Service unavailable, HTTP Error 503. The service is unavailable.

 Environment:

Wanted to publish some services with ADFS and WAP.

ADFS was placed in internal network while WAP was placed in DMZ.

ADFS was configured properly and the default page was accessible internally.

But was getting the following error, while trying the same from the external network.

Error:

Service unavailable, HTTP Error 503. The service is unavailable.

Reason:

TLS 1.0 was disabled on the ADFS server

Solution:

After enabling TLS 1.0 on the ADFS server, the issue was resolved. 

Note: As Registry changes are always critical, so before doing any registry changes, please take backup of your system.

unable to login ADFS with default page after installation

Issue:

After installing the ADFS role successfully on the server, was unable to logged in to the default login page of ADFS.

i.e

 https://ADFS-url/adfs/ls/idpinitiatedsignon.html

was not accessible

Solution:

After searching on internet came to know that i have to enable the default page with the following power shell command.

So open PowerShell with run as administrator on the ADFS server and run the following command, resolved the issue.

Set-AdfsProperties -EnableIdPInitiatedSignonPage $true

Unable to share any local drive through remote desktop Connection with remote system (Resolved)

  Issues:

1:

Unable to copy any file from local system to a remote system, connected through remote desktop connection

2:

unable to share the local drives with remote system through Remote Desktop Connection

Or

The local drives not visible on the remote system through Remote Desktop Connection

3:

The past option was grayed out

Solution:

After looking in local security policy as below

Type-->GPEDIT.msc in run-->Local computer policy-->computer configuration-->Administrative Templates-->windows components-->Remote Desktop Services-->Remote Desktop Session Host--->Device and Resource Redirection-->Do not allow Drive redirection--option was --Enabled

So after changing option to not configured the above issues were resolved

Unable to copy any file from local system to a remote system, connected through remote desktop connection

 Issues:

1:

Unable to copy any file from local system to a remote system, connected through remote desktop connection

2:

unable to share the local drives with remote system through Remote Desktop Connection

Or

The local drives not visible on the remote system through Remote Desktop Connection

3:

The past option was grayed out

Solution:

After looking in local security policy as below

Type-->GPEDIT.msc in run-->Local computer policy-->computer configuration-->Administrative Templates-->windows components-->Remote Desktop Services-->Remote Desktop Session Host--->Device and Resource Redirection-->Do not allow Drive redirection--option was --Enabled

So after changing option to not configured the above issues were resolved

your organization has disabled this device.(Resolved)

Issue:

One of office 365 user was trying to open outlook on his system but were getting the following error.

Error: 

Something went wrong, your organization has disabled this device 

To fix this, contact your system administrator and provide the error code 135011

And after clicking on the continue button, on the next page was getting the below error.

We couldn't sign you in. if this error persists. Contact your system administrator and provide the error code CAA20003

Solution:

First i have to note the name of device on which the user was facing the issue.

Then, Go to "https://portal.azure.com" then Azure active directory then All devices--->then search for the device and here the device was disabled. after enabling the device here, the issue was resolved. 

Mailbox migration failed with The connection to the server 'autodiscover.domain.com' could not be completed

Issue:

was trying to migrate a mailbox from office 365 to on premises exchange server 2016.

was getting the following error. 

 "The connection to the server 'autodiscover.domain.com' could not be completed"

Resolution:

As recently i had changed the password of the admin user in the migration endpoint.

so after updating the password in the migration endpoint with the following steps the issue was resolved.

Steps:

login to "https://outlook.office.com/ecp"

then Recipients ---> migration-->click the 3 dots and click on Migration Endpoints. double click on the migration endpoint and update the password.

ContentIndexErrorMessage : The Microsoft Exchange Search Host Controller Service is not running on server

After updating Exchange 2016 CU16 to CU19 and applying the "HAFNIUM" security patches, some databases were in Failed state. 

Error 1:

in ECP was getting the error "Content index state: Failed" against the database

Error 2:

in Exchange Shell, running 

Get-MailboxDatabase DatabaseName | Get-MailboxDatabaseCopyStatus | ft Name,*index* 

was getting this error

"ContentIndexErrorMessage     : The Microsoft Exchange Search Host Controller Service is not running on server"

Solution:

After checking the "Microsoft Exchange Search Host Controller" Service on the effected server, found that this "Microsoft Exchange Search Host Controller" was in stopped/disabled state. 

after changing the startup type to automatic of "Microsoft Exchange Search Host Controller" service and starting it and restart the server.

the issue was resolved.