Exchange 2010 SP1 Activesync & OWA Authentication - Intermittent Problem

Posted on 2012-09-12
Last Modified: 2012-10-19
About 2 weeks ago, we started having problems with Our Exchange 2010 (SP1, RU6) server in that ActiveSync and OWA stop working. What happens is that all of the sudden, users get an 'invalid password' message on their ActiveSync device and can no longer receive/send any new mail. Likewise, when this starts happening, OWA exhibits similar matter what account you try to login to OWA with, it comes back and says invalid credentials. I suspect that Outlook Anywhere (RPC over HTTPS) is also affected, although I have not received complaints directly on this.

Rebooting the server instantly fixes the problem for anywhere from 1-3 days and then the problem comes back. It's obviously related to IIS as internal MAPI communications and SMTP continue to work just fine the entire time.

No updates have been applied to the server that correspond to when the problem started happening.

I'm pulling my hair out on this one though. Any suggestions/ideas would be greatly apprecaited!
Question by:rdevitis
    LVL 20

    Expert Comment

    I wonder if it is a problem with your certificate.   Do you have the trusted root installed on the server?

    User: to see if there are any warnings
    LVL 1

    Expert Comment

    When it stops working, I suggest you go at: and test it out. The output will help you troubleshoot where it fails during the whole process.

    Author Comment

    EndureKona: The certificate is valid and the root/intermediates are all in place. I have double-checked that. Everything works fine for 1-3 days at a time and then all of the sudden, it stops until reboot.

    fred9777: I tried that the last time it happened and it basically just came back and said that the account credentials were invalid (similar to what it was saying on the device or the OWA interface).

    It sounds like an issue between IIS and the DC with authentication, but I'm at a loss beyond that theory.
    LVL 1

    Accepted Solution

    Make sure you have BASIC authentication set in IIS.

    This link helps you reset Exchange Virtual Directories for client access:

    Featured Post

    Threat Intelligence Starter Resources

    Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

    Join & Write a Comment

    Create high volume marketing opportunities using email signatures with these top 10 DOs and DON'Ts of email signature marketing.
    Check out this infographic on what you need to make a good email signature that will work perfectly for your organization.
    To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…
    The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…

    745 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    14 Experts available now in Live!

    Get 1:1 Help Now