Solved

Exchane 2016 IIS Modules cafe_exppw / exppw / kerbauth

Posted on 2016-11-15
12
39 Views
Last Modified: 2017-02-02
A new install of 2016 mailbox role in an existing 2010 exchange AD environment.  

The install didn't complete all the way and while troubleshooting kerbauth.dll errors I think I inadvertantly messed up one of the cafe_exppw or exppw module locations. If someone could list their modules that are installed for the various exchange sites or know where is is a listing that would be great.      I already tried rebuilding the Powershell, ECP, OWA, and default site IIS through powershell, but the problem persists and I am not able to access the admin panel.  

If someone could list their modules that are installed for the various exchange sites or know where is is a listing that would be great.

I already did:
rejoin PC to domain
https://support.microsoft.com/en-us/kb/2778897 -> rebuilt ecp and owa
http://www.petenetlive.com/KB/Article/0000700 -> rebuilt powershell
https://blogs.technet.microsoft.com/get-exchangehelp/2013/02/07/managing-exchange-2013-iis-virtual-directories-web-applications/ --> rebuilt EWS backend
https://social.technet.microsoft.com/Forums/exchange/en-US/eb2ca264-cf16-46a0-ad14-b756b55134ed/the-module-dll-dmicrosoftexchange-serverv14binkerbauthdll-failed-to-load-the-data-is-the?forum=exchange2010
https://thepaintedlady.net.au/2016/06/21/exchange-2016-powershell-fails-to-open-the-module-dll-eprogram-filesmicrosoftexchange-serverv15binkerbauth-dll-failed-to-load-winrm-cannot-complete-the-operation/

I am also getting errors in the event logs:

Protocol /ecp failed to process request from identity NT AUTHORITY\SYSTEM. Exception: Microsoft.Exchange.Security.Authentication.BackendRehydrationException: Rehydration failed. Reason: Source server 'NT AUTHORITY\SYSTEM' does not have token serialization permission.

I checked on that error through several links and  made sure that the exchange computer wasn't in the domain admin accts or the other admin areas.
0
Comment
Question by:Ether Net
  • 5
  • 5
12 Comments
 
LVL 42

Assisted Solution

by:Amit
Amit earned 500 total points
ID: 41890170
Best to reinstall it again with recover switch. Use this:
https://technet.microsoft.com/en-us/library/dd876880(v=exchg.160).aspx
0
 

Author Comment

by:Ether Net
ID: 41890231
I was hoping to avoid another reinstall as the /RecoverServer option fails:

  The following server roles are already installed: BridgeheadRole, ClientAccessRole, MailboxRole, UnifiedMessagingRole, FrontendTransportRole, AdminToolsRole, CafeRole.


I just need a listing of the what modules are assigned to the sites and app folders.
0
 
LVL 42

Expert Comment

by:Amit
ID: 41890281
If server in not prod, I prefer to go with fresh install or recover option.
0
Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

 

Author Comment

by:Ether Net
ID: 41890317
I would prefer to solve the problem, then just doing a wipe and reinstall.
0
 
LVL 42

Expert Comment

by:Amit
ID: 41890335
In that case, I will advise you to wait for other EE to respond to your query or give a call to MS. If you have that option available. Remember in your question, you said, you messed up few modules, clean install is the best option, in such cases. However, I agree to your point also.
0
 

Author Comment

by:Ether Net
ID: 41890769
no one has a copy of exchange 2016 to take screenshots ?
0
 

Accepted Solution

by:
Ether Net earned 0 total points
ID: 41893740
Due to time restraints, I uninstalled exchange after migrating the system mailboxes (-auditlog, -monitoring, -arbitration, et al) to a temp database in our 2010 server.


For reference here is the IIS module settings on the default install .

SERVER:
Registered but not active:
-->kerbauth
-->WSMAN
-->exppw
-->cafe_exppw

Active:
none

Default Web Site:
Registerd but not active:
-->kerbauth
-->WSMAN
-->exppw

Default Web Site\Powershell:
Registerd but not active:
-->WSMAN
-->exppw

Active:
-->exppw

Exchange Back End:
Registerd but not active:
-->kerbauth
-->WSMAN
-->exppw
-->cafe_exppw

Active:
none

Exchange Back End\ECP:
Registerd but not active:
-->kerbauth
-->WSMAN
-->exppw
-->cafe_exppw

Active:
none

Exchange Back End\EWS:
Registerd but not active:
-->kerbauth
-->WSMAN
-->exppw
-->cafe_exppw

Active:
none

Exchange Back End\Powershell:
Registerd but not active:
-->kerbauth
-->exppw
-->cafe_exppw

Active:
-->WSMAN
0
 
LVL 42

Expert Comment

by:Amit
ID: 41894464
i deserve points, as you followed my suggestion at the end.
0
 

Author Comment

by:Ether Net
ID: 41897851
The solution to reinstall with the /recovery switch did not resolve my issue as the /recovery did not work as I stated in comment https://www.experts-exchange.com/questions/28983357/Exchane-2016-IIS-Modules-cafe-exppw-exppw-kerbauth.html#a41890231 
a new os and new install from scratch after moving the mailboxes .
0
 
LVL 42

Expert Comment

by:Amit
ID: 41897880
If you read my 3rd post. I mentioned fresh install.

If server in not prod, I prefer to go with fresh install or recover option.

https://www.experts-exchange.com/questions/28983357/Exchane-2016-IIS-Modules-cafe-exppw-exppw-kerbauth.html#a41890281
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Scam emails are a huge burden for many businesses. Spotting one is not always easy. Follow our tips to identify if an email you receive is a scam.
A phishing scam that claims a recipient’s credit card details have been “suspended” is the latest trend in spoof emails.
In this Micro Tutorial viewers will learn how they can get their files copied out from their unbootable system without need to use recovery services. As an example non-bootable Windows 2012R2 installation is used which has boot problems.
This video discusses moving either the default database or any database to a new volume.

813 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now