Exchange 2010 ECP 'GetList' error on some functions

[mb2k01]

Hi All,

 

I really hope someone can help on this one - Its slowly driving me mad!

 

I have Exchange 2010 set up and working fine for 99% of functions (minus UC which I've not installed).

 

The one and only error I can find that a user would get is that when they log in to their OWA and go to options they get presented with an error reading:

 

"The server method 'GetList' failed"

 

when clicking on the "organize email" and "groups" buttons. None of the other buttons give this message.

 

Google doesn't come back with anything obvious, only a reference to incorrect ports in IIS7 or headers, neither of which I *think* I have a problem with (I.e. not using odd ports etc).

 

So far I've tried playing with permissions, tweaking settings in IIS and even re-installing CAS!

 

Help!

[AngryTechnician]

You may have been referring to a post I made about this problem when you mentioned you'd only found things about odd ports... but if not, have you by any chance used the IIS7 MMC to configure a second SSL binding for OWA?

 

If that doesn't help, you should be able to find more information by checking the Application event log on your Exchange server for any errors that occurred at the time you see the error in OWA.

[mb2k01]

Ah! I've actually read that page but didn't notice the name!

 

I have to admit, E2010 was my first meaningful exploration in to the murky world of Certificates, and I was prepared for it to be a learning process.

 

I decided to purchase what I thought would be the right kind of Certificate (from GoDaddy.com!) and went away trying to add it to Exchange. A few hours passed and I realised from jumping around the net that it wasn't the right kind of certificate, so decided to go back to plan A and use the less than impressive self-signed certificate.

I assume all the messing around with Certificates has now messed things up for me?

 

At the moment in IIS i'm only using standard ports and have the original server certificate on 443. The original certificate is also showing in the Exchange Console section.

 

I'm happy to plough on using self-signed certificates at this stage. Do you have any recommendations how I can get myself working again? Short of a full reinstall anyway? (Saying that, I've already removed and reinstalled CAS)

[AngryTechnician]

Does the certificate have the IIS service listed next to it in the EMC?

 

Also, did you find anything in the Application log?

[mb2k01]

Also, did you find anything in the Application log?

 

Oh dear! Network Admin 101.... You can tell I was stressed yesterday!

Checked first thing this morning by recreating the error and the Application Log gave a nice long error stating at the top of it that it was due to Anonymous Authentication not being turned on for EPS in IIS!

Turned it on and bang, error gone!

 

Is there any major security issue with leaving anonymous turned on on the ECP directory?