Exchange Web Services - Test-OutlookWebServices 404 Errors

I've tried reaching out to the microsoft forums and have had no luck, so I am trying here. I have 2 exchange 2010 servers that i am unable to get a working EWS setup. If you want to read the article, you can at

Clean install of RTM 2010 works when testing EWS using:
Test-WebServicesConnectivity -UseAutodiscoverForClientAccessServer

After applying SP1 RU6 or SP2, it does not work. I get:
Error : [System.Net.WebException]: The request failed with HTTP status 403: Forbidden.

After cranking up diagnostic logging in EMC, I see this in the IIS logs:
AuthError=User not allowed to access EWS;,ReportException_Message=Access is denied. Check credentials and try again.;ReportException_StackTrace=   at Microsoft.Exchange.Services.Wcf.MessageInspectorManager.AfterReceiveRequest(Message& request; IClientChannel channel; InstanceContext instanceContext)    at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.AfterReceiveRequestCore(MessageRpc& rpc)    at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage2(MessageRpc& rpc)    at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean isOperationContextSet);

Any help is appreciated.
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Jessie Gill, CISSPTechnical ArchitectCommented:
Just to try something set the iis virtual directory for Wes to anonymous.  Then see if it works if it does then we can start to figure out it is a permission issue on the virtual directory
fluxlabsAuthor Commented:
With Anonymous I get - 401 Unauthorized
Run this command:Set-OrganizationConfig -EWSApplicationAccessPolicy:$null -EWSAllowMacOutlook:$True -EWSAllowEntourage:$True

Run the command: Get-WebServicesVirtualDirectory | FL and paste the output here

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
fluxlabsAuthor Commented:
I think that was it. I've run everything except the -EWSApplicationAccessPolicy:$null .. I read that if -EWSAllowList was $null that everything should be good. Thank you! I have honestly spent 3 weeks on this issue. Even the microsoft boards were of no use.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Server Apps

From novice to tech pro — start learning today.