Exchange 2013 ECP .Net error

Hi I just installed exchange 2013 on a domain controller in a test environment. OWA works, but if I try to access https://servername/ecp I get the following error:

Server Error in '/ecp' Application.
--------------------------------------------------------------------------------

NegotiateSecurityContext failed with LogonDenied
Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.

Exception Details: System.Web.HttpException: NegotiateSecurityContext failed with LogonDenied

Source Error:

An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.

Stack Trace:

[HttpException (0x80004005): NegotiateSecurityContext failed with LogonDenied]
Microsoft.Exchange.HttpProxy.ProxyRequestHandler.EndProcessRequest(IAsyncResult result) +604
System.Web.CallHandlerExecutionStep.OnAsyncHandlerCompletion(IAsyncResult ar) +210

the following is logged in the eventlog:

Event code: 3005
Event message: An unhandled exception has occurred.
Event time: 12/27/2012 11:27:39 PM
Event time (UTC): 12/28/2012 4:27:39 AM
Event ID: a77ad86febc042a78a5f903b83aa0642
Event sequence: 176
Event occurrence: 14
Event detail code: 0

Application information:
Application domain: /LM/W3SVC/1/ROOT/ecp-5-130011412568254657
Trust level: Full
Application Virtual Path: /ecp
Application Path: C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\ecp\
Machine name: ALPHA2

Process information:
Process ID: 17860
Process name: w3wp.exe
Account name: NT AUTHORITY\SYSTEM

Exception information:
Exception type: HttpException
Exception message: NegotiateSecurityContext failed with LogonDenied
at Microsoft.Exchange.HttpProxy.ProxyRequestHandler.EndProcessRequest(IAsyncResult result)
at System.Web.HttpApplication.CallHandlerExecutionStep.OnAsyncHandlerCompletion(IAsyncResult ar)

Request information:
Request URL: https://alpha2:443/ecp/
Request path: /ecp/
User host address: fe80::e103:3fb3:bff:d233C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\ecp\
User: CRYPTZ\SM_235cdaff9cfb4207a
Is authenticated: True
Authentication Type: Basic
Thread account name: NT AUTHORITY\SYSTEM

Thread information:
Thread ID: 58
Thread account name: NT AUTHORITY\SYSTEM
Is impersonating: False
Stack trace: at Microsoft.Exchange.HttpProxy.ProxyRequestHandler.EndProcessRequest(IAsyncResult result)
at System.Web.HttpApplication.CallHandlerExecutionStep.OnAsyncHandlerCompletion(IAsyncResult ar)

Custom event details:

I am unable to find anything about:NegotiateSecurityContext

any help woud be appreciated.

Baran711Asked: 2012-12-27

Who is Participating?

Baran711Author Commented: 2013-01-13

I resolved the issue myself. there was a conflicting .net application running in iis. it has set the modules runallmanagedmodulesforallrequests= true

LVL 13

Yagya ShreeCommented: 2012-12-28

Hi,

This is solved by installing “Windows Identity Foundation 3.5” on Windows Server 2012.
This can be found in Windows Features installation or easy install with Powershell: “Install-WindowsFeature”.

Please refer below post:
http://gjohansson.com/blog/2012/07/31/server-error-in-ecp-application-exchange-2013/

Baran711Author Commented: 2012-12-28

yagyashree,

i verified i already have windows identity foundation 3.5 installed. also the error in the link you provided is not the same error i am receiving

Baran711Author Commented: 2012-12-29

I just wanted to add the following. if I try to directly access the back end ecp directory I get the error below. I have another test server in a different domain and I can access the back end ecp directly. maybe this error + the error above for the front end ecp directory will help us narrow this down:

Current user: 'Administrator'
Request for URL 'https://alpha2.cryptz.com:444/ecp/default.aspx' failed with the following error:
System.NotSupportedException: GetSecurityIdentifier does not support Microsoft.Exchange.Management.ControlPanel.StandardSession
at Microsoft.Exchange.Security.Authentication.IIdentityExtensions.GetSecurityIdentifier(IIdentity identity)
at Microsoft.Exchange.Management.ControlPanel.EcpIdentity..ctor(IIdentity logonUserIdentity, String cacheKeySuffix)
at Microsoft.Exchange.Management.ControlPanel.RbacSettings..ctor(HttpContext context)
at Microsoft.Exchange.Management.ControlPanel.AuthenticationSettings..ctor(HttpContext context)
at Microsoft.Exchange.Management.ControlPanel.RbacModule.Application_PostAuthenticateRequest(Object sender, EventArgs e)
at System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
at Microsoft.Exchange.Security.Authentication.IIdentityExtensions.GetSecurityIdentifier(IIdentity identity)
at Microsoft.Exchange.Management.ControlPanel.EcpIdentity..ctor(IIdentity logonUserIdentity, String cacheKeySuffix)
at Microsoft.Exchange.Management.ControlPanel.RbacSettings..ctor(HttpContext context)
at Microsoft.Exchange.Management.ControlPanel.AuthenticationSettings..ctor(HttpContext context)
at Microsoft.Exchange.Management.ControlPanel.RbacModule.Application_PostAuthenticateRequest(Object sender, EventArgs e)
at System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)