Users receive an Impersonation error when printing calendars in a CAS to CAS proxy scenario

This article applies to the following products:
     Messageware OWA Print 2007

 

SYMPTOM

 

Users receive the following error message when printing calendars using OWA Print.

 

Processing error.

Impersonation failed

 

 

CAUSE

 

This error occurs in a CAS to CAS proxy environment, where an external FBA CAS proxies the request to an internal CAS.  This occurs when the Exchange Server group is set to explicitly deny Impersonation on the internal CASs

 

RESOLUTION

 

To correct this behavior, Impersonation has to be allowed on all Internal CASs.

 

Note: After applying the below steps, replication has to be forced for changes to take immediate effect

Note: An iisreset /noforce is required

 

1.      On the Domain Controller, open up Active Directory Sites and Services (Start\All Programs\Administrative Tools\Active Directory Sites and Services)

2.      Navigate to Services > Microsoft Exchange > First Organization > Adminsitrative Groups > Exchange Administrative Group > Servers > <Internal_CAS>

a.      Right-Click on the Internal CAS name and select Properties

b.     Select the Security tab

c.      Locate the Exchange Servers (domain\Exchange Servers) group

d.     Locate the following permission Exchange Web Services Impersonation

e.      Under the Deny section remove the checkmark

f.      Click on Apply and OK

3.      Force Replication of the Domain Controllers using Active Directory Sites and Services

4.      Login to OWA using the External CAS

5.      OWA Print will now be successful

 

This article applies to the following products:
     Messageware OWA Print 2007