IIS 7 Log Interpretation

Posted on 2012-09-19
Last Modified: 2012-11-05
I'm troubleshooting access to an Exchange Web Services page on an Exchange 2010 Client Access Server.  I have a second CAS server available for comparison.  When I browse to, I'm prompted for credentials.  If I provide bona fide credentials, the prompt simply reappears.  After 3 tries, I get a blank page.  The IIS log shows:

{date/time} GET /EWS/Services.wsdl - 80 - ... is a Load Balancer, which is why the request comes in on port 80; we're using SSL offloading.  The end of that line in the log file shows 401 1 2148074254 0, an authorization error.

Comparatively, when I browse to, I get the XML content I'm hoping for.  The IIS log on that server shows:

{date/time} GET /EWS/Services.wsdl - 80 domain\username

The key difference is obviously the successful passing of credentials in the second case, but I don't know why it's happening on that server and not the first server.  I feel like I've configured the virtual directories on the two servers identically, including authentication (Anonymous, Basic, Windows).  Note that I'm not actually prompted for credentials with the second server.  Honestly, I'm not sure how the credentials are getting there!

What additional information can I provide to help you help me get to the bottom of this?  My goal is to get that first server behaving more like the second one, with the ultimate goal of allowing successful Blackberry Internet Service connections to the server.  Right now BB users aren't able to pick up mail from this server, and I'm guessing this EWS authentication problem is key.

Question by:StrataDecisionIT
    LVL 10

    Expert Comment


    Could you please check both the servers windows update are same

    as well as have you install any service packs for both the exchange server.

    Author Comment


    Both Exchange servers are at SP1.

    I see there is a large difference between the two servers in terms of hotfixes.  In general Server1 has far more hotfixes installed than Server2.

    Are you aware of a particular hotfix that could explain the difference in behavior between these two servers?


    Accepted Solution

    We've decided to try to circumvent this problem by implementing split-brain DNS.

    Author Closing Comment

    We elected to work around the stated problem rather than resolve it directly.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    IT, Stop Being Called Into Every Meeting

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    Suggested Solutions

    Set up iPhone and iPad email signatures to always send in high-quality HTML with this step-by step guide.
    Use these top 10 tips to master the art of email signature design. Create an email signature design that will easily wow recipients, promote your brand and highlight your professionalism.
    In this video we show how to create an Address List in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Organization >> Ad…
    The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    22 Experts available now in Live!

    Get 1:1 Help Now