Hi, I am having strange issue with my exchange 2013 all of a sudden.

first of all I cant access the live link of my OWA and Exchange admin center from inside network. It is working perfectly fine form outside. my internal domain is .local and external of course is .com. the only way the internal network can access OWA and Admin center is by using the local host link.

I cant login to exchange admin center. once you enter username and password and click sign in, the page loops back to the login page without any error. But the OWA can login just fine.

cant anyone help resolve this issue

• Edited by Riaz Ansary Tuesday, May 12, 2015 2:00 PM

Lynn, This does happens on all users. YOu can login to OWA just fine its just the ECP that is not working.

we previously had expired certificate. So i requested new certificate from exchange admin center and got a new  certificate from godaddy and removed the old certificate from exchange once we completed the new certificate. the subject lines are still the same on the certificate. when did that the IIS got reset on all the redirect setting that I had setup ( I had setup redirects to https://webmail.mydomain.com so that people dont have to type https to get to web app ) So i had to go and reconfigure all the redirects by clearing the require SSL and conifguring the http redirect option to redirect to https://webmail.mydomain.com.

everythign should work find as this was the exact setting i had before when deployed exchange for the first time. SO i dont know what is causing this. and WHY the OWA and ECP is not accessable from internal network by its live link which is https://webmail.mydomain.com (my internal domain is .local)

I understand that you configured the redirect, but what happens if you actually type "/owa" at the end of the url?  Does it work or do you get the same results (loops back to the login screen)?

the output is:

ecp <Default Web Site>                Server Name

There should have been a lot more output than that; you need to append the pipe symbol and the letters "fl" to the end of your command.  Look at what I wrote in my previous post; specifically between the quotes.  Copy and paste what I typed above, and change out the server name to yours. 

here it is :

RunspaceId                      : 7c2e6943-3480-49ab-a30f-9a5c9563e561 AdminEnabled                    : True OwaOptionsEnabled               : True Name                            : ecp (Default Web Site) InternalAuthenticationMethods   : {Basic, Fba} MetabasePath                    : IIS://EX2013-MBX-CAS.mydomain.local/W3SVC/1/ROOT/ecp BasicAuthentication             : True WindowsAuthentication           : False DigestAuthentication            : False FormsAuthentication             : True LiveIdAuthentication            : False AdfsAuthentication              : False OAuthAuthentication             : False DefaultDomain                   : mydomain.local GzipLevel                       : Low WebSite                         : Default Web Site DisplayName                     : ecp Path                            : C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\ecp ExtendedProtectionTokenChecking : None ExtendedProtectionFlags         : {} ExtendedProtectionSPNList       : {} AdminDisplayVersion             : Version 15.0 (Build 995.29) Server                          : EX2013-MBX-CAS InternalUrl                     : https://mail.mydomain.com/owa ExternalUrl                     : https://mail.mydomain.com/ecp ExternalAuthenticationMethods   : {Fba} AdminDisplayName                : ExchangeVersion                 : 0.10 (14.0.100.0) DistinguishedName               : CN=ecp (Default Web                                   Site),CN=HTTP,CN=Protocols,CN=EX2013-MBX-CAS,CN=Servers,CN=Exchange Administrative                                   Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=CynaSolutions,CN=Microsoft                                   Exchange,CN=Services,CN=Configuration,DC=mydomain,DC=local Identity                        : EX2013-MBX-CAS\ecp (Default Web Site) Guid                            : a467c36a-263d-4c3a-91c8-1b2b645536ff ObjectCategory                  : CYNASOLUTIONS.local/Configuration/Schema/ms-Exch-ECP-Virtual-Directory ObjectClass                     : {top, msExchVirtualDirectory, msExchECPVirtualDirectory} WhenChanged                     : 5/7/2015 2:51:50 PM WhenCreated                     : 7/2/2014 12:47:33 PM WhenChangedUTC                  : 5/7/2015 7:51:50 PM WhenCreatedUTC                  : 7/2/2014 5:47:33 PM OrganizationId                  : OriginatingServer               : DC1.mydomain.local IsValid                         : True ObjectState                     : Changed

• Edited by Riaz Ansary Tuesday, May 19, 2015 12:18 PM

Your internal URL for ecp in the output is " https://mail.mydomain.com/owa", shouldn't it end with "ecp" and not "owa"?  Is there a reason for that?  What happens if you change it and cycle IIS?

Any update on this issue?  Do you still need assistance or is it resolved?