An incorrect event description for event ID 1001 appears on an Exchange Server 2003 front-end server (832397)



The information in this article applies to:

  • Microsoft Exchange Server 2003 Enterprise Edition
  • Microsoft Exchange Server 2003 Standard Edition

SYMPTOMS

After you configure your Microsoft Exchange Server 2003 servers in a front-end and back-end server configuration, you may receive an incorrect error event description for event ID 1001.

MORE INFORMATION

After you configure your Exchange Server 2003 servers in a front-end and back-end environment, the following event may appear in the application event log in Event Viewer on the front-end server: Event Source: EXPROX
Event Category: None
Event ID: 1001
Date: date
Time: time
Type: Error
User: N/A
Computer: servername
Description: Microsoft Exchange Server has detected that Basic Authentication is being attempted between this server and server "back-end servername". This authentication mechanism is not secure and it is not supported between front-ends and back-ends. Please verify that both this server and server "back-end servername" are configured to use Integrated Windows Authentication for each virtual root used by Exchange. After applying any changes it may be necessary to restart Internet Information Services on both the front-end and back-end servers. You receive this error event if you configure the back-end Exchange 2003 server virtual roots to use only the Basic authentication authentication method. However, the text in this event description indicates that you must configure both the front-end server and the back-end server to use the Integrated Windows Authentication authentication method. This information is incorrect.

The following description is the correct description for this error event: Microsoft Exchange Server has detected that Basic Authentication is being attempted between this server and server "back-end servername". This authentication mechanism is not secure and it is not supported between front-ends and back-ends. Please verify that "back-end servername" is configured to use Integrated Windows Authentication for each virtual root used by Exchange. After applying any changes it may be necessary to restart Internet Information Services on both the front-end and back-end servers.Note Although you receive this error event if you do not have Integrated Windows Authentication enabled on the back-end server virtual directory, this error event may also appear if Kerberos authentication does not function correctly between the front-end server and the Active Directory directory service.

REFERENCES

For additional information about how to troubleshoot Kerberos authentication, click the following article number to view the article in the Microsoft Knowledge Base:

326985 HOW TO: Troubleshoot Kerberos-Related Issues in IIS

326276 XADM: White Paper - Using Microsoft Exchange 2000 Front-End Servers

For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

821839 How to Configure IPSec on an Exchange Server 2003 Back-End Server That Is Running on a Windows Server 2003 Server Cluster


Modification Type:MajorLast Reviewed:9/21/2006
Keywords:kbEventLog kberrmsg kbprb KB832397 kbAudITPRO