Solved

Exchane 2016 IIS Modules cafe_exppw / exppw / kerbauth

Posted on 2016-11-15
12
88 Views
Last Modified: 2017-02-02
A new install of 2016 mailbox role in an existing 2010 exchange AD environment.  

The install didn't complete all the way and while troubleshooting kerbauth.dll errors I think I inadvertantly messed up one of the cafe_exppw or exppw module locations. If someone could list their modules that are installed for the various exchange sites or know where is is a listing that would be great.      I already tried rebuilding the Powershell, ECP, OWA, and default site IIS through powershell, but the problem persists and I am not able to access the admin panel.  

If someone could list their modules that are installed for the various exchange sites or know where is is a listing that would be great.

I already did:
rejoin PC to domain
https://support.microsoft.com/en-us/kb/2778897 -> rebuilt ecp and owa
http://www.petenetlive.com/KB/Article/0000700 -> rebuilt powershell
https://blogs.technet.microsoft.com/get-exchangehelp/2013/02/07/managing-exchange-2013-iis-virtual-directories-web-applications/ --> rebuilt EWS backend
https://social.technet.microsoft.com/Forums/exchange/en-US/eb2ca264-cf16-46a0-ad14-b756b55134ed/the-module-dll-dmicrosoftexchange-serverv14binkerbauthdll-failed-to-load-the-data-is-the?forum=exchange2010
https://thepaintedlady.net.au/2016/06/21/exchange-2016-powershell-fails-to-open-the-module-dll-eprogram-filesmicrosoftexchange-serverv15binkerbauth-dll-failed-to-load-winrm-cannot-complete-the-operation/

I am also getting errors in the event logs:

Protocol /ecp failed to process request from identity NT AUTHORITY\SYSTEM. Exception: Microsoft.Exchange.Security.Authentication.BackendRehydrationException: Rehydration failed. Reason: Source server 'NT AUTHORITY\SYSTEM' does not have token serialization permission.

I checked on that error through several links and  made sure that the exchange computer wasn't in the domain admin accts or the other admin areas.
0
Comment
Question by:Ether Net
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 5
12 Comments
 
LVL 43

Assisted Solution

by:Amit
Amit earned 500 total points
ID: 41890170
Best to reinstall it again with recover switch. Use this:
https://technet.microsoft.com/en-us/library/dd876880(v=exchg.160).aspx
0
 

Author Comment

by:Ether Net
ID: 41890231
I was hoping to avoid another reinstall as the /RecoverServer option fails:

  The following server roles are already installed: BridgeheadRole, ClientAccessRole, MailboxRole, UnifiedMessagingRole, FrontendTransportRole, AdminToolsRole, CafeRole.


I just need a listing of the what modules are assigned to the sites and app folders.
0
 
LVL 43

Expert Comment

by:Amit
ID: 41890281
If server in not prod, I prefer to go with fresh install or recover option.
0
MIM Survival Guide for Service Desk Managers

Major incidents can send mastered service desk processes into disorder. Systems and tools produce the data needed to resolve these incidents, but your challenge is getting that information to the right people fast. Check out the Survival Guide and begin bringing order to chaos.

 

Author Comment

by:Ether Net
ID: 41890317
I would prefer to solve the problem, then just doing a wipe and reinstall.
0
 
LVL 43

Expert Comment

by:Amit
ID: 41890335
In that case, I will advise you to wait for other EE to respond to your query or give a call to MS. If you have that option available. Remember in your question, you said, you messed up few modules, clean install is the best option, in such cases. However, I agree to your point also.
0
 

Author Comment

by:Ether Net
ID: 41890769
no one has a copy of exchange 2016 to take screenshots ?
0
 

Accepted Solution

by:
Ether Net earned 0 total points
ID: 41893740
Due to time restraints, I uninstalled exchange after migrating the system mailboxes (-auditlog, -monitoring, -arbitration, et al) to a temp database in our 2010 server.


For reference here is the IIS module settings on the default install .

SERVER:
Registered but not active:
-->kerbauth
-->WSMAN
-->exppw
-->cafe_exppw

Active:
none

Default Web Site:
Registerd but not active:
-->kerbauth
-->WSMAN
-->exppw

Default Web Site\Powershell:
Registerd but not active:
-->WSMAN
-->exppw

Active:
-->exppw

Exchange Back End:
Registerd but not active:
-->kerbauth
-->WSMAN
-->exppw
-->cafe_exppw

Active:
none

Exchange Back End\ECP:
Registerd but not active:
-->kerbauth
-->WSMAN
-->exppw
-->cafe_exppw

Active:
none

Exchange Back End\EWS:
Registerd but not active:
-->kerbauth
-->WSMAN
-->exppw
-->cafe_exppw

Active:
none

Exchange Back End\Powershell:
Registerd but not active:
-->kerbauth
-->exppw
-->cafe_exppw

Active:
-->WSMAN
0
 
LVL 43

Expert Comment

by:Amit
ID: 41894464
i deserve points, as you followed my suggestion at the end.
0
 

Author Comment

by:Ether Net
ID: 41897851
The solution to reinstall with the /recovery switch did not resolve my issue as the /recovery did not work as I stated in comment https://www.experts-exchange.com/questions/28983357/Exchane-2016-IIS-Modules-cafe-exppw-exppw-kerbauth.html#a41890231 
a new os and new install from scratch after moving the mailboxes .
0
 
LVL 43

Expert Comment

by:Amit
ID: 41897880
If you read my 3rd post. I mentioned fresh install.

If server in not prod, I prefer to go with fresh install or recover option.

https://www.experts-exchange.com/questions/28983357/Exchane-2016-IIS-Modules-cafe-exppw-exppw-kerbauth.html#a41890281
0

Featured Post

Creating Instructional Tutorials  

For Any Use & On Any Platform

Contextual Guidance at the moment of need helps your employees/users adopt software o& achieve even the most complex tasks instantly. Boost knowledge retention, software adoption & employee engagement with easy solution.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A quick Powershell script I wrote to find old program installations and check versions of a specific file across the network.
Recently we ran in to an issue while running some SQL jobs where we were trying to process the cubes.  We got an error saying failure stating 'NT SERVICE\SQLSERVERAGENT does not have access to Analysis Services. So this is a way to automate that wit…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question