• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 4567
  • Last Modified:

Exchange Control panel Error

Getting Error in Exchange 2010 :


Current User: 'internal domain/Users/extest_22abbedac9644'
Exchange Control Panel detected an invalid canary from request for URL 'https://mail.test.com/ECP/RulesEditor/InboxRules.svc/GetList'.
Canary in cookie: 'PZkHsddPQUel7GHioFhuokeoCM-iWc8I7hPUxtrGOJcG7vmtLpGZREhUMhTK5f-m7J0Czq5TcEM.' mismatch with canary in header/form: ', in URL '.
0
Gaurav Singh
Asked:
Gaurav Singh
  • 14
  • 12
  • 6
2 Solutions
 
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
What is the SP and RU ?

Unnecessary events are logged in the Application log when you run the "Test-EcpConnectivity" cmdlet in an Exchange Server 2010 environment
 http://support.microsoft.com/kb/2494389

- Rancy
0
 
AmitIT ArchitectCommented:
0
 
Gaurav SinghSolution ArchitectAuthor Commented:
We cant apply roll up we have restriction since we have third party archiving solution and not compatible with Rollups
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

 
AmitIT ArchitectCommented:
It is a know issue and is fixed with RU3, check with Archive vendor before applying it.
0
 
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
As i said in my first post and as said by Amit this is an issue resolved in SP1 RU3 .... so you can have a look into it or plana nd check with your 3rd party for it.

- Rancy
0
 
Gaurav SinghSolution ArchitectAuthor Commented:
We have Exchange SP2 right now.
0
 
AmitIT ArchitectCommented:
In that case, i might reboot the server and check again. Also login from different id and check if that works or not.

Also i want you to run this from PS and post the result
GCM exsetup |%{$_.Fileversioninfo}
0
 
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
re: Released: Update Rollup 3 for Exchange 2010 Service Pack 2
http://blogs.technet.com/b/exchange/rsscomments.aspx?WeblogPostID=3500708

Check this article.

- Rancy
0
 
Gaurav SinghSolution ArchitectAuthor Commented:
below is the result:

ProductVersion   FileVersion      FileName
--------------   -----------      --------
14.02.0318.002   14.02.0318.002   D:\Program Files\Microsoft\Exchange Server\V14\bin\ExSetup.exe
0
 
AmitIT ArchitectCommented:
14.02.0318.002 means you are running latest Rollup 4 for SP2. Which is last RU from MS. So no more updates required for you. I suggest you to login with different id with same rights and test it, if that works.
0
 
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
Are you getting these alerts in the App logs or when trying to access ECP via web ?
Yeah its themost recent and nothing after that :(

Did you restart the server after applying RU4 ?
Does this server holds all Exchange roles ?

- Rancy
0
 
Gaurav SinghSolution ArchitectAuthor Commented:
The error is generating only for this user extest_22abbedac9644
0
 
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
So error for only one user ... has he been added to the Group Role.

Get-Mailbox {username} | Set-Mailbox –RoleAssignmentPolicy “Default Role Assignment Policy”

- Rancy
0
 
Gaurav SinghSolution ArchitectAuthor Commented:
using below EMS command, Still getting the same error

Get-Mailbox {username} | Set-Mailbox –RoleAssignmentPolicy “Default Role Assignment Policy”
0
 
Gaurav SinghSolution ArchitectAuthor Commented:
yes, this event is in Apps and dont know why it is generating...
0
 
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
What is the user account "extest_22abbedac9644" used for ?
Is this a AD account or what ?
Is the erro comming after making some changes or since this account was created ?

- Rancy
0
 
Gaurav SinghSolution ArchitectAuthor Commented:
yes this is an AD account, and dont know who created it.

Amit:

I cant see any user profile with the user name.
0
 
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
Does this account has a Mailbox as well ?
Do you know what this account is used for and hope it isnt Locked .... can you try taking a Dump of a good user and afftected and check :)

Get-Mailbox "UserName" |FL
Get-User "UserName" | FL

http://social.technet.microsoft.com/Forums/en-US/exchange2010/thread/29fc74c7-ab22-40ec-9cb5-188907cf6b11

- Rancy
0
 
Gaurav SinghSolution ArchitectAuthor Commented:
here is the result:




AccountExpirationDate              :
accountExpires                     : 9223372036854775807
AccountLockoutTime                 :
AccountNotDelegated                : False
AllowReversiblePasswordEncryption  : False
BadLogonCount                      : 0
badPasswordTime                    : 129744979050775649
badPwdCount                        : 0
CannotChangePassword               : False
CanonicalName                      : test.domain.com/Users/extest_22abbedac9644
Certificates                       : {}
City                               :
CN                                 : extest_22abbedac9644
codePage                           : 0
Company                            :
Country                            :
countryCode                        : 0
Created                            : 2/23/2012 12:08:17 PM
createTimeStamp                    : 2/23/2012 12:08:17 PM
Deleted                            :
Department                         :
Description                        :
DisplayName                        : extest_22abbedac9644
DistinguishedName                  : CN=extest_22abbedac9644,CN=Users,DC=pnmr,DC=internal,DC=corp
Division                           :
DoesNotRequirePreAuth              : False
dSCorePropagationData              : {4/18/2012 4:20:13 PM, 3/29/2012 12:54:46 PM, 12/31/1600 5:04:17 PM}
EmailAddress                       : extest_22abbedac9644@domain.com
EmployeeID                         :
EmployeeNumber                     :
Enabled                            : True
Fax                                :
GivenName                          :
HomeDirectory                      :
HomedirRequired                    : False
HomeDrive                          :
homeMDB                            : CN=T1-DB02,CN=Databases,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Admi
                                     nistrative Groups,CN=Corp,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=in
                                     ternal,DC=corp
homeMTA                            : CN=Microsoft MTA,CN=ALBEXCH01,CN=Servers,CN=Exchange Administrative Group (FYDIBOH
                                     F23SPDLT),CN=Administrative Groups,CN=Corp,CN=Microsoft Exchange,CN=Services,CN=Co
                                     nfiguration,DC=internal,DC=corp
HomePage                           :
HomePhone                          :
Initials                           :
instanceType                       : 4
isDeleted                          :
LastBadPasswordAttempt             : 2/23/2012 12:11:45 PM
LastKnownParent                    :
lastLogoff                         : 0
lastLogon                          : 129911732492351983
LastLogonDate                      : 9/1/2012 1:49:12 AM
lastLogonTimestamp                 : 129909593523625977
legacyExchangeDN                   : /o=Corp/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=extest
                                     _22abbedac964457d
LockedOut                          : False
logonCount                         : 65535
LogonWorkstations                  :
mail                               : extest_22abbedac9644@domain.com
mailNickname                       : extest_22abbedac9644
Manager                            :
mDBUseDefaults                     : True
MemberOf                           : {}
MNSLogonAccount                    : False
MobilePhone                        :
Modified                           : 9/3/2012 12:43:37 PM
modifyTimeStamp                    : 9/3/2012 12:43:37 PM
msDS-User-Account-Control-Computed : 0
msExchALObjectVersion              : 223
msExchELCMailboxFlags              : 2
msExchHomeServerName               : /o=Corp/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Ser
                                     vers/cn=ALBEXCH01
msExchMailboxGuid                  : {94, 130, 238, 215...}
msExchMailboxSecurityDescriptor    : System.DirectoryServices.ActiveDirectorySecurity
msExchMailboxTemplateLink          : CN=Default Archive and Retention Policy,CN=Retention Policies Container,CN=Corp,CN
                                     =Microsoft Exchange,CN=Services,CN=Configuration,DC=internal,DC=corp
msExchMobileMailboxFlags           : 1
msExchMobileMailboxPolicyLink      : CN=Default,CN=Mobile Mailbox Policies,CN=Corp,CN=Microsoft Exchange,CN=Services,CN
                                     =Configuration,DC=internal,DC=corp
msExchPoliciesIncluded             : {{17AE2D4C-14D2-4913-AD95-1BF2DB33382E},{26491CFC-9E50-4857-861B-0CB8DF22B5D7}}
msExchRBACPolicyLink               : CN=Default Role Assignment Policy,CN=Policies,CN=RBAC,CN=Corp,CN=Microsoft Exchang
                                     e,CN=Services,CN=Configuration,DC=internal,DC=corp
msExchRecipientDisplayType         : 1073741824
msExchRecipientTypeDetails         : 1
msExchTextMessagingState           : {302120705, 16842751}
msExchUMDtmfMap                    : {emailAddress:3983782222233229644, lastNameFirstName:3983782222233229644, firstNam
                                     eLastName:3983782222233229644}
msExchUserAccountControl           : 0
msExchUserCulture                  : en-US
msExchVersion                      : 44220983382016
msExchWhenMailboxCreated           : 2/23/2012 12:11:26 PM
msRTCSIP-DeploymentLocator         : SRV:
msRTCSIP-FederationEnabled         : True
msRTCSIP-InternetAccessEnabled     : True
msRTCSIP-OptionFlags               : 257
msRTCSIP-PrimaryHomeServer         : CN=Lc Services,CN=Microsoft,CN=1:1,CN=Pools,CN=RTC Service,CN=Services,CN=Configur
                                     ation,DC=internal,DC=corp
msRTCSIP-PrimaryUserAddress        : sip:extest_22abbedac9644@domain.com
msRTCSIP-UserEnabled               : True
msRTCSIP-UserPolicies              : {0=268525429}
Name                               : extest_22abbedac9644
nTSecurityDescriptor               : System.DirectoryServices.ActiveDirectorySecurity
ObjectCategory                     : CN=Person,CN=Schema,CN=Configuration,DC=internal,DC=corp
ObjectClass                        : user
ObjectGUID                         : 61e177eb-3ba9-40c0-b8ed-b3523ce20eec
objectSid                          : S-1-5-21-664290670-206467230-137390319-111347
Office                             :
OfficePhone                        :
Organization                       :
OtherName                          :
PasswordExpired                    : False
PasswordLastSet                    : 9/3/2012 9:17:03 AM
PasswordNeverExpires               : False
PasswordNotRequired                : False
POBox                              :
PostalCode                         :
PrimaryGroup                       : CN=Domain Users,CN=Users,DC=pnmr,DC=internal,DC=corp
primaryGroupID                     : 513
ProfilePath                        :
ProtectedFromAccidentalDeletion    : False
proxyAddresses                     : {sip:extest_22abbedac9644@domain.com, X400:C=US;A= ;P=Corp;O=Exchange;S=exte
                                     st?22abbedac9644;, SMTP:extest_22abbedac9644@domain.com}
pwdLastSet                         : 129911590230712443
SamAccountName                     : extest_22abbedac9644
sAMAccountType                     : 805306368
ScriptPath                         :
sDRightsEffective                  : 15
ServicePrincipalNames              : {}
showInAddressBook                  : {CN=All Users,CN=All Address Lists,CN=Address Lists Container,CN=Corp,CN=Microsoft
                                      Exchange,CN=Services,CN=Configuration,DC=internal,DC=corp, CN=Default Global Addr
                                     ess List,CN=All Global Address Lists,CN=Address Lists Container,CN=Corp,CN=Microso
                                     ft Exchange,CN=Services,CN=Configuration,DC=internal,DC=corp}
SID                                : S-1-5-21-664290670-206467230-137390319-111347
SIDHistory                         : {}
SmartcardLogonRequired             : False
State                              :
StreetAddress                      :
Surname                            :
textEncodedORAddress               : X400:C=US;A= ;P=Corp;O=Exchange;S=extest?22abbedac9644;
Title                              :
TrustedForDelegation               : False
TrustedToAuthForDelegation         : False
UseDESKeyOnly                      : False
userAccountControl                 : 512
userCertificate                    : {}
UserPrincipalName                  : extest_22abbedac9644@test.domain.com
uSNChanged                         : 79770233
uSNCreated                         : 31900539
whenChanged                        : 9/3/2012 12:43:37 PM
whenCreated                        : 2/23/2012 12:08:17 PM
0
 
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
Get-InboxRule "UserName" |FL

- Rancy
0
 
Gaurav SinghSolution ArchitectAuthor Commented:
No its not working,,,
0
 
Gaurav SinghSolution ArchitectAuthor Commented:
I have fixed it my self, no more errors now :-) Points are mines :-)
0
 
Gaurav SinghSolution ArchitectAuthor Commented:
I've requested that this question be closed as follows:

Accepted answer: 0 points for systechadmin's comment #a38361719

for the following reason:

None of the soultion worked for me. I fixed it myself.
0
 
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
systechadmin: Can you please share the solution so it can help people in the future if someone faces any such issues.

- Rancy
0
 
Gaurav SinghSolution ArchitectAuthor Commented:
this account needs to be mail enabled, in my infrastructure, I disable the mail box, and have account in AD, so stopped the error.  I later analyze the event that it is trying to access the Inbox rule as mention in the error.

"Exchange Control Panel detected an invalid canary from request for URL 'https://mail.test.com/ECP/RulesEditor/InboxRules.svc/GetList'."

This account is created when SCOM agent is installed, so Mailbox is not required for this.
0
 
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
I guess i had asked you to do the same to check Inbox rules as per error ... anyways good to know that its resolved.
0
 
AmitIT ArchitectCommented:
I agree to Rancy, he already asked this question. I think he deserve points for this question.
0
 
Gaurav SinghSolution ArchitectAuthor Commented:
Well, the command didn't work for me, when I tried to run the command...when I ran the command it tried to check the mailbox of my Server login account...
0
 
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
The command needs top be provided with a Mailbox or UserName .... :(
0
 
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
Yes on post http:#a38361654 .... but not wanting to fight so best if you can decide and take whatever action you feel appropriate :)

- Rancy
0
 
Gaurav SinghSolution ArchitectAuthor Commented:
Rancy, me tooo... so here we  go and close the issue.
0

Featured Post

Vote for the Most Valuable Expert

It’s time to recognize experts that go above and beyond with helpful solutions and engagement on site. Choose from the top experts in the Hall of Fame or on the right rail of your favorite topic page. Look for the blue “Nominate” button on their profile to vote.

  • 14
  • 12
  • 6
Tackle projects and never again get stuck behind a technical roadblock.
Join Now