?
Solved

Exchane 2016 IIS Modules cafe_exppw / exppw / kerbauth

Posted on 2016-11-15
12
Medium Priority
?
102 Views
Last Modified: 2017-02-02
A new install of 2016 mailbox role in an existing 2010 exchange AD environment.  

The install didn't complete all the way and while troubleshooting kerbauth.dll errors I think I inadvertantly messed up one of the cafe_exppw or exppw module locations. If someone could list their modules that are installed for the various exchange sites or know where is is a listing that would be great.      I already tried rebuilding the Powershell, ECP, OWA, and default site IIS through powershell, but the problem persists and I am not able to access the admin panel.  

If someone could list their modules that are installed for the various exchange sites or know where is is a listing that would be great.

I already did:
rejoin PC to domain
https://support.microsoft.com/en-us/kb/2778897 -> rebuilt ecp and owa
http://www.petenetlive.com/KB/Article/0000700 -> rebuilt powershell
https://blogs.technet.microsoft.com/get-exchangehelp/2013/02/07/managing-exchange-2013-iis-virtual-directories-web-applications/ --> rebuilt EWS backend
https://social.technet.microsoft.com/Forums/exchange/en-US/eb2ca264-cf16-46a0-ad14-b756b55134ed/the-module-dll-dmicrosoftexchange-serverv14binkerbauthdll-failed-to-load-the-data-is-the?forum=exchange2010
https://thepaintedlady.net.au/2016/06/21/exchange-2016-powershell-fails-to-open-the-module-dll-eprogram-filesmicrosoftexchange-serverv15binkerbauth-dll-failed-to-load-winrm-cannot-complete-the-operation/

I am also getting errors in the event logs:

Protocol /ecp failed to process request from identity NT AUTHORITY\SYSTEM. Exception: Microsoft.Exchange.Security.Authentication.BackendRehydrationException: Rehydration failed. Reason: Source server 'NT AUTHORITY\SYSTEM' does not have token serialization permission.

I checked on that error through several links and  made sure that the exchange computer wasn't in the domain admin accts or the other admin areas.
0
Comment
Question by:Ether Net
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 5
12 Comments
 
LVL 44

Assisted Solution

by:Amit
Amit earned 2000 total points
ID: 41890170
Best to reinstall it again with recover switch. Use this:
https://technet.microsoft.com/en-us/library/dd876880(v=exchg.160).aspx
0
 

Author Comment

by:Ether Net
ID: 41890231
I was hoping to avoid another reinstall as the /RecoverServer option fails:

  The following server roles are already installed: BridgeheadRole, ClientAccessRole, MailboxRole, UnifiedMessagingRole, FrontendTransportRole, AdminToolsRole, CafeRole.


I just need a listing of the what modules are assigned to the sites and app folders.
0
 
LVL 44

Expert Comment

by:Amit
ID: 41890281
If server in not prod, I prefer to go with fresh install or recover option.
0
Ransomware Attacks Keeping You Up at Night?

Will your organization be ransomware's next victim?  The good news is that these attacks are predicable and therefore preventable. Learn more about how you can  stop a ransomware attacks before encryption takes place with our Ransomware Prevention Kit!

 

Author Comment

by:Ether Net
ID: 41890317
I would prefer to solve the problem, then just doing a wipe and reinstall.
0
 
LVL 44

Expert Comment

by:Amit
ID: 41890335
In that case, I will advise you to wait for other EE to respond to your query or give a call to MS. If you have that option available. Remember in your question, you said, you messed up few modules, clean install is the best option, in such cases. However, I agree to your point also.
0
 

Author Comment

by:Ether Net
ID: 41890769
no one has a copy of exchange 2016 to take screenshots ?
0
 

Accepted Solution

by:
Ether Net earned 0 total points
ID: 41893740
Due to time restraints, I uninstalled exchange after migrating the system mailboxes (-auditlog, -monitoring, -arbitration, et al) to a temp database in our 2010 server.


For reference here is the IIS module settings on the default install .

SERVER:
Registered but not active:
-->kerbauth
-->WSMAN
-->exppw
-->cafe_exppw

Active:
none

Default Web Site:
Registerd but not active:
-->kerbauth
-->WSMAN
-->exppw

Default Web Site\Powershell:
Registerd but not active:
-->WSMAN
-->exppw

Active:
-->exppw

Exchange Back End:
Registerd but not active:
-->kerbauth
-->WSMAN
-->exppw
-->cafe_exppw

Active:
none

Exchange Back End\ECP:
Registerd but not active:
-->kerbauth
-->WSMAN
-->exppw
-->cafe_exppw

Active:
none

Exchange Back End\EWS:
Registerd but not active:
-->kerbauth
-->WSMAN
-->exppw
-->cafe_exppw

Active:
none

Exchange Back End\Powershell:
Registerd but not active:
-->kerbauth
-->exppw
-->cafe_exppw

Active:
-->WSMAN
0
 
LVL 44

Expert Comment

by:Amit
ID: 41894464
i deserve points, as you followed my suggestion at the end.
0
 

Author Comment

by:Ether Net
ID: 41897851
The solution to reinstall with the /recovery switch did not resolve my issue as the /recovery did not work as I stated in comment https://www.experts-exchange.com/questions/28983357/Exchane-2016-IIS-Modules-cafe-exppw-exppw-kerbauth.html#a41890231 
a new os and new install from scratch after moving the mailboxes .
0
 
LVL 44

Expert Comment

by:Amit
ID: 41897880
If you read my 3rd post. I mentioned fresh install.

If server in not prod, I prefer to go with fresh install or recover option.

https://www.experts-exchange.com/questions/28983357/Exchane-2016-IIS-Modules-cafe-exppw-exppw-kerbauth.html#a41890281
0

Featured Post

Get proactive database performance tuning online

At Percona’s web store you can order full Percona Database Performance Audit in minutes. Find out the health of your database, and how to improve it. Pay online with a credit card. Improve your database performance now!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Unified and professional email signatures help maintain a consistent company brand image to the outside world. This article shows how to create an email signature in Exchange Server 2010 using a transport rule and how to overcome native limitations …
Check out this step-by-step guide for using the newly updated Experts Exchange mobile app—released on May 30.
This tutorial will walk an individual through the process of configuring basic necessities in order to use the 2010 version of Data Protection Manager. These include storage, agents, and protection jobs. Launch Data Protection Manager from the deskt…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Suggested Courses

800 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question