Article ID: 832397
Article Last Modified on 10/25/2007
APPLIES TO
- Microsoft Exchange Server 2003 Enterprise Edition
- Microsoft Exchange Server 2003 Standard Edition
SYMPTOMS
After you configure your Microsoft Exchange Server 2003 servers in a front-end and back-end server configuration, you may receive an incorrect error event description for event ID 1001.
MORE INFORMATION
After you configure your Exchange Server 2003 servers in a front-end and back-end environment, the following event may appear in the application event log in Event Viewer on the front-end server:
Event Source: EXPROX
Event Category: None
Event ID: 1001
Date: date
Time: time
Type: Error
User: N/A
Computer: servername
Description: Microsoft Exchange Server has detected that Basic Authentication is being attempted between this server and server "back-end servername". This authentication mechanism is not secure and it is not supported between front-ends and back-ends. Please verify that both this server and server "back-end servername" are configured to use Integrated Windows Authentication for each virtual root used by Exchange. After applying any changes it may be necessary to restart Internet Information Services on both the front-end and back-end servers.
You receive this error event if you configure the back-end Exchange 2003 server virtual roots to use only the Basic authentication authentication method. However, the text in this event description indicates that you must configure both the front-end server and the back-end server to use the Integrated Windows Authentication authentication method. This information is incorrect.
The following description is the correct description for this error event:
Microsoft Exchange Server has detected that Basic Authentication is being attempted between this server and server "back-end servername". This authentication mechanism is not secure and it is not supported between front-ends and back-ends. Please verify that “back-end servername" is configured to use Integrated Windows Authentication for each virtual root used by Exchange. After applying any changes it may be necessary to restart Internet Information Services on both the front-end and back-end servers.
Note Although you receive this error event if you do not have Integrated Windows Authentication enabled on the back-end server virtual directory, this error event may also appear if Kerberos authentication does not function correctly between the front-end server and the Active Directory directory service.
REFERENCES
For additional information about how to troubleshoot Kerberos authentication, click the following article number to view the article in the Microsoft Knowledge Base:
326985 HOW TO: Troubleshoot Kerberos-Related Issues in IIS
326276 XADM: White Paper - Using Microsoft Exchange 2000 Front-End Servers
For additional information, click the following article number to view the article in the Microsoft Knowledge Base:
821839 How to Configure IPSec on an Exchange Server 2003 Back-End Server That Is Running on a Windows Server 2003 Server Cluster
Additional query words: XADM, basic auth, FEBE, FE-BE, FE/BE
Keywords: kbeventlog kberrmsg kbprb KB832397
