You are currently offline, waiting for your internet to reconnect

On-premises users can't view free/busy information of Exchange Online users

PROBLEM
Users who have a mailbox in the on-premises environment cannot view free/busy information for mailboxes in Exchange Online in the following scenario:
  • You have a hybrid deployment of Exchange Online and either on-premises Exchange Server 2016 or Exchange Server 2013.
  • You've set up an intraorganization connector between the Exchange Online organization and the on-premises Exchange organization.
  • You've set up an organization relationship between the Exchange Online organization and the on-premises Exchange organization.
CAUSE
This issue occurs if the on-premises Exchange server cannot obtain an authentication token by using OAuth. Exchange doesn't try to use the organization relationship if an intraorganization connector exists.
SOLUTION
To resolve this issue, follow these steps.

Step 1: Verify the OAuth certificate

  1. Open the Exchange Management Shell.
  2. Identify the certificate for which the authentication configuration is looking. To do this, run the following command:
    Get-AuthConfig |fl
  3. If no value is returned in the output for CurrentCertificateThumbprint, create a new certificate. To do this, run the following command:
    New-ExchangeCertificate -KeySize 2048 -SubjectName "cn= Microsoft Exchange ACS Certificate" -FriendlyName "Microsoft Exchange Server ACS Certificate" -PrivateKeyExportable $true -Services SMTP -DomainName <YourPrimarySmtpDomain>
  4. Assign the new certificate for OAuth authentication. To do this, run the following commands:
    Set-AuthConfig -NewCertificateThumbprint <ThumbprintFromStep3> -NewCertificateEffectiveDate (Get-Date)
    Set-AuthConfig -PublishCertificate

Step 2: Specify the user account for the partner application

  1. Open the Exchange Management Shell.
  2. Identify the linked user account for the partner application. To do this, run the following command:
    Get-PartnerApplication |fl
  3. If no account is returned in the output, add the appropriate user account. To do this, run the following command:
    Set-PartnerApplication "Exchange Online" -LinkedAccount "contoso.com/Users/Exchange Online-ApplicationAccount"
MORE INFORMATION
For more information about the cmdlets used in this article, see the following Microsoft TechNet resources:
Properties

Article ID: 3137325 - Last Review: 03/10/2016 23:03:00 - Revision: 2.0

Exchange Server 2016 Enterprise Edition, Exchange Server 2016 Standard Edition, Microsoft Exchange Server 2013 Enterprise, Microsoft Exchange Server 2013 Standard, Microsoft Exchange Online

  • o365022013 o365 o365a o365e o365m hybrid KB3137325
Feedback
tml>