In-place e discovery and hold error in Exchange Control panel

Question

In-place e discovery and hold error in Exchange Control panel

Hriday Saha 146

We are facing issue on ECP (Exchange 2013)

Need your expertise on it.

Kai Yao 37,781 Reputation points Moderator

2022-05-27T05:30:24.903+00:00

Hi @Hriday Saha

Is it a standalone Exchange 2013 server?
Have you done some changes before this issue occurs?

Please download and run the healthchecker script in Exchange Management Shell and post the result.
(Don't forget to hide your personal information)
Hriday Saha 146 Reputation points

2022-05-29T05:44:08.813+00:00

@Kai Yao

We have 2 mailbox server and 1 edge server. Recently we have Update the security patch of Exchange 2013 CU23. and enable TLS 1.2 &disable SSL 3.0 .but not sure who is the culprit behind this issue. because i had check from my localhost also. The issue remain there.

FYI,

Our current tls and ssl status:
SSL 2.0- disable
SSL 3.0- disable
TLS 1.0- enable
TLS 1.1- enable
TLS 1.2 -enable

We are performing a group policy for Disable ssl 3.0 and enable tls 1.2 .thats it. else of everything remain same as before
Kai Yao 37,781 Reputation points Moderator

2022-05-31T08:53:40.55+00:00

Thanks for the information.

Did you follow this link to enable TLS 1.2 for WinHTTP and .NET?
Exchange Server TLS guidance Part 2: Enabling TLS 1.2 and Identifying Clients Not Using It
Hriday Saha 146 Reputation points

2022-06-04T11:07:18.38+00:00

@Kai Yao No, we just configured it on Active directory policy level. so that all joined machine get exact same policy accordingly. we configured TLS 1.2 enable and SSL 3.0 disable.

From Health checker script which parameter i need to post? because i found a lots of error in script html file output.
Kai Yao 37,781 Reputation points Moderator

2022-06-07T09:04:13.717+00:00

These settings are not in the result of the script.

Please have a check if you have this registry DefaultSecureProtocols under these paths in registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp

If it is not present, please manually create it and set its value to 0x00000800.

1 answer

Your answer

Kai Yao 37,781 Reputation points Moderator

2022-05-27T05:30:24.903+00:00

Hi @Hriday Saha

Is it a standalone Exchange 2013 server?
Have you done some changes before this issue occurs?

Please download and run the healthchecker script in Exchange Management Shell and post the result.
(Don't forget to hide your personal information)
Hriday Saha 146 Reputation points

2022-05-29T05:44:08.813+00:00

@Kai Yao

We have 2 mailbox server and 1 edge server. Recently we have Update the security patch of Exchange 2013 CU23. and enable TLS 1.2 &disable SSL 3.0 .but not sure who is the culprit behind this issue. because i had check from my localhost also. The issue remain there.

FYI,

Our current tls and ssl status:
SSL 2.0- disable
SSL 3.0- disable
TLS 1.0- enable
TLS 1.1- enable
TLS 1.2 -enable

We are performing a group policy for Disable ssl 3.0 and enable tls 1.2 .thats it. else of everything remain same as before
Kai Yao 37,781 Reputation points Moderator

2022-05-31T08:53:40.55+00:00

Thanks for the information.

Did you follow this link to enable TLS 1.2 for WinHTTP and .NET?
Exchange Server TLS guidance Part 2: Enabling TLS 1.2 and Identifying Clients Not Using It
Hriday Saha 146 Reputation points

2022-06-04T11:07:18.38+00:00

@Kai Yao No, we just configured it on Active directory policy level. so that all joined machine get exact same policy accordingly. we configured TLS 1.2 enable and SSL 3.0 disable.

From Health checker script which parameter i need to post? because i found a lots of error in script html file output.
Kai Yao 37,781 Reputation points Moderator

2022-06-07T09:04:13.717+00:00

These settings are not in the result of the script.

Please have a check if you have this registry DefaultSecureProtocols under these paths in registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp

If it is not present, please manually create it and set its value to 0x00000800.

Answer 1

Hriday Saha 146

we found TLS 1.0 misconfigured. after reconfigure this protocol the problem is solved.

thanks

Kai Yao 37,781 Reputation points Moderator

2022-06-15T06:08:02.36+00:00

Thanks for the update.
Glad to hear the issue was resolved!

Share via

In-place e discovery and hold error in Exchange Control panel

1 answer

Your answer