Petergal's SBS Blog

Providing an insight to the day to day technical issues a Microsoft SBS Support Engineer faces.

Blogs

80090308 "The token supplied to the function is not valid"

  • Comments 15
  • Likes

 

The customer was getting the above error when clicking on Public Folders in Exchange System Manager.  He was also getting the following error when running the Add Distribution Group wizard and selecting to create an "archive public folder":

 

---------------------------
Add Distribution Group Wizard
---------------------------
The wizard could not successfully configure this group. The following could not be completed:

 

- The Exchange public folder could not be created.

 

Do you want to keep this group?
---------------------------
Yes   No  
---------------------------

 

This article was followed without success.  What we did to resolve it was to remove a value in Active Directory using ADSIEdit.  We had to install the Windows 2003 Support Tools to get access to ADSIEdit.  With the SBS 2003 media, the support tools are located in cd2\support\tools\suptools.msi.  The attribute is msExchSecureBindings.  The value is :443:. 

 

Specifically,

Configuration >

    Services >

        Microsoft Exchange >

            Domain Name >

                Administrative Groups >

                    First Administrative Group >

                        Servers >

                            Servername >

                                Protocols >

                                    HTTP >

                                          1 >

                                              Exadmin

We right clicked on Exadmin and clicked Properties.  We scrolled down until we found msExchSecureBindings and clicked Edit.  By default, the value was/is :443: - we clicked to highlight :443: and clicked Remove.  It then showed <Not Set> for msExchSecureBindings.  We then restarted the Microsoft Exchange System Attendant and then restarted the IISAdmin service. 

 

For all you (us) geeks, here is the full "distinguishedName":  CN=Exadmin,CN=1,CN=HTTP,CN=Protocols,CN=SERVER,CN=Servers,CN=first administrative group,CN=Administrative Groups,CN=COMPANY,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=company,DC=local

 

The root cause is because the certificate that was installed in IIS did not contain the "servername" in the "subject" field (you have to view the certificate and click the details tab to see this field).

Other errors per this article are:

The SSL certificate server name is incorrect.
ID no: c103b404
Exchange System Manager

The connection was aborted. Ensure that the settings on your default Web site are correct and refresh the Public Folder Tree
ID no: c103b402
Exchange System Manager

 

Have a good weekend!

 

Petergal

Comments
  • <p>Great - fixed problem straight away, after having spent several hours trying to resolve why I couldn't get to the public folders on the exchange server manager.</p>

  • <p>The token supplied to the function is invalid. ID no: 80090308 Exchange System Manager The operation completed successfully. Facility: Win32 ID no: c0070000 Exchange System Manager Er det n ...</p>

  • <p>Thank you very much. &nbsp;The fix I have been trying to find for a long time! </p>

  • <p>Thanks so much Peter!</p> <p>This solved the specific</p> <p>The SSL certificate server name is incorrect. </p> <p>ID no: c103b404 </p> <p>Exchange System Manager</p> <p>error we had on a SBS 2003 SP2 server.</p> <p>All other suggestions, also as mentioned in KB324345 did not work for us.</p>

  • <P>Thank you very much for this documented solution. &nbsp;I waded through Microsoft KB articles with no success, and then I stumbled on this. &nbsp;Problem solved!</P>

  • <p>Thanks heaps for this. I had an identical problem and had also tried the linked support article to no avail. This fixed it a treat!</p>

  • <P>thanks very much, this is the 6th or 7th article I've looked at and the only one thus far gave the correct answer my case.</P>

  • <p>Cheers Peter, worked a treat.</p> <p>NB: I made the edit and did an &quot;iisreset /restart&quot; -- All tested and working (ie. no requirement to restart exchange services)</p> <p>Cheers.</p>

  • <p>Wow!! &nbsp;Thank you!! &nbsp;This fixed us right up. &nbsp;This is really good documentation.</p> <p>Thanks again!</p> <p>Danny Parrott </p> <p>Region 16 Education Service Center</p> <p>Amarillo, TX</p>

  • <p>Thanks very much for this... It worked a treat!</p>

  • <P>Hi</P> <P>I also had this issue on an SBS Standard system but initially the above solution did not resolve the problem.</P> <P>In this case there was a self signed certificate of say server.internalname.local and a purchased certificate of server.internetname.com. When I changed the IIS certificate back to the self signed one it all started to work thus proving that it was definately the certificate causing the problem. IIS restarts, System Attendant restarts, server restarts did not resolve the issue.</P> <P>The 'Require secure channel (SSL)' settings had been removed and the ADSIEdit msExchSecureBinding setting was clear.</P> <P>However, by changing the certificate back to the self signed one, and then back again to the secure external one the ADSI settings had been changed. This time clearing them did the job.</P> <P>So if you still have problems try this:</P> <P>1. Remove the 'Require secure channel (SSL)' setting as above.</P> <P>2. Change the IIS certificate for the Default Web Site back to the original self signed certificate.</P> <P>3. Test the System Manager to make sure you can now access the Public Folders, this ensures that the SSL certificate is the real cause of the issue.</P> <P>4. Change the SSL certificate back to the external secure certificate.</P> <P>5. Restart IIS with iisreset /restart.</P> <P>Run ADSIEdit in teh mmc console and remove the msExchSecureBinding setting as above.</P> <P>6. Test the System Manager again, with luck all should be well.</P>

  • <p>Here's a virtual round on me! &nbsp;Thanks a million for posting this, I would have never found it. </p>

  • <p>PingBack from <a rel="nofollow" target="_new" href="http://www.hilpers.com/1206118-exchange-server-2003-problem-public">http://www.hilpers.com/1206118-exchange-server-2003-problem-public</a></p>

  • <p>PingBack from <a rel="nofollow" target="_new" href="http://www.keyongtech.com/4145172-sync-public-folders">http://www.keyongtech.com/4145172-sync-public-folders</a></p>

  • <p>PingBack from <a rel="nofollow" target="_new" href="http://www.teknobot.co.uk/archives/94">http://www.teknobot.co.uk/archives/94</a></p>