 0x5.

Call stack

Microsoft.Exchange.Data.Directory.DSAccessTopologyProvider.GetServersForRole(String[] currentlyUsedServers, ADServerRole role, Int32 serversRequested, Int32[]& mapping)
Microsoft.Exchange.Data.Directory.DSAccessTopologyProvider.GetConfigDCInfo(Boolean throwOnFailure)
Microsoft.Exchange.Data.Directory.TopologyProvider.PopulateConfigNamingContexts()
Microsoft.Exchange.Data.Directory.ADSession.GetConfigurationNamingContext()
Microsoft.Exchange.Data.Directory.SystemConfiguration.ADSystemConfigurationSession.GetRootOrgContainerId(String fqdn, NetworkCredential credential)
Microsoft.Exchange.Clients.Owa.Core.Utilities.CreateADSystemConfigurationSessionScopedToFirstOrg(Boolean readOnly, ConsistencyMode consistencyMode)
Microsoft.Exchange.Clients.Owa.Core.OwaConfigurationManager.InitializeConfigurationManager()
Microsoft.Exchange.Clients.Owa.Core.OwaConfigurationManager.CreateAndLoadConfigurationManager()

Inner Exception
Exception type: Microsoft.Exchange.Rpc.RpcException
Exception message: Error 0x5 (Access is denied) from HrGetServersForRole

Call stack

ThrowRpcException(Int32 rpcStatus, String message)
Microsoft.Exchange.Rpc.RpcClientBase.ThrowRpcException(Int32 rpcStatus, String routineName)
Microsoft.Exchange.Rpc.ADTopology.ADTopoRpcClient.HrGetServersForRole(String[] currentlyUsedServers, ServerRole role, Int32 serversRequested, ServerInfo[]& suitableServers, Int32[]& mapping)
Microsoft.Exchange.Data.Directory.DSAccessTopologyProvider.GetServersForRole(String[] currentlyUsedServers, ADServerRole role, Int32 serversRequested, Int32[]& mapping)

Do any if the other web sites work? Like https://<servername>/autodiscover/autodiscover.XML ?

mail.mydomain.com/remote works

But the one you said does not. What are some other ones I can test?

When i try the one you gave me it says "600 Invalid Request"

Sounds like something has messed up the RPC link between Exchange and IIS. You may have to uninstall and re-install RPC over HTTP...

http://technet.microsoft.com/en-us/library/dd776122.aspx

As always, have a backup before performing this procedure (a backup could've saved you from a lot of this already...)

...fair warning, if that doesn't work then the corruption is deep enough in the OS that you are looking at a re-install (settings and data can be migrated.)



-Cliff

600 invalid request is the correct response for that URL.

Where are you testing it from? Internal? Try https://< internal CAS IP address>/owa and see what that does. Are you even getting the owa logon form?

I haven't had time to action Cliffs last message... but when I try the address above (with my internal IP) I do get a login (attached) but then I get this error.
Outlook Web App didn't initialize. If the problem continues, please contact your helpdesk.
The Microsoft Exchange Active Directory Topology service on server localhost can't be contacted via RPC. Error 0x5.


Request
Url: https://192.168.1.2:443/owa/auth/error.aspx
User host address: 192.168.1.50
OWA version: 14.1.287.0

Exception
Exception type: Microsoft.Exchange.Clients.Owa.Core.OwaInvalidConfigurationException
Exception message: The Microsoft Exchange Active Directory Topology service on server localhost can't be contacted via RPC. Error 0x5.

Call stack
Microsoft.Exchange.Clients.Owa.Core.OwaConfigurationManager.CreateAndLoadConfigurationManager()
Microsoft.Exchange.Clients.Owa.Core.OwaSettingsLoader.Load()
Microsoft.Exchange.Clients.Owa.Core.OwaApplicationBase.ExecuteApplicationStart(Object sender, EventArgs e)

Inner Exception
Exception type: Microsoft.Exchange.Data.Directory.ADTransientException
Exception message: The Microsoft Exchange Active Directory Topology service on server localhost can't be contacted via RPC. Error 0x5.

Call stack
Microsoft.Exchange.Data.Directory.DSAccessTopologyProvider.GetServersForRole(String[] currentlyUsedServers, ADServerRole role, Int32 serversRequested, Int32[]& mapping)
Microsoft.Exchange.Data.Directory.DSAccessTopologyProvider.GetConfigDCInfo(Boolean throwOnFailure)
Microsoft.Exchange.Data.Directory.TopologyProvider.PopulateConfigNamingContexts()
Microsoft.Exchange.Data.Directory.ADSession.GetConfigurationNamingContext()
Microsoft.Exchange.Data.Directory.SystemConfiguration.ADSystemConfigurationSession.GetRootOrgContainerId(String fqdn, NetworkCredential credential)
Microsoft.Exchange.Clients.Owa.Core.Utilities.CreateADSystemConfigurationSessionScopedToFirstOrg(Boolean readOnly, ConsistencyMode consistencyMode)
Microsoft.Exchange.Clients.Owa.Core.OwaConfigurationManager.InitializeConfigurationManager()
Microsoft.Exchange.Clients.Owa.Core.OwaConfigurationManager.CreateAndLoadConfigurationManager()

Inner Exception
Exception type: Microsoft.Exchange.Rpc.RpcException
Exception message: Error 0x5 (Access is denied) from HrGetServersForRole

Call stack
ThrowRpcException(Int32 rpcStatus, String message)
Microsoft.Exchange.Rpc.RpcClientBase.ThrowRpcException(Int32 rpcStatus, String routineName)
Microsoft.Exchange.Rpc.ADTopology.ADTopoRpcClient.HrGetServersForRole(String[] currentlyUsedServers, ServerRole role, Int32 serversRequested, ServerInfo[]& suitableServers, Int32[]& mapping)
Microsoft.Exchange.Data.Directory.DSAccessTopologyProvider.GetServersForRole(String[] currentlyUsedServers, ADServerRole role, Int32 serversRequested, Int32[]& mapping)

Go into EMC and find your OAB virtual directory and then do properties on it and turn on forms based authentication, then test again.

You aren't adding the :443 on the end of the URL are you?

In SBS2011 if you go into IIS, how many web sites are there? And is your OWA one under the same web site as the other exchange VDs like autodiscover/ EWS etc.

Go into EMC and find your OAB virtual directory and then do properties on it and turn on forms based authentication, then test again. -> Cant find this

You aren't adding the :443 on the end of the URL are you? -> no

In SBS2011 if you go into IIS, how many web sites are there? -> 6
OWA one under the same web site as the other exchange VDs like autodiscover/ EWS etc. -> yes

Sorry I meant OWA virtual directory not OAB

Where do I find the OWA virtual directory in EMC?

Should be under your CAS server

was already on form based auth.

Try put on Windows  auth press OK and then put on forms based auth again and press OK and see if https://< internal CAS IP address>/owa now gives a different result

same as previous. It makes me log in, then it comes up with the same error which I showed above.

this isnt looking good. Its very annoying as its just a fresh install, we didnt bring any old settings from our old server in the hope we would bring bugs, but it seems to have got screwed up anyhow! I hope that there is an easy and painless way out of this.

Open IIS and check the SBS web applications web site and check its bindings. Try connect to one of the binding names. You can also try stopping the other web sites and just leave SBS web applications running and try access OWA again. Your OWA VD is under sbs web applications isn't it?

If the above fails, try reinstall the CAS role.
Setup.com /mode:uninstall /roles:CA

Setup.com /mode:install /roles:CA

sorry, ive been tied up and havnt had a chance to continue. I will be back in a couple weeks. Is this ok to do?

I think doing all these suggestions above I may have just made more of a mess. Is it hard to just re-install or do a repair of EVERYTHING without loosing everything I have setup? (exchange profiles, email etc) Is there a simple repair tool?

I am going to check out sbsmigration. I'm going away for a couple weeks, so will be a job on return. I will close this case now as its going off in all directions and there has been no clear answer, although loads of help. Thanks everyone that contributed.

This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.

In addition to all these solutions for Exchange 2010 Recovery , I would also like to share a thread  - http://community.spiceworks.com/topic/831296-repair-exchange-2010 with you all where similar situation has been discussed about and various solutions have been given by exchange experts to repair exchange 2010 database.