Ошибка http 500 exchange 2013

Exchange 2013 Troubleshooting: Error 500 when login ECP and OWA


Table of Contents

  • Solution 1:
  • Solution 2:

There are so many reasons that the OWA and ECP shows this screen that ERROR: HTTP 500

" Website Cannot display the Webpage More Likely Causes:

  • Website is Under Maintenance
  • The Website has Programming error "

But sometimes there is not a problem like above. So let’s show the solution which always gets done successfully. You will see so many solutions on the different sites but the only two solutions needed are below:

Solution 1:

  1. Go to the RUN window and type «cmd». Copy and paste the following command:

    %windir%Microsoft.NETFrameworkv4.0.30319aspnet_regiis.exe -i

  2. Go to the Console and then Tools. In Tools, click theInternet Information Service (IIS Manager).
  3. In the IIS Manager, go to the Application Pool.
    In the Application Pool, navigate to «MSExchangeOWAAppPool«. Right-click on this service and then click
    Recycle.

Solution 2:

  1. Go to the RUN window and type «ADSIEDIT.msc»
  2. After opening ADSIEDIT, go to the Action navigation. Connect to and then navigate to
    1. «Select a Well known Naming Context»
  3. Select Configuration and select OK.
  4. Go to CN=Configuration then CN=Services then CN=Microsoft Exchange then CN=Your DOMAIN Name and navigate to CN-Client Access
  5. Right-click 【CN=Client Access】and click Properties. Scroll down to look for values:
    1. msExchCanaryData0
    2. msExchCanaryData1
    3. msExchCanaryData2
    4. msExchCanaryData3
  6. Take a backup to be safe and clear all these values to<not set>. If Values are already set to <not set> then try to do Solution 1.
  7. Open IIS Manager on your CAS server, go to «Application Pools«, right-click
    MSExchangeOWAAppPool and click Recycle.

Application Pools, ECP, en-US, Error 500, Exchange, Exchange 2013, Exchange Server, has image, has solution, Has TOC, IIS, Internal Server Error, login, OWA, troubleshooting, Website cannot display the page

Summary:
HTTP ERROR 500 in Exchange is displayed when the server rejects the request to establish a connection with the Exchange Server. The error prevents Exchange administrators and users from accessing the Exchange Admin Center and managing the Exchange Server. In this blog, we have discussed reasons and solutions to fix the HTTP ERROR 500 in Exchange and get access to the EAC/ECP.

Free Download for Windows

Contents

  • Reason for HTTP ERROR 500 in Exchange ECP/EAC
  • Solutions to Fix HTTP ERROR 500 in Exchange Server
  • Conclusion

Exchange Management Console (EMC) and Exchange Control Panel (ECP) were two different interfaces used in Exchange 2010 and earlier versions to manage the Exchange Servers. With Exchange 2013, Exchange Administrative Center (EAC) — a web-based management console optimized for on-premises, hybrid, and online Exchange Server deployments—replaced EMC and ECP.

And since EAC is web-based, you need to use a web browser and require the OWA/ECP virtual directory URL to access the management console. By default, you can access the ECP/EAC console using the following URLs,

Internal URLhttps://<CASServerName>/ecp

It allows users to access the EAC within the organization’s firewall.

External URLhttps://mail.abc.com/ecp

It provides access to users from outside of your organization’s firewall.

Administrators and users with permission can access the EAC/ECP panel by signing in using valid credentials.

However, many users have reported an HTTP ERROR 500 after they sign in to EAC/ECP.

Stellar

Reason for HTTP ERROR 500 in Exchange ECP/EAC

The HTTP ERROR 500 is usually reported after upgrading or updating the Exchange Server without an elevated command prompt.

However, it may also occur due to many other reasons, such as,

  • Exchange Services stopped or not working
  • Damaged OWA virtual directories
  • Damaged Exchange Server
  • Improper configuration
  • Low Resource allocation
  • Corrupt or incomplete .NET framework installation

Solutions to Fix HTTP ERROR 500 in Exchange Server

Follow these solutions in the given sequence to troubleshoot and fix the HTTP 500 error in Exchange Server EAC/ECP after login.

Solution 1: Use a Different Browser

Sometimes browser cache and cookies can cause issues while accessing the Exchange Admin Center. You can reset either the web browser or use a different browser to fix the error and access the EAC/ECP.

If you still encounter the HTTP ERROR 500, proceed to the next solution.

Solution 2: Install Pending Server Updates

On your Windows Server, open the Windows Updates section and install any pending updates as they may stop certain Exchange Services resulting in HTTP ERROR 500 after EAC login.

pending updates windows server exchnage http 500

After the update, restart the server and then try to log in to the EAC. You may disable automatic Windows Updates to prevent HTTP ERROR 500. However, it is highly recommended to install the updates to stay protected.

If there are no pending updates but the error persists, follow the next solution.

Solution 3: Reinstall Updates

If the HTTP ERROR 500 occurred after installing the Exchange Server security updates, reinstall those using the elevated command prompt. The steps are as follows,

  • Open Command Prompt as administrator
  • Navigate to the location where Security updates are downloaded (.msp files) using ‘cd’ command. For instance,
cd “C:UsersUserNameDownloadsUpdates”
  • Then execute the following command in the Command Prompt window,
.UpdateName.msp
  • Follow the update wizard and complete the installation process.
  • Restart the server and check if you can now access the EAC/ECP.

Solution 4: Check Resource Allocation

Some users have reported that the HTTP ERROR 500 occurred simply because their Exchange VM doesn’t allocate enough CPU cores. To fix this, shut down the server VM and review the allocated resources.

Stellar

Add or allocate more CPU cores and RAM, if available. Restart the server and check if EAC is accessible.

Similarly, for physical servers, upgrading the hardware may fix the error. However, we recommend you follow all the troubleshooting solutions discussed in this blog before upgrading the hardware to resolve the HTTP 500 error.

Solution 5: Update Server Configurations

Improper or outdated server configuration after the server upgrade or update can also render EAC or ECP inaccessible, causing HTTP ERROR 500 after login.

In such a case, you can run UpdateConfigFiles.ps1 and UpdateCAS.ps1 PowerShell scripts located in the Exchange Server ‘Bin’ directory (C:Program FilesMicrosoftExchange ServerV15Bin) to resolve the error.

run powershell scripts Exchange http 500 fix

To execute these PowerShell scripts, follow these steps,

  • Open PowerShell as administrator and use the ‘cd’ command to navigate the Exchange ‘Bin’ directory. For instance,
cd “C:Program FilesMicrosoftExchange ServerV15Bin.”

Stellar

Then execute the following commands to run the PowerShell scripts to fix the configuration issues.

.UpdateConfigFiles.ps1
.UpdateCAS.ps1
updatecase ecp eac error 500

This may take a while to finish. Once done, restart the server and check if the HTTP 500 error is resolved and ECP/EAC is accessible.

Solution 6: Recreate Virtual Directories

As a last resort, you can remove the existing OWA and ECP virtual directories and create new ones to fix the HTTP 500 error in Exchange. The steps are as follows,

  • Open Exchange Management Shell (EMS) as administrator and run the following commands to remove the current OWA and ECP virtual directory
Remove-OwaVirtualDirectory –Identity “ExchangeServerNameowa (Default Web Site)”
  • Press ‘a’ or ‘y’ and then press the ‘Enter’ key.
reset owa ecp virtual directories exchange
  • Now execute the following command in the same EMS window to rebuild OWA virtual directory,
New-OwaVirtualDirectory –WebsiteName “Default Web Site”

The commands are case-sensitive.

This will rebuild the virtual directories and possibly fix the issue. It will also change the way you log in. Instead of the login page, you will see the following pop-up for login.

login to exchnage eac http 500 fixed

Enter username and password to log into ECP/EAC web console.

Solution 7: Repair Exchange Server

If none of the solutions worked for you, try repairing your Exchange Server. For this, you need to mount the same Cumulative Update ISO as installed on the server. Then use the following command in EMS to repair the server.

Setup /Mode:upgrade /IAcceptExchangeServerLicenseTerms
repair exchange server

Use ‘/IAcceptExchangeServerLicenseTerms_DiagnosticDataOFF’ if your server is running on September 2021 or later Cumulative Update.

After the repair, restart the server and check if the HTTP ERROR 500 is resolved.

You may also set up a new Exchange Server if server repair fails and move your mailboxes and mail items from the old server to the new server. For this, you can use an EDB converter tool, such as Stellar Converter for EDB. The software can extract mailbox data from your faulty Exchange server with an online or offline database and export them to PST. You may also export the mailboxes from offline EDB to your new Exchange Server database to PST. The software auto-maps the source mailboxes with destination mailboxes and exports up to four mailboxes simultaneously to the target server database in a few simple steps.

Conclusion

HTTP ERROR 500 is common, especially after improper server update installation. However, it may also occur due to several other reasons, as discussed in this blog. We also discussed all possible solutions to resolve the HTTP ERROR 500 in Exchange Server 2013 and later versions. However, if the error isn’t resolved, it’s recommended to set up a new server and move your data from the faulty server to a new server using an EDB converter tool, such as Stellar Converter for EDB. The software helps you extract and move mailbox data from offline or online databases hosted on your faulty server and exports them to PST, Office 365 tenant, or Live Exchange Server. It automates the entire mailbox data migration process, saving tons of time required to manually export and import mailboxes via EMS or EAC. Moreover, the cmdlets do not work if the database is offline.

About The Author

Ravi Singh

Ravi Singh is a Senior Writer at Stellar®. He is an expert Tech Explainer, IoT enthusiast, and a passionate nerd with over 7 years of experience in technical writing. He writes about Microsoft Exchange, Microsoft 365, Email Migration, Linux, Windows, Mac, DIY Tech, and Smart Home. Ravi spends most of his weekends working with IoT (DIY Smart Home) devices and playing Overwatch. He is also a solo traveler who loves hiking and exploring new trails.

Query: “Are you getting http 500 internal server error in Microsoft Exchange 2016, 2013 and 2010 ECP/OWA after login? Don’t worry, Read this blog and get the best solution for Exchange server error 500.”

Ravi Singh

Ravi Singh is a Senior Writer at Stellar®. He is an expert Tech Explainer, IoT enthusiast, and a passionate nerd with over 7 years of experience in technical writing. He writes about Microsoft Exchange, Microsoft 365, Email Migration, Linux, Windows, Mac, DIY Tech, and Smart Home. Ravi spends most of his weekends working with IoT (DIY Smart Home) devices and playing Overwatch. He is also a solo traveler who loves hiking and exploring new trails.

Query: “Are you getting http 500 internal server error in Microsoft Exchange 2016, 2013 and 2010 ECP/OWA after login? Don’t worry, Read this blog and get the best solution for Exchange server error 500.”

Most of the time it seems that whenever you login to your Exchange Admin centre (EAC) a common Exchange server http 500 error occurs. The main source of this problem is caused due to improper configuration of the device. The Error indicates that the device tried to establish a connection with the server, but the request was rejected with an error message by the Exchange server itself. Let’s see the solution of Exchange Server 500 error.

Method 1: Step by Step Solution for HTTP 500 Error in Exchange Server 2016

Step 1: Go to Search bar and type «Exchange Managmenent Shell».

Step 2: A new window will appear named as: Administrator: Exchange Managmenent Shell.

Step 3: It will start connecting to your local EAC ip.

Step 4: After connecting, type Remove-OwaVirtualDirectory ‘win2owa

Remove-OwaVirtualDirectory

Step 5: Message will appear “Are you sure you want to perform this action? Outlook Web App virtual directory “win2owa ” is being removed.

Step 6: Type y.

Outlook Web App virtual directory

Step 7: Type New-OwaVirtualDirectory – Website Name ‘Default Web site’.

New-OwaVirtualDirectory

Step 8: Restart your Computer.

Step 9: Now re-login. Exchange Server http 500 Error will be fixed.

Method 2: How to Fix 500 internal server error in Microsoft Exchange

1. Create a separate virtual directory which doesn’t require SSL or any other authentication method to establish a connection with the server. In this way you could temporarily connect with the server but that might serve as a potential threat due to lack of authentication.

2. Alternatively you can enable the settings on the root Exchange directory for the front end server using Microsoft utility “Metaedit.exe”.

Metaedit.exe

3. To determine the Maximum token size allotted to the user, use Microsoft provided tool : Tokensz.exe : By default the maximum token size- 8,000 bytes were allotted for the legacy versions; but for the later versions , token size was increased upto 12,000 bytes.

4. Insufficient permissions problem might be raised due to broken Access Control List inheritance in the Active Directory. To resolve this follow these steps:

  • Launch Active Directory Users and Computers.
  • Locate View >> Advanced Features.
  • Select the mailbox and right click to explore the properties.
  • Navigate to Security >> Advanced.
  • Ensure that “Include inheritable permissions from this object’s parent» is selected.

Active Directory Service Information

5. Alternatively you can re-add the existing users and new users to the Exchange. For that you need to access Active Directory Service Information:

  • Open adsi edit.
  • Locate the user in your existing domain.
  • Expand the user details and remove the object “CN=ExchangeActiveSyncDevices”.

Tools that could be beneficial: http://test exchange connectivity.com helps to test the connectivity between the exchange server and the device.

Exchange Remote Content Analyzer: Helps to determine the connectivity issues between the exchange server and the deployments easily.

Remote Content Analyzer

Causes of Exchange Server HTTP 500 Error

Now let’s examine the root cause for http 500 internal server error in Exchange here:

For the legacy Exchange server versions such as Exchange 2016, 2013, 2010, 2007,etc. the 500 internal server error is caused due to the following circumstances:

The Server uses SSL or Secure Sockets Layer protocol or form based authentication.

1. Virtual Directory of the Exchange Server has disabled Windows Authentication: The Active Sync Service uses the virtual directory to access the Outlook Web Access Templates and the WebDav on the Exchange Server. Hence, If the Virtual Directory is not enabled then Active Sync returns error.

2. Members existing in too many groups might face the error as the tokens generated might be larger than the maximum size allotted to them.

3. For Exchange 2010 and later versions, the user account might not have sufficient Permissions to access the mailbox in the Active Directory.

Conclusion

In the above content, I have discussed the best solution to resolve Exchange admin center http 500 internal server error quickly. Using step by step Exchange Management Shell method easily fix Exchange server error 500 without getting any hurdle.

In November 2013, Cumulative Update 3 was released for Exchange Server 2013. This update resolved many issues with Exchange Server and proved to be advantageous for both Administrator and clients. However, the users can encounter various issues with the Cumulative Updates.

Issues With Cumulative Updates of Exchange Server 2013

With Cumulative or some other updates, the users can come across some difficulties after the installation. Some of the issues include:

  • Powershell shortcuts get omitted.
  • Virtual Directories
  • Missing of Powershell dll’s
  • OWA, ECP or Active sync do not work properly
  • Missing of reference from the registry
  • Issues with the certificate
  • Improper updation or breakage of ASP.net

In case of Cumulative update 3 and above version, the basic functionalities that get hindered are:

  • OWA
  • ECP

exchange-recovery-new

Indication of the issue

On installing Cumulative Update with Exchange Server 2013 and above versions either in DAG or non DAG mode, access to OWA or ECP is denied but it is found that Outlook is working effectively.

If case of such scenarios either of the following errors will be generated:

  • Event ID: 4 & 1309 : caused due to ASP.net
  • Error 500: caused due to login failure of OWA or ECP

However, both the above mentioned errors can prevail in Exchange Server environment but we will focus on “ECP And OWA Logins Fail With Error 500 in Exchange 2013” . Let’s now move to the reason due to which this error occurs.

Cause Of The Error 500 in Exchange 2013

The main reason behind the log in failure of OWA and ECP is the mismatch of canary tokens between the client and server

A canary is usually a secret token between client and Server in OWA, ECP or some other web services that is stored in the cookie collection of the browser and gets submitted with various requests which the browser sends. For each request the value of GUID stored in the URL is compared with the one stored in session state. If the value of GUID stored in these location do not match or if the value of GUID is lost from the URL, the request becomes malicious and it is blocked. As a result of it, the users will encounter “http error message 500: Internal Server Error” and the Server will come across an unexpected condition that stops it from executing the request.

Functioning Of Canary Tokens In Normal Condition And At The Time Of Error Generation

As mentioned above that the mismatch of canary tokens between the client and the Server is responsible for the generation of error 500. Let’s have a practical look on the functionality of Canary tokens in normal state and at the time of error generation.

What Actually Happen

  • Navigate to OWA.
  • Provide username and password of the account.
  • If the login is successful, a session ID will be generated by the Server.
  • A cookie will be send to the user with the session ID.
  • Canary and Session ID gets stored in the session store state.
  • The canary gets rewritten into the URL and is send to the user.
  • The requested page is displayed by the browser.

What Happens When The Error Is Encountered

  • Navigate to OWA.
  • Provide username and password of the account.
  • The Server will generate a Session ID if the login is successful.
  • A cookie will be send to the user with the session ID.
  • The Server is not able to create shared secret token i.e. canary.
  • Canary and Session ID is not stored in the session store state.
  • The canary does not get rewritten into the URL or is send to the user.
  • Error message 500 is encountered by the browser.

How To Get Rid Of The Issue?

If you encounter ECP and OWA logins fail with the error 500 in Exchange 2013 then there is no need to lose your nerves. You can tackle this scenario by following these steps:

NOTE: It is advised to take backup before preceding these steps

  • Navigate to “ADSIEDIT.msc”.
  • Route to

CN=Client Access,CN=“Organization name”,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=“domain”

  • Right click on “CN=your Client Access Server” or “CN=your single or multi role server(s)” and select properties
  • Scroll to msExchCanaryData0msExchCanaryData1,msExchCanaryData2

NOTE: Check the subfolders too, as the canary values can be stored to them.

  • Copy entire value to a text file along with the attribute names and path.
  • Erase all the values on copying them to the text file.
  • Logon to CAS Server(s) or multi role Server.
  • Launch IIS management.
  • Navigate to application pools.
  • Select Recycle by Right clicking on “MSExchangeOWAAppPool”.

NOTE: At the time of recycle the established session will be lost but it is not an issue to be worried about.

  • Cmd: appcmd recycle apppool /apppool.name:”MSExchangeOWAAppPool”
  • Reboot entire mailbox Server, in the case of Single Role Architecture.
  • In case of multi role simply reboot the Server and skip recycling.

Conclusion

With the Cumulative Update 3, Exchange Server 2013 – OWA and ECP logins fail with 500 error. The basic cause of this error is mismatch of canary tokens between the client and the server. It is a tough condition in which the users lose control from OWA and ECP. However, one can tackle this situation manually by following the above mentioned steps.

The following two tabs change content below.

  • Bio
  • Latest Posts

Mike Jackson is a technical writer and he wrote numerous blogs or articles regarding Exchange Server corruption issues with their solutions. You can follow him on Google+, Facebook and Twitter. If you have any query & solution regarding Exchange Server & Outlook apps then you can mail Mike at mike.edbtopstpro@gmail.com.

Mike Jackson is a technical writer and he wrote numerous blogs or articles regarding Exchange Server corruption issues with their solutions. You can follow him on Google+, Facebook and Twitter. If you have any query & solution regarding Exchange Server & Outlook apps then you can mail Mike at mike.edbtopstpro@gmail.com.

Whenever I try to run the exchange analyzer test online, I get this..

Testing HTTP Authentication Methods for URL https://web.domain.net/Microsoft-Server-ActiveSync/ Opens a new window.

The HTTP authentication test failed.

Additional Details

An HTTP 500 response was returned from Unknown.

HTTP Response Headers:

X-FEServer: EXCHANGESERVER1

Content-Length: 3447

Cache-Control: private

Content-Type: text/html; charset=utf-8

Date: Thu, 07 May 2015 16:38:35 GMT

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Elapsed Time: 453 ms.

____________________________________

I did try rebuilding the virtual directories. I made sure that the IIS and EAC virtual directory authentication types are their defaults. I also tried to move the webconfig file outside of the wwwroot folder in inetpub. It accepts our Comodo certificate. I’m thoroughly confused as to why this would happen. Can anyone offer some pointers?

Понравилась статья? Поделить с друзьями:
  • Ошибка http 405 not allowed
  • Ошибка http 404 что это значит
  • Ошибка http 404 что делать
  • Ошибка http 404 запрошенный ресурс не найден что это
  • Ошибка http 404 запрошенный ресурс не найден как исправить