Solved

Exchane 2016 IIS Modules cafe_exppw / exppw / kerbauth

Posted on 2016-11-15
  • Powershell
  • Exchange 2016
  • OWA
  • Microsoft IIS Web Server
  • Windows 2012
  • +1
12
22 Views
Last Modified: 2016-11-22
A new install of 2016 mailbox role in an existing 2010 exchange AD environment.  

The install didn't complete all the way and while troubleshooting kerbauth.dll errors I think I inadvertantly messed up one of the cafe_exppw or exppw module locations. If someone could list their modules that are installed for the various exchange sites or know where is is a listing that would be great.      I already tried rebuilding the Powershell, ECP, OWA, and default site IIS through powershell, but the problem persists and I am not able to access the admin panel.  

If someone could list their modules that are installed for the various exchange sites or know where is is a listing that would be great.

I already did:
rejoin PC to domain
https://support.microsoft.com/en-us/kb/2778897 -> rebuilt ecp and owa
http://www.petenetlive.com/KB/Article/0000700 -> rebuilt powershell
https://blogs.technet.microsoft.com/get-exchangehelp/2013/02/07/managing-exchange-2013-iis-virtual-directories-web-applications/ --> rebuilt EWS backend
https://social.technet.microsoft.com/Forums/exchange/en-US/eb2ca264-cf16-46a0-ad14-b756b55134ed/the-module-dll-dmicrosoftexchange-serverv14binkerbauthdll-failed-to-load-the-data-is-the?forum=exchange2010
https://thepaintedlady.net.au/2016/06/21/exchange-2016-powershell-fails-to-open-the-module-dll-eprogram-filesmicrosoftexchange-serverv15binkerbauth-dll-failed-to-load-winrm-cannot-complete-the-operation/

I am also getting errors in the event logs:

Protocol /ecp failed to process request from identity NT AUTHORITY\SYSTEM. Exception: Microsoft.Exchange.Security.Authentication.BackendRehydrationException: Rehydration failed. Reason: Source server 'NT AUTHORITY\SYSTEM' does not have token serialization permission.

I checked on that error through several links and  made sure that the exchange computer wasn't in the domain admin accts or the other admin areas.
0
Comment
Question by:Ether Net
  • 5
  • 5
12 Comments
 
LVL 41

Assisted Solution

by:Amit
Amit earned 500 total points
Comment Utility
Best to reinstall it again with recover switch. Use this:
https://technet.microsoft.com/en-us/library/dd876880(v=exchg.160).aspx
0
 

Author Comment

by:Ether Net
Comment Utility
I was hoping to avoid another reinstall as the /RecoverServer option fails:

  The following server roles are already installed: BridgeheadRole, ClientAccessRole, MailboxRole, UnifiedMessagingRole, FrontendTransportRole, AdminToolsRole, CafeRole.


I just need a listing of the what modules are assigned to the sites and app folders.
0
 
LVL 41

Expert Comment

by:Amit
Comment Utility
If server in not prod, I prefer to go with fresh install or recover option.
0
 

Author Comment

by:Ether Net
Comment Utility
I would prefer to solve the problem, then just doing a wipe and reinstall.
0
 
LVL 41

Expert Comment

by:Amit
Comment Utility
In that case, I will advise you to wait for other EE to respond to your query or give a call to MS. If you have that option available. Remember in your question, you said, you messed up few modules, clean install is the best option, in such cases. However, I agree to your point also.
0
Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

 

Author Comment

by:Ether Net
Comment Utility
no one has a copy of exchange 2016 to take screenshots ?
0
 

Accepted Solution

by:
Ether Net earned 0 total points
Comment Utility
Due to time restraints, I uninstalled exchange after migrating the system mailboxes (-auditlog, -monitoring, -arbitration, et al) to a temp database in our 2010 server.


For reference here is the IIS module settings on the default install .

SERVER:
Registered but not active:
-->kerbauth
-->WSMAN
-->exppw
-->cafe_exppw

Active:
none

Default Web Site:
Registerd but not active:
-->kerbauth
-->WSMAN
-->exppw

Default Web Site\Powershell:
Registerd but not active:
-->WSMAN
-->exppw

Active:
-->exppw

Exchange Back End:
Registerd but not active:
-->kerbauth
-->WSMAN
-->exppw
-->cafe_exppw

Active:
none

Exchange Back End\ECP:
Registerd but not active:
-->kerbauth
-->WSMAN
-->exppw
-->cafe_exppw

Active:
none

Exchange Back End\EWS:
Registerd but not active:
-->kerbauth
-->WSMAN
-->exppw
-->cafe_exppw

Active:
none

Exchange Back End\Powershell:
Registerd but not active:
-->kerbauth
-->exppw
-->cafe_exppw

Active:
-->WSMAN
0
 
LVL 41

Expert Comment

by:Amit
Comment Utility
i deserve points, as you followed my suggestion at the end.
0
 

Author Comment

by:Ether Net
Comment Utility
The solution to reinstall with the /recovery switch did not resolve my issue as the /recovery did not work as I stated in comment https://www.experts-exchange.com/questions/28983357/Exchane-2016-IIS-Modules-cafe-exppw-exppw-kerbauth.html#a41890231
a new os and new install from scratch after moving the mailboxes .
0
 
LVL 41

Expert Comment

by:Amit
Comment Utility
If you read my 3rd post. I mentioned fresh install.

If server in not prod, I prefer to go with fresh install or recover option.

https://www.experts-exchange.com/questions/28983357/Exchane-2016-IIS-Modules-cafe-exppw-exppw-kerbauth.html#a41890281
0

Featured Post

Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

Join & Write a Comment

Utilizing an array to gracefully append to a list of EmailAddresses
Local Continuous Replication is a cost effective and quick way of backing up Exchange server data. The following article describes the steps required to configure Local Continuous Replication. Also, the article tells you how to restore from a backup…
In this video we show how to create a Distribution Group in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >>…
In this video we show how to create an Address List in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Organization >> Ad…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

6 Experts available now in Live!

Get 1:1 Help Now