When you try to move mailboxes as part of a hybrid Microsoft Office 365 migration in Microsoft Forefront Unified Access Gateway 2010 Service Pack 4, the move may fail for some mailboxes. Additionally, you receive the following error message:
The call to https://path/mrsproxy.svc failed.
The remote server returned an error: (401)
This problem can occur if the on-premises Exchange endpoints are published by Unified Access Gateway 2010. Unified Access Gateway expects all clients to support cookies. However, this is not the case when Office 365 is the client. When a client sends seven successive requests without a Unified Access Gateway session cookie from the same source IP and port, Unified Access Gateway rejects additional requests. This leads to the mailbox move failure.
This problem is fixed in Rollup 2 for Forefront Unified Access Gateway 2010 Service Pack 4.
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
To resolve this problem, install the hotfix on the Unified Access Gateway server. This hotfix enables you to configure the number of requests that Unified Access Gateway will accept without a session cookie being provided.
After you apply this hotfix to the Unified Access Gateway server, you must add the following InconsistentCookieThreshold DWORD value:
DWORD name: InconsistentCookieThreshold
DWORD value: 30 (Decimal)
Note For especially large mailboxes, you may have to increase the DWORD value.
Important You should remove this registry subkey from the Unified Access Gateway server after you complete the mailbox migration task.
After you apply this registry subkey you must enable the Unified Access Gateway server configuration and then perform an Internet Information Services (IIS) reset.
Learn about the terminology that Microsoft uses to describe software updates.