Symptoms
When you try to request free/busy information for a user in a different forest in a trusted cross-forest topology, the request fails and generates the following error message:
-
MessageText: "Autodiscover failed for email address user@domain.com with error Microsoft.Exchange.InfoWorker.Common.Availability.AutoDiscoverFailedException: The remote server returned an error: (400) Bad Request.. The request information is Discovery URL : https:// targetdomain.com/Autodiscover/Autodiscover.xml, EmailAddress : <User>SMTP:user@ targetdomain.com. ---> System.Net.WebException: The remote server returned an error: (400) Bad Request.
at System.Net.HttpWebRequest.EndGetResponse(IAsyncResult asyncResult)
-
at Microsoft.Exchange.InfoWorker.Common.Availability.AutoDiscoverRequest.EndInvoke(IAsyncResult asyncResult)
--- End of inner exception stack trace ---
Cause
This is a known issue in the April 2021 and May 2021 security update for Microsoft Exchange Server 2019, 2016, and 2013.
Workaround
To work around this issue, use either of the following methods.
Method 1
Do not use a service account when you configure the availability address space. To configure the address space effectively, follow these steps:
-
Create a "<targetdomain>\<fbaccount>" account in the target forest.Note: This can be a regular user account. No mailbox is required.
-
Grant permissions to the new account in the target forest:
-
set-AvailabilityConfig -PerUserAccount <targetdomain>\<fbaccount>
-
-
In the source forest, remove the existing availability address space:
-
remove-AvailabilityAddressSpace <ID of the AvailabilityAddressSpace of Target domain>
-
-
Add a new availability address space. This time, set -UseServiceAccount to $false, and use the -Credentials option:
-
Add-AvailabilityAddressSpace -ForestName <Target Forest Name> -AccessMethod PerUserFB -UseServiceAccount $false -Credentials (Get-Credential)
-
-
When you are prompted for credentials, enter the credentials for targetdomain\fbaccount.
-
Restart Internet Information Services (IIS) by running the following PowerShell cmdlet:
-
Restart-Service W3SVC, WAS
Method 2
-
Configure federated sharing between the Exchange organizations.
-
Restart Internet Information Services (IIS) by running the following PowerShell cmdlet:
-
Restart-Service W3SVC, WAS
References
Configure federated sharing between Exchange organizations | Microsoft Docs
