Hybrid Configuration Wizard Error

Question

Hi,

My hybrid configuration stuck at below error. Part of the HCW log is as follows. Appreciate help / advice to fix below error.

Thanks in Advance,

Chandimal

2016.06.28 05:20:20.027 *ERROR* [Activity=Domain Ownership, Session=OnPremises, Cmdlet=Set-FederatedOrganizationIdentifier] FINISH Time=54.9s Results=PowerShell failed to invoke 'Set-FederatedOrganizationIdentifier': An error occurred while attempting to provision Exchange to the Partner STS.  Detailed Information "An error occurred accessing Windows Live. Detailed information: "The request failed with HTTP status 403: Forbidden.".".

2016.06.28 05:20:20.027 *ERROR* [Client=UX, Page=DomainProof] PowerShell failed to invoke 'Set-FederatedOrganizationIdentifier': An error occurred while attempting to provision Exchange to the Partner STS.  Detailed Information "An error occurred accessing Windows Live. Detailed information: "The request failed with HTTP status 403: Forbidden.".".

2016.06.28 05:20:20.027         [Activity=Domain Ownership] Data retrieved

2016.06.28 05:20:20.027         [Activity=Domain Ownership] FINISH Time=55.9s

2016.06.28 05:20:20.027         [Activity=Domain Ownership, Provider=OnPremises] Disposing Runspace.

Answer 1

Hi,

My hybrid configuration stuck at below error. Part of the HCW log is as follows. Appreciate help / advice to fix below error.

Thanks in Advance,

Chandimal

2016.06.28 05:20:20.027 *ERROR* [Activity=Domain Ownership, Session=OnPremises, Cmdlet=Set-FederatedOrganizationIdentifier] FINISH Time=54.9s Results=PowerShell failed to invoke 'Set-FederatedOrganizationIdentifier': An error occurred while attempting to provision Exchange to the Partner STS.  Detailed Information "An error occurred accessing Windows Live. Detailed information: "The request failed with HTTP status 403: Forbidden.".".

2016.06.28 05:20:20.027 *ERROR* [Client=UX, Page=DomainProof] PowerShell failed to invoke 'Set-FederatedOrganizationIdentifier': An error occurred while attempting to provision Exchange to the Partner STS.  Detailed Information "An error occurred accessing Windows Live. Detailed information: "The request failed with HTTP status 403: Forbidden.".".

2016.06.28 05:20:20.027         [Activity=Domain Ownership] Data retrieved

2016.06.28 05:20:20.027         [Activity=Domain Ownership] FINISH Time=55.9s

2016.06.28 05:20:20.027         [Activity=Domain Ownership, Provider=OnPremises] Disposing Runspace.

Hi Chandimal,

Glad to hear the issue is resolved. I am here to share the summary of the issue so that other community members who got the same issue can quick find the useful reference. So, please kindly also mark this reply as answered.

1. The Hybrid traffic was going through the Proxy, which to some degree  prevent the communication with MFG.
2. The domain which was registered in another tenant. Although removed from the previous tenant, MFG still got some stale records which did not allow your domain registered in MFG again.

Thanks,

Ran

Answer 2

Hi Chandimal,

Thanks for the information. There seems not to be with your Exchange server settings. It seems your domain cannot be added in MFG. I would like to collect your tenant information via PM and check with our relative team, if possible escalate to them to see if your domain is blocked in MFG.

Best regards,

Ran

Answer 3

Hi Chandimal,

Thanks for the log. The federation trust cannot be established because the OrgID (organization identifier) cannot be created. 403 means the request is hit to the server but for some reason, it is denied. Please go to your Exchange Management Shell and try to see if you are able to run Get-FederationTrust |Fl. If you can, please send us the results to PM.

Best regards,

Ran

Answer 4

Hi Chandimal,

According to the error, the issue is probably related to the federation trust between your Exchange org and MFG (Microsoft Federation Gateway). But to have a full understanding, can send us the complete results of the log via PM?

Thanks,

Ran

Answer 5

Hi Chandimal,

Form the error, we can see the issue occurred when running Cmdlet “Set-FederatedOrganizationIdentifier”. I found a KB article for this error. It indicates that it might be a timing issue. Please wait for a while and rerun the HCW again.

https://support.microsoft.com/en-sg/kb/3067975

If the issue still persists, please run the cmdlet on your on-premises Exchange PS and send us the result via PM. Meanwhile, I would also like to collect the complete results of the log via PM for further troubleshooting.

Set-FederatedOrganizationIdentifier -DelegationFederationTrust "Microsoft Federation Gateway" -AccountNamespace "Contoso.com" -Enabled $true

I have sent you a PM to request this information. Please click on the link below to access to your Private Message.

https://answers.microsoft.com/en-us/site/startsignin

Thanks,

Ran