Exchange 2013 - Office 365 Hybrid - Free Busy from On Premises to Online causing MS Exchange Availability 4001 Error

Hi

As the title says, I have an Exchange 2013 server configured for Office 365 in Hybrid mode.

When interrogating Free Busy information of an online mailbox via an on premises Outlook client, I get the following Error on the Exchange 2013 server.

Process Microsoft.Exchange.InfoWorker.Common.Delayed`1[System.String]: <.mail.onmicrosoft.com>SMTP:taccount-1@<mydomain>.mail.onmicrosoft.com">taccount-1@<mydomain>.mail.onmicrosoft.com>SMTP:taccount-1@<mydomain>.mail.onmicrosoft.com with error System.Net.WebException: The request failed with HTTP status 401: Unauthorized.
   at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall)
   at System.Web.Services.Protocols.SoapHttpClientProtocol.EndInvoke(IAsyncResult asyncResult)
   at Microsoft.Exchange.SoapWebClient.AutoDiscover.DefaultBinding_Autodiscover.EndGetUserSettings(IAsyncResult asyncResult)
   at Microsoft.Exchange.InfoWorker.Common.Availability.UserSoapAutoDiscoverRequest.EndGetSettings(IAsyncResult asyncResult)
   at Microsoft.Exchange.InfoWorker.Common.Availability.SoapAutoDiscoverRequest.<>c__DisplayClass4.<EndInvoke>b__3()
   at Microsoft.Exchange.InfoWorker.Common.Availability.SoapAutoDiscoverRequest.ExecuteAndHandleException(ExecuteAndHandleExceptionDelegate operation). ---> System.Net.WebException: The request failed with HTTP status 401: Unauthorized.
   at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall)
   at System.Web.Services.Protocols.SoapHttpClientProtocol.EndInvoke(IAsyncResult asyncResult)
   at Microsoft.Exchange.SoapWebClient.AutoDiscover.DefaultBinding_Autodiscover.EndGetUserSettings(IAsyncResult asyncResult)
   at Microsoft.Exchange.InfoWorker.Common.Availability.UserSoapAutoDiscoverRequest.EndGetSettings(IAsyncResult asyncResult)
   at Microsoft.Exchange.InfoWorker.Common.Availability.SoapAutoDiscoverRequest.<>c__DisplayClass4.<EndInvoke>b__3()
   at Microsoft.Exchange.InfoWorker.Common.Availability.SoapAutoDiscoverRequest.ExecuteAndHandleException(ExecuteAndHandleExceptionDelegate operation)
   --- End of inner exception stack trace ---
. Name of the server where exception originated: EXSERVER-2. This event may occur when the Mailtips application cannot discover a corresponding application in the remote forest.

I have tried everything. All federation and organization tests work as expected. They show the tokens being requested and successfully delivered to and from the on premises and online endpoints. In short, I'm almost completely sure I have the hybrid mode configured correctly - as every thing else (all mail flow etc.) works. But what is causing this error message and stopping free/busy information in one direction?

All help much appreciated.

Andrew
June 19th, 2015 2:34pm
I'd open a support ticket with Online Support.  MS Online is telling your server that it isn't authorized to do this, so it appears to be something wrong on their end.
Free Windows Admin Tool Kit Click here and download it now
June 19th, 2015 7:28pm

Hi,

According to the event ID 4001, it indicate that when Autodiscover service could not discover the Exchange Availability service that is running in a remote Active Directory directory service forest.

Heres an similar thread about your issue, for your convenience:
https://community.office365.com/en-us/f/158/t/726
set the ImmutableID property on all users in the cloud and on-prem

Thanks

June 23rd, 2015 8:28am

Thanks for you suggestions.

I logged a call with MS but they can not explain the problem.

They spent over five hours on a remote session and a member of their hybrid support team tried everything to resolve it. Every setting they looked at was correct and every test was successful. In the end they suggested that I log another call with the Exchange on-premises support team as they are adamant it must be a CAS server issue somewhere.

I haven't done that yet as I'm not so sure. I'm really stumped at this point. C

Can anybody shed any more light on this?

Free Windows Admin Tool Kit Click here and download it now
June 29th, 2015 8:42am

Some further info:

In addition, in the c:/inetpub logs on the CAS server, you also see the following error at exactly the same time as the MSExchange Availability 4001 error in the application log:

2015-06-30 08:45:56 172.17.1.51 POST /ews/exchange.asmx ,MailTipsStart=2015-06-30T08:45:34.554Z;RecipCounter=0;OrgConfig=0;AdQuerySetup=16;AdBatch1=0;PermLookup=0;AdTimeCounter=0;GM.TimeTaken=0;GM.RequestCount=0;GetGM=0;QueryGen=31;OAuth=[ACSTokenBuildRequest:GetActorTokenFromAuthServer] Unable to get the token from auth server 'https://accounts.accesscontrol.windows.net/9cdffd99-a391-4492-8b8b-03b8ef1da48c/tokens/OAuth/2'. The request has token {"typ":"JWT","alg":"RS256","x5t":"vGeyUPR3l9gDmgp4W4cFO5EhqHk"}.{"iss":"00000002-0000-0ff1-ce00-000000000000@9cdffd99-a391-4492-8b8b-03b8ef1da48c","aud":"00000001-0000-0000-c000-000000000000/accounts.accesscontrol.windows.net@9cdffd99-a391-4492-8b8b-03b8ef1da48c","nbf":1435653935,"exp":1435654535}, the error from ACS is , the exception is System.Net.WebException: Unable to connect to the remote server ---> System.Net.Sockets.SocketException: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond 94.245.88.223:443

Andrew

June 30th, 2015 5:24am

I have decided to create a new thread

https://social.technet.microsoft.com/Forums/office/en-US/0b11db34-71fc-4995-a952-75c407f7d6ad/exchange-2013-hybrid-ews-not-using-proxy?forum=exchangesvrgeneral

This is because I now have the problem down to a more specific issue.

Thanks to those who have helped so far...

  • Marked as answer by agvonline 16 hours 34 minutes ago
Free Windows Admin Tool Kit Click here and download it now
July 6th, 2015 10:51am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics