Solved

Exchane 2016 IIS Modules cafe_exppw / exppw / kerbauth

Posted on 2016-11-15
12
72 Views
Last Modified: 2017-02-02
A new install of 2016 mailbox role in an existing 2010 exchange AD environment.  

The install didn't complete all the way and while troubleshooting kerbauth.dll errors I think I inadvertantly messed up one of the cafe_exppw or exppw module locations. If someone could list their modules that are installed for the various exchange sites or know where is is a listing that would be great.      I already tried rebuilding the Powershell, ECP, OWA, and default site IIS through powershell, but the problem persists and I am not able to access the admin panel.  

If someone could list their modules that are installed for the various exchange sites or know where is is a listing that would be great.

I already did:
rejoin PC to domain
https://support.microsoft.com/en-us/kb/2778897 -> rebuilt ecp and owa
http://www.petenetlive.com/KB/Article/0000700 -> rebuilt powershell
https://blogs.technet.microsoft.com/get-exchangehelp/2013/02/07/managing-exchange-2013-iis-virtual-directories-web-applications/ --> rebuilt EWS backend
https://social.technet.microsoft.com/Forums/exchange/en-US/eb2ca264-cf16-46a0-ad14-b756b55134ed/the-module-dll-dmicrosoftexchange-serverv14binkerbauthdll-failed-to-load-the-data-is-the?forum=exchange2010
https://thepaintedlady.net.au/2016/06/21/exchange-2016-powershell-fails-to-open-the-module-dll-eprogram-filesmicrosoftexchange-serverv15binkerbauth-dll-failed-to-load-winrm-cannot-complete-the-operation/

I am also getting errors in the event logs:

Protocol /ecp failed to process request from identity NT AUTHORITY\SYSTEM. Exception: Microsoft.Exchange.Security.Authentication.BackendRehydrationException: Rehydration failed. Reason: Source server 'NT AUTHORITY\SYSTEM' does not have token serialization permission.

I checked on that error through several links and  made sure that the exchange computer wasn't in the domain admin accts or the other admin areas.
0
Comment
Question by:Ether Net
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 5
12 Comments
 
LVL 43

Assisted Solution

by:Amit
Amit earned 500 total points
ID: 41890170
Best to reinstall it again with recover switch. Use this:
https://technet.microsoft.com/en-us/library/dd876880(v=exchg.160).aspx
0
 

Author Comment

by:Ether Net
ID: 41890231
I was hoping to avoid another reinstall as the /RecoverServer option fails:

  The following server roles are already installed: BridgeheadRole, ClientAccessRole, MailboxRole, UnifiedMessagingRole, FrontendTransportRole, AdminToolsRole, CafeRole.


I just need a listing of the what modules are assigned to the sites and app folders.
0
 
LVL 43

Expert Comment

by:Amit
ID: 41890281
If server in not prod, I prefer to go with fresh install or recover option.
0
Free Webinar: AWS Backup & DR

Join our upcoming webinar with experts from AWS, CloudBerry Lab, and the Town of Edgartown IT to discuss best practices for simplifying online backup management and cutting costs.

 

Author Comment

by:Ether Net
ID: 41890317
I would prefer to solve the problem, then just doing a wipe and reinstall.
0
 
LVL 43

Expert Comment

by:Amit
ID: 41890335
In that case, I will advise you to wait for other EE to respond to your query or give a call to MS. If you have that option available. Remember in your question, you said, you messed up few modules, clean install is the best option, in such cases. However, I agree to your point also.
0
 

Author Comment

by:Ether Net
ID: 41890769
no one has a copy of exchange 2016 to take screenshots ?
0
 

Accepted Solution

by:
Ether Net earned 0 total points
ID: 41893740
Due to time restraints, I uninstalled exchange after migrating the system mailboxes (-auditlog, -monitoring, -arbitration, et al) to a temp database in our 2010 server.


For reference here is the IIS module settings on the default install .

SERVER:
Registered but not active:
-->kerbauth
-->WSMAN
-->exppw
-->cafe_exppw

Active:
none

Default Web Site:
Registerd but not active:
-->kerbauth
-->WSMAN
-->exppw

Default Web Site\Powershell:
Registerd but not active:
-->WSMAN
-->exppw

Active:
-->exppw

Exchange Back End:
Registerd but not active:
-->kerbauth
-->WSMAN
-->exppw
-->cafe_exppw

Active:
none

Exchange Back End\ECP:
Registerd but not active:
-->kerbauth
-->WSMAN
-->exppw
-->cafe_exppw

Active:
none

Exchange Back End\EWS:
Registerd but not active:
-->kerbauth
-->WSMAN
-->exppw
-->cafe_exppw

Active:
none

Exchange Back End\Powershell:
Registerd but not active:
-->kerbauth
-->exppw
-->cafe_exppw

Active:
-->WSMAN
0
 
LVL 43

Expert Comment

by:Amit
ID: 41894464
i deserve points, as you followed my suggestion at the end.
0
 

Author Comment

by:Ether Net
ID: 41897851
The solution to reinstall with the /recovery switch did not resolve my issue as the /recovery did not work as I stated in comment https://www.experts-exchange.com/questions/28983357/Exchane-2016-IIS-Modules-cafe-exppw-exppw-kerbauth.html#a41890231 
a new os and new install from scratch after moving the mailboxes .
0
 
LVL 43

Expert Comment

by:Amit
ID: 41897880
If you read my 3rd post. I mentioned fresh install.

If server in not prod, I prefer to go with fresh install or recover option.

https://www.experts-exchange.com/questions/28983357/Exchane-2016-IIS-Modules-cafe-exppw-exppw-kerbauth.html#a41890281
0

Featured Post

Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you are a web developer, you would be aware of the <iframe> tag in HTML. The <iframe> stands for inline frame and is used to embed another document within the current HTML document. The embedded document could be even another website.
This article aims to explain the working of CircularLogArchiver. This tool was designed to solve the buildup of log file in cases where systems do not support circular logging or where circular logging is not enabled
In this Micro Tutorial viewers will learn how to restore single file or folder from Bare Metal backup image of their system. Tutorial shows how to restore files and folders from system backup. Often it is not needed to restore entire system when onl…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question