ecp login error

I am running exchange 2013 with CU7.  All of a sudden, I noticed today that when trying to log in, I get the following error:
"The user name or password you entered isn't correct.  Try entering it again"

I know I am typing the correct information because it's saved and I deleted the saved info and typed it manually again.
I even tried a different account, same problem.  I even had a coworker login and he is getting the same error message again.

What's strange is that, about 30 minutes later, it just started working by itself, when I tried to log in, it worked, now about 3 hours later, it stopped working, I'm getting the same error message.

Does anyone know what is going on?  I looked at the app and system logs, but I don't see anything that could have caused it.
Can anyone point me in the right direction?  
Any thoughts?exchange login error
DanNetwork EngineerAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Will SzymkowskiSenior Solution ArchitectCommented:
Has someone updated or changed the EAC and OWA authenticate or URL's? Do you have your CAS behind a load balancer? If you do, maybe the configuration differs from both of them.

I would also check your IIS logs as well to make sure that nothing has been changed. Also ensure that your services have not stopped and restarted.

In order for something like this to happen something definitely has changed, or stopped working intermittently.

DanNetwork EngineerAuthor Commented:
I only have one physical exchange server.  I'm not even sure if I have a load balancer or not.

The last configuration change I made was in IIS last week.  When people would go to it wouldn't redirect to the https website, so in IIS, under the default website, I just changed the ssl settings to not "require SSL", and for the default website, I do the "redirect requests to this destination" option.  Then under the different sections, (ecp, ews, oab, owa, etc..., the redirect on all of them is off).

I doubt that this change would have caused that because that's how it was when I went from Cu3 to CU7.

I'm the only exchange admin, so I'm the only one making changes to it, so there's no other changes that I know of.
Will SzymkowskiSenior Solution ArchitectCommented:
When this issue happens again check those logs and services to ensure they are working properly. Just another word of advice do NOT make changes on exchange virtual directories through IIS. You said you were change configuration and redirection of pages it is very possible that something is messed with IIS.

This is where the login page is presented from. Keep an eye on IIS.


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Determine the Perfect Price for Your IT Services

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden with our free interactive tool and use it to determine the right price for your IT services. Download your free eBook now!

Md. MojahidCommented:
1. restart iis
2. reset account password
3. change keyboard
DanNetwork EngineerAuthor Commented:
Mojahid,  it's not the account, as I stated, I am not locked out and I used 2 different accounts.
The keyboard is fine, because earlier in the day It worked and then later it didn't and by the end of the day, it worked fine as well.  

I will restart the server though.
DanNetwork EngineerAuthor Commented:
I'll look at all the services and logs again when it happens again.
DanNetwork EngineerAuthor Commented:
It just happened again, all the Microsoft Exchange services are running.

In system log, I see this error:
A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 10. The Windows SChannel error state is 1203.
In application log, I see this error:

The Microsoft Exchange Replication service VSS Writer (Instance 7fa8d829-5b3c-4db5-b043-824756c30ec1) failed with error 80070020 when preparing for a backup.

I doubt these have anything to do with it though.
DanNetwork EngineerAuthor Commented:
Does anyone have any idea what's causing this issue?
DanNetwork EngineerAuthor Commented:
Thanks Will.

The changes I made in IIS are under the default website, and then under HTTP redirect.

How do you change the virtual directory settings in IIS, as I'm not even sure how that's possible?
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.