IllegalCrossServer Exception Exchange 2013 SP1 DAG
Hello,

I have an Exchange 2013 SP1 DAG with 2 Exchange Servers.
On one Exchange Server I am not able to open the ECP, (On the other one it is working fine), but owa works on both.
After inserting the credentials into the login page, a blank page appears.


When I am check then the logs I find this warning with eventid 1309.
I already tried to recreate the HealthDatabases and the ECP VirtualDirectory. 
Below the warning code in the eventviewer
    
Event code: 3005 
Event message: An unhandled exception has occurred. 
Event time: 8/7/2015 1:30:31 AM 
Event time (UTC): 8/6/2015 9:30:31 PM 
Event ID: c182d90778c1416bb20e1661997b42fb 
Event sequence: 17519 
Event occurrence: 14667 
Event detail code: 0 

Application information: 
    Application domain: /LM/W3SVC/2/ROOT/owa-2-130828936400156394 
    Trust level: Full 
    Application Virtual Path: /owa 
    Application Path: C:\Program Files\Microsoft\Exchange Server\V15\ClientAccess\owa\ 
    Machine name: EXCHANGE2 

Process information: 
    Process ID: 11888 
    Process name: w3wp.exe 
    Account name: NT AUTHORITY\SYSTEM 

Exception information: 
    Exception type: MapiExceptionIllegalCrossServerConnection 
    Exception message: MapiExceptionIllegalCrossServerConnection: Monitoring mailbox [] with application ID [Client=OWA] is not allowed to make cross-server calls from [exchange2.core.local] to [Exchange1.core.local]
   at Microsoft.Mapi.CrossServerDiagnostics.BlockCrossServerCall(ExRpcConnectionInfo connectionInfo, String mailboxDescription)
   at Microsoft.Mapi.CrossServerConnectionPolicy.CheckAndBlockMonitoringMailboxes(ExRpcConnectionInfo connectionInfo)
   at Microsoft.Mapi.CrossServerConnectionPolicy.Apply(ExRpcConnectionInfo connectionInfo)
   at Microsoft.Mapi.ExRpcConnectionFactory.Create(ExRpcConnectionInfo connectionInfo)
   at Microsoft.Mapi.MapiStore.OpenMapiStore(String serverDn, String userDn, String mailboxDn, Guid guidMailbox, Guid guidMdb, String userName, String domainName, String password, String httpProxyServerName, ConnectFlag connectFlags, OpenStoreFlag storeFlags, CultureInfo cultureInfo, Boolean wantRedirect, String& correctServerDN, ClientIdentityInfo clientIdentity, Boolean unifiedLogon, String applicationId, Client xropClient, Boolean wantWebServices, Byte[] clientSessionInfo, TimeSpan connectionTimeout, TimeSpan callTimeout, Byte[] tenantHint)
   at Microsoft.Mapi.MapiStore.OpenMailbox(String serverDn, String userDn, Guid guidMailbox, Guid guidMdb, String userName, String domainName, String password, ConnectFlag connectFlags, OpenStoreFlag storeFlags, CultureInfo cultureInfo, ClientIdentityInfo clientIdentity, String applicationId, Byte[] tenantPartitionHint, Boolean unifiedLogon)
   at Microsoft.Exchange.Data.Storage.MailboxSession.ForceOpen(MapiStore linkedStore, Boolean unifiedSession)

Request information: 
    Request URL: https://localhost:444/owa/proxylogon.owa 
    Request path: /owa/proxylogon.owa 
    User host address: 127.0.0.1 
    User: CORE\SM_12984a6c393744e18 
    Is authenticated: True 
    Authentication Type: Kerberos 
    Thread account name: NT AUTHORITY\SYSTEM 

Thread information: 
    Thread ID: 49 
    Thread account name: NT AUTHORITY\SYSTEM 
    Is impersonating: False 
    Stack trace:    at Microsoft.Mapi.CrossServerDiagnostics.BlockCrossServerCall(ExRpcConnectionInfo connectionInfo, String mailboxDescription)
   at Microsoft.Mapi.CrossServerConnectionPolicy.CheckAndBlockMonitoringMailboxes(ExRpcConnectionInfo connectionInfo)
   at Microsoft.Mapi.CrossServerConnectionPolicy.Apply(ExRpcConnectionInfo connectionInfo)
   at Microsoft.Mapi.ExRpcConnectionFactory.Create(ExRpcConnectionInfo connectionInfo)
   at Microsoft.Mapi.MapiStore.OpenMapiStore(String serverDn, String userDn, String mailboxDn, Guid guidMailbox, Guid guidMdb, String userName, String domainName, String password, String httpProxyServerName, ConnectFlag connectFlags, OpenStoreFlag storeFlags, CultureInfo cultureInfo, Boolean wantRedirect, String& correctServerDN, ClientIdentityInfo clientIdentity, Boolean unifiedLogon, String applicationId, Client xropClient, Boolean wantWebServices, Byte[] clientSessionInfo, TimeSpan connectionTimeout, TimeSpan callTimeout, Byte[] tenantHint)
   at Microsoft.Mapi.MapiStore.OpenMailbox(String serverDn, String userDn, Guid guidMailbox, Guid guidMdb, String userName, String domainName, String password, ConnectFlag connectFlags, OpenStoreFlag storeFlags, CultureInfo cultureInfo, ClientIdentityInfo clientIdentity, String applicationId, Byte[] tenantPartitionHint, Boolean unifiedLogon)
   at Microsoft.Exchange.Data.Storage.MailboxSession.ForceOpen(MapiStore linkedStore, Boolean unifiedSession)

Anybody has an idea how to solve this, as I am going crazy with this error? 
Thanks a lot for any suggestion, 
Tommy



  • Edited by Tommy Sala Thursday, August 06, 2015 10:15 PM
August 6th, 2015 9:56pm

Hi 

Try to change the auth of ECP to Formbased 

Get-EcpVirtualDirectory -Identity SRVEXC02\ecp (Default Web Site) | Set-EcpVirtualDirectory FormsAuthentication $true

Perform an IIS reset and see the results

Free Windows Admin Tool Kit Click here and download it now
August 11th, 2015 9:39am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics