A Granular Recovery Technology (GRT) enabled Exchange restore job fails with an error “Cannot log on to Exchange Web Services, EWS is redirecting to a potentially insecure autodiscover URL, please review the URL."
Article ID: 100046726
Updated On:
Description
Error Message
“Cannot log on to Exchange Web Services, EWS is redirecting to a potentially insecure Autodiscover URL" https://email.company.com/autodiscover/autodiscover.xml";.
Cause
During an Exchange GRT restore job, in order to restore emails Backup Exec connects to the Exchange Webservice API (EWS) from the remote agent running on the Exchange machine. To connect to EWS, the remote agent tries to discover the EWS URL to be used. This discovery process involves trying different methods to figure out the EWS URL. A particular step in this discovery process may involve the use of a response from a potential unsafe redirection (like use of an non SSL endpoint). In that particular case, the job fails with the above error.
Resolution
This solution is applicable for Backup Exec 20.6 onwards.
If the job fails with the above error, this indicates that primary methods to discover the URL have failed. User should check the following
1) Autodiscover URL is reachable from the Exchange server.
2) Autodiscover configuration in Exchange is done correctly.
If all above is set correctly, then check whether the URL indicated in the error is valid and secure. If so, follow the below mentioned steps:
1. On the Exchange server, Click Start -> Run and type "regedit". Click OK.
Warning : Incorrect use of the Windows registry editor may prevent the operating system from functioning properly. Great care should be taken when making changes to a Windows registry. Registry modifications should only be carried-out by persons experienced in the use of the registry editor application. It is recommended that a complete backup of the registry and workstation be made prior to making any registry changes.
2. Within the Registry Editor, navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Veritas\Backup Exec For Windows\Backup Exec\Engine\Exchange or HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Backup Exec For Windows\Backup Exec\Engine\Exchange
3. Right click and add a new Multi String Value, EWSAllowedRedirectionURLs.
4. Set the value to the URL specified in the error message.
5. Rerun the restore job after making this change.
Issue/Introduction
Additional Information
