Exchange Certificate and IIS Problems

hi there

i hope someone can urgently help me.
i'm looking after an sbs 2008 with exchange. everything was working up until two days ago and i cant fiigure out what the problem might be. i just know it has something to do with IIS and the security certificate.
the reason why i'm saying this is that even if i'm on the server and i go to IE and type https://127.0.0.1 it brings up the security certificate warning. one can then click on continue (not reccommended) but then nothing happens. normally you can also type in https://127.0.0.1/owa and the exchange web app will open so view mail via internet explorer but even that doesnt work.
this is causing a huge problem for people working outside the lan that connects to the exchange via http and all the people whos blackberries cant connect anymore.

please help if you can

thank you


stevenvanheerdenAsked:
Who is Participating?
 
Gerald26Commented:
Do not use c:\inetsrv directories, everything is happening in C:\WINDOWS\SYSTEM32\INETSRV

You dontwant to modify site datas (like pages, scripts and so on) but Metabase (like virutal directories names, security and so on). So it's not a worry if you don't have a c:\inetsrv directory

If your system has not changed a lot since June , you might want to copy current C:\WINDOWS\system32\inetsrv\Metabase.XML AND MBSchema.xml in a safe place and replace them with 2 older files you will find in History. (You will need to rename these files, because in history they looks like metabase_000000_11111.xml and MBDSchema_000000000_11111.xml)


Once again, the whole scenario takes place in C:\windows\system32\inetsrv, not in c;\inetsrv

Once files replaced, restart iis !
Good luck


0
 
Gerald26Commented:
This does not look like a certificate issue, think the warning page is displayed. 127.0.0.1 is not a name protected by the self-signed certificate.

Try https://<netbios name> or https://<local FQDN> and warning should not appear

The problem you're facing looks like a misconfigured or messy IIS server. First try to reset IIS (cmd /IISRESET) then check the eventlogs (eventvwr) for warnings and error in applications logs.

you can turn on expert logs using this powershell command:
get-eventloglevel | set-eventloglevel -level expert

and back on standard logging with :
get-eventloglevel | set-eventloglevel -level lowest

Tell us more about the errors that appear in event logs

0
 
Radhakrishnan RSenior Technical LeadCommented:
Have you checked whether your exchange certificate expired? IIS manager>>Select OWA virtual directory>>Properties>>Directory security>>View Certificate and see the date of certificate. Incase if it is expired you need to renew it.

Is outlook working fine?
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 
stevenvanheerdenAuthor Commented:
The update cannot be started because the content sources cannot be accessed. Fix the errors and try the update again.

Context: Application 'Search', Catalog 'index file on the search server Search'


-------------------------------------

An error has occurred. The problem may resolve itself. The service will retry the operation in 15 minutes. Message:

Unable to create Internet Information Services (IIS) directory entry. Error message is: Server execution failed
. HResult = -2146959355.


----------------------------------------------------------------------------

The start address <sts3s://devvalhot.dyndns.org:987/contentdbid={01409a05-a444-4932-b298-bd625bef8756}> cannot be crawled.

Context: Application 'Search index file on the search server', Catalog 'Search'

Details:
      Error in the Site Data Web Service.   (0x80042616)

-----------------------------------------------


these are 3 of the application logs that i can see that look like it indicates errors



0
 
stevenvanheerdenAuthor Commented:
Attempting stop...
Internet services successfully stopped
Attempting start...
Restart attempt failed.
The IIS Admin Service or the World Wide Web Publishing Service, or a service dep
endent on them failed to start.  The service, or dependent services, may had an
error during its startup or may be disabled.

this is what happens when i run iisreset
0
 
stevenvanheerdenAuthor Commented:
hi

i have checked if the any of the certificates have expired, but it all seems to be fine.
the earliest one will expire June next year.
0
 
Gerald26Commented:
That's what I was expecting. The problem comes from IIS or any service related with it.

Have you modified Sharepoint configuration recently ? Wsus ?
You will see some red 'service control manager' events in eventlogs. There will also be the reason why W3SVC doesnt start. You want to check if a specific dependant service that can not start.

Have you renamed the server / changed admin password during these 2 days ?

Anything else RED in APPLICATIONS logs that appeared 2 days ago ?
0
 
stevenvanheerdenAuthor Commented:
An error has occurred. The problem may resolve itself. The service will retry the operation in 15 minutes. Message:

Unable to create Internet Information Services (IIS) directory entry. Error message is: Server execution failed
. HResult = -2146959355.

-----------------------------

Process MSExchangeFDS.exe (PID=5752). Failed to read property Path from metabase object IIS://DEVONSRV.devonvalley.local/W3SVC/3/ROOT/OAB. OAB synchronization suspended.


these are the 1st two i see...
0
 
stevenvanheerdenAuthor Commented:
i havent changed any passwords or the server name...
0
 
stevenvanheerdenAuthor Commented:
also getting this one, it refers to asp.net


    Machine name: DEVONSRV
 
Process information:
    Process ID: 9272
    Process name: w3wp.exe
    Account name: NT AUTHORITY\NETWORK SERVICE
 
Exception information:
    Exception type: COMException
    Exception message: Access is denied.
 
 
Request information:
    Request URL: https://devvalhot.dyndns.org:987/_vti_bin/sitedata.asmx 
    Request path: /_vti_bin/sitedata.asmx
    User host address: 192.168.10.2
    User:  
    Is authenticated: False
    Authentication Type:  
    Thread account name: NT AUTHORITY\NETWORK SERVICE
 
Thread information:
    Thread ID: 3
    Thread account name: NT AUTHORITY\NETWORK SERVICE
    Is impersonating: False
    Stack trace:    at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)
   at System.DirectoryServices.DirectoryEntry.Bind()
   at System.DirectoryServices.DirectoryEntry.get_IsContainer()
   at System.DirectoryServices.DirectoryEntries.ChildEnumerator..ctor(DirectoryEntry container)
   at System.DirectoryServices.DirectoryEntries.GetEnumerator()
   at Microsoft.SharePoint.ApplicationRuntime.SPRequestModule.System.Web.IHttpModule.Init(HttpApplication app)
   at System.Web.HttpApplication.InitModulesCommon()
   at System.Web.HttpApplication.InitInternal(HttpContext context, HttpApplicationState state, MethodInfo[] handlers)
   at System.Web.HttpApplicationFactory.GetNormalApplicationInstance(HttpContext context)
   at System.Web.HttpApplicationFactory.GetApplicationInstance(HttpContext context)
   at System.Web.HttpRuntime.ProcessRequestInternal(HttpWorkerRequest wr)
 
 
Custom event details:
0
 
Gerald26Commented:
There are several points to check, but I won't be able to help you with anything related to SharePoint.

Let's stop a second on this error:
 Process MSExchangeFDS.exe (PID=5752). Failed to read property Path from metabase object IIS://DEVONSRV.devonvalley.local/W3SVC/3/ROOT/OAB. OAB synchronization suspended

Apparently your OAB virtual directory has been changed or renamed or damaged or the data in Metabase are incorrect. File distribution service fails.

http://technet.microsoft.com/en-us/library/ff360326(EXCHG.140).aspx


what do these command return using exchange powershell ?
get-oabvirtualdirectory
get-owavirtualdirectory

Just in case, do you have a vaild recent system backup ?
0
 
stevenvanheerdenAuthor Commented:
hi. ok when i run the first command i get this error:


Get-OabVirtualDirectory : Unable to create Internet Information Services (IIS)
directory entry. Error message is: Server execution failed
. HResult = -2146959355.
At line:1 char:23
+ get-oabvirtualdirectory <<<<


and when i do the second one:


Get-OwaVirtualDirectory : Unable to create Internet Information Services (IIS)
directory entry. Error message is: Server execution failed
. HResult = -2146959355.
At line:1 char:23
+ get-owavirtualdirectory <<<<

0
 
stevenvanheerdenAuthor Commented:
ok, i have run the windows server backup wizard, to restore applications to a week ago.

it restored (Exchange and Windows Sharepoint services)

didnt help, still having the same problem
0
 
Gerald26Commented:
Hello, sorry about the delay, it was night time and bed called me!

I wasnt talking about restoring Exchange or Sharepoint but only IIS Metabase.
Check if you have a valid backup of %systemroot%\inetsrv. (Do not restore yet !!)
Also check if you have history of modifications made do database in C:\Windows\System32\inetsrv\History

If you dont have any backup of this directory, do one now
Then you will want to get the most recent versions of Metabase.XML AND MBSchema.xml in C:\WINDOWS\system32\inetsrv\History them Metabase.xml and MBSchema.xml, and then copy/paste them into the C:\WINDOWS\system32\inetsrv

That wil rollback IIS configuration in a working state.

Waiting for your comments
0
 
Gerald26Commented:
If you dont have any backup of this directory, do one now
Then you will want to get the most recent versions of Metabase.XML AND MBSchema.xml in C:\WINDOWS\system32\inetsrv\History them Metabase.xml and MBSchema.xml, and then copy/paste them into the C:\WINDOWS\system32\inetsrv

I know this grammatically means nothing, I moved the words and forgot to erase them in the sentence !

Correct sentence :

Then you will want to get the most recent versions of Metabase.XML AND MBSchema.xml in C:\WINDOWS\system32\inetsrv\History, and then copy/paste them into the C:\WINDOWS\system32\inetsrv
0
 
stevenvanheerdenAuthor Commented:
hi Gerald

no worries - we get little sleep anyway our IT guys.

thanks for your help so far.

i went to check if i can find a directory in the system root called Inetsrv but there is nothing.

i went into Windows\system32\inetsrv\history and found a few of these xml files dating back to June.

i do run a windows server backup which obviously backs up everything on the server and can be dated back as much as 66 days currently.

i'm not sure why i dont have a c:\inetsrv directory? i have changed the view so that we can see all system and hidden files and directories.

??
0
 
stevenvanheerdenAuthor Commented:
ok, will give it a shot now...

thank you
0
 
stevenvanheerdenAuthor Commented:
Gerald

great stuff! thanks so much - seems like i can access outlook via the web again.

my client will test and get back to me....really hope it stays fine now.
0
 
Gerald26Commented:

Makes me happy to see you happy !
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.