FIX: Moving mailboxes as part of a hybrid Office 365 migration fails in Forefront Unified Access Gateway 2010 Service Pack 4

View products that this article applies to.

Symptoms

When you try to move mailboxes as part of a hybrid Microsoft Office 365 migration in Microsoft Forefront Unified Access Gateway 2010 Service Pack 4, the move may fail for some mailboxes. Additionally, you receive the following error message:

The call to https://path/mrsproxy.svc failed.
The remote server returned an error: (401)

↑ Back to the top

Cause

This problem can occur if the on-premises Exchange endpoints are published by Unified Access Gateway 2010. Unified Access Gateway expects all clients to support cookies. However, this is not the case when Office 365 is the client. When a client sends seven successive requests without a Unified Access Gateway session cookie from the same source IP and port, Unified Access Gateway rejects additional requests. This leads to the mailbox move failure.

↑ Back to the top

Resolution

This problem is fixed in Rollup 2 for Forefront Unified Access Gateway 2010 Service Pack 4 .

↑ Back to the top

Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

↑ Back to the top

More Information

To resolve this problem, install the hotfix on the Unified Access Gateway server. This hotfix enables you to configure the number of requests that Unified Access Gateway will accept without a session cookie being provided.

After you apply this hotfix to the Unified Access Gateway server, you must add the following InconsistentCookieThreshold DWORD value:

Registry location:HKEY_LOCAL_MACHINE\SOFTWARE\WhaleCom\e-Gap\von\UrlFilter
DWORD name: InconsistentCookieThreshold
DWORD value: 30 (Decimal)

Note For especially large mailboxes, you may have to increase the DWORD value.

Important You should remove this registry subkey from the Unified Access Gateway server after you complete the mailbox migration task.

After you apply this registry subkey you must enable the Unified Access Gateway server configuration and then perform an Internet Information Services (IIS) reset.

↑ Back to the top