Hybrid Config Wizard Cannot Continue the Application is Improperly Formatted

So I inherited a network that is a total mess! The previous Netadmin was a programmer that didn't know much about networking and basically stumbled his way through setting stuff up. I have an exchange server 2013 standard that is so poorly configured I don't know how it is even working. Every time I change something to make it work the way it should it breaks something else. I thought maybe it would be a good idea just to set up an office 365 hybrid environment and slowly migrate to it and get off this server. I got AD sync set up correctly and working then went to the exchange server to do the hybrid wizard on the ecp when I got to the end and got this very big error. I checked the certs and a few other things I was suggested by other forms and still the same issue after running the update. Has anyone seen this or know how to fix it. I am at a loss and stuck.

Image: https://content.spiceworksstatic.com/service.community/p/post_images/0000388938/5e42d51a/attached_image/hybrid_exchange_error_1.jpg Here is the output in case you can't read the pic.

Text

                    The wizard did not complete successfully. Please see the list below for error details. Updating hybrid configuration failed with error ‎'Microsoft.Exchange.Management.Hybrid.CouldNotCreateTenantSessionException: Could not create Tenant Session: Could not open Remote Powershell Runspace: Connecting to remote server ps.outlook.com failed with the following error message : Access is denied. For more information, see the about_Remote_Troubleshooting Help topic.. ---> Microsoft.Exchange.Management.Hybrid.CouldNotOpenRunspaceException: Could not open Remote Powershell Runspace: Connecting to remote server ps.outlook.com failed with the following error message : Access is denied. For more information, see the about_Remote_Troubleshooting Help topic.. ---> System.Management.Automation.Remoting.PSRemotingTransportException: Connecting to remote server ps.outlook.com failed with the following error message : Access is denied. For more information, see the about_Remote_Troubleshooting Help topic.   at System.Management.Automation.Runspaces.AsyncResult.EndInvoke‎()‎    at System.Management.Automation.Runspaces.Internal.RunspacePoolInternal.EndOpen‎(IAsyncResult asyncResult)‎    at System.Management.Automation.RemoteRunspace.Open‎()‎    at Microsoft.Exchange.Management.Hybrid.RemotePowershellSession.Connect‎(PSCredential credentials, CultureInfo sessionUiCulture)‎    --- End of inner exception stack trace ---    at Microsoft.Exchange.Management.Hybrid.RemotePowershellSession.Connect‎(PSCredential credentials, CultureInfo sessionUiCulture)‎    at Microsoft.Exchange.Management.SystemConfigurationTasks.UpdateHybridConfiguration.<>c__DisplayClass7.<InternalProcessRecord>b__3‎()‎    at Microsoft.Exchange.Management.Hybrid.StandardWorkflow..ctor‎(ILogger logger, IUserInterface ui, HybridConfiguration hybridConfigurationObject, Func`1 createOnPremisesSession, Func`1 createTenantSession)‎    --- End of inner exception stack trace ---    at Microsoft.Exchange.Management.Hybrid.StandardWorkflow..ctor‎(ILogger logger, IUserInterface ui, HybridConfiguration hybridConfigurationObject, Func`1 createOnPremisesSession, Func`1 createTenantSession)‎    at Microsoft.Exchange.Management.SystemConfigurationTasks.UpdateHybridConfigurationLogic.ProcessRecord‎(ILogger logger, IUserInterface ui, HybridConfiguration hybridConfigurationObject, Func`1 createOnPremisesSessionFunc, Func`1 createTenantSessionFunc, Action`3 writeErrorFunc, Boolean forceUpgrade)‎‎'. Additional troubleshooting information is available in the Update-HybridConfiguration log file on server EXCHANGE located at C:\Program Files\Microsoft\Exchange Server\V15\Logging\Update-HybridConfiguration\HybridConfiguration_2_11_2020_16_20_42_637170348429019688.log

Below is the error in the log file

Text

                  [02/11/2020 15:04:23]    INFO : Hybrid Configuration Object                                Features                  : FreeBusy, MoveMailbox, Mailtips, MessageTracking, OwaRedirection, OnlineArchive, SecureMail, Photos                                Domains                   : tufftorq.com                                OnPremisesSmartHost       : ttcmail.tufftorq.com                                ClientAccessServers       :                                 EdgeTransportServers      :                                 ReceivingTransportServers : EXCHANGE                                SendingTransportServers   : EXCHANGE                                TlsCertificateName        : <I>CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US<S>CN=ttcmail.tufftorq.com, O=Tuff Torq Corporation, L=Morristown, S=Tennessee, C=US[02/11/2020 15:04:23]    INFO : Opening runspace to http://exchange/powershell?serializationLevel=Full[02/11/2020 15:04:23]    INFO : Successfully connected to On-Premises[02/11/2020 15:04:23]    INFO : Opening runspace to https://ps.outlook.com/powershell-liveid?serializationLevel=Full[02/11/2020 15:04:27]    INFO : Successfully connected to Tenant[02/11/2020 15:04:27]    INFO : Task='Check Tenant Prerequisites' Step='CheckPrereqs' START[02/11/2020 15:04:27]    INFO : Hybrid Engine will now test tenant version.[02/11/2020 15:04:27]    INFO : Session=Tenant Cmdlet=Get-OrganizationConfig START[02/11/2020 15:04:27]    INFO : Session=Tenant Cmdlet=Get-OrganizationConfig FINISH Time=593.7437ms[02/11/2020 15:04:27]   ERROR : Subtask CheckPrereqs execution failed: Check Tenant Prerequisites                                Object reference not set to an instance of an object.                                   at Microsoft.Exchange.Data.PropertyBag.OnDeserialized(StreamingContext context)                                   at System.Runtime.Serialization.SerializationEvents.InvokeOnDeserialized(Object obj, StreamingContext context)                                   at System.Runtime.Serialization.ObjectManager.RaiseOnDeserializedEvent(Object obj)                                   at System.Runtime.Serialization.ObjectManager.RegisterObject(Object obj, Int64 objectID, SerializationInfo info, Int64 idOfContainingObj, MemberInfo member, Int32[] arrayIndex)                                   at System.Runtime.Serialization.Formatters.Binary.ObjectReader.RegisterObject(Object obj, ParseRecord pr, ParseRecord objectPr, Boolean bIsString)                                   at System.Runtime.Serialization.Formatters.Binary.ObjectReader.ParseObjectEnd(ParseRecord pr)                                   at System.Runtime.Serialization.Formatters.Binary.__BinaryParser.Run()                                   at System.Runtime.Serialization.Formatters.Binary.ObjectReader.Deserialize(HeaderHandler handler, __BinaryParser serParser, Boolean fCheck, Boolean isCrossAppDomain, IMethodCallMessage methodCallMessage)                                   at System.Runtime.Serialization.Formatters.Binary.BinaryFormatter.Deserialize(Stream serializationStream, HeaderHandler handler, Boolean fCheck, Boolean isCrossAppDomain, IMethodCallMessage methodCallMessage)                                   at Microsoft.Exchange.Compliance.Serialization.Formatters.TypedBinaryFormatter.Deserialize(Stream serializationStream, SerializationBinder binder)                                   at Microsoft.Exchange.Data.SerializationTypeConverter.DeserializeObject(Object sourceValue, Type destinationType)                                   at Microsoft.Exchange.Configuration.MonadDataProvider.MonadCommand.Deserialize(PSObject psObject)                                   at Microsoft.Exchange.Management.Hybrid.RemotePowershellSession.RunOneCommand[T](String command, SessionParameters parameters, Boolean ignoreNotFoundErrors)                                   at Microsoft.Exchange.Management.Hybrid.RemotePowershellSession.RunOneCommandSingleResult[T](String command, SessionParameters parameters, Boolean ignoreNotFoundErrors)                                   at Microsoft.Exchange.Management.Hybrid.PowerShellCommonSession.GetOrganizationConfig()                                   at Microsoft.Exchange.Management.Hybrid.TenantDetectionTask.CheckPrereqs(ITaskContext taskContext)                                   at Microsoft.Exchange.Management.Hybrid.Engine.ExecuteSubStep(String subStepName, ITaskContext taskContext, ITask task, Func`3 substep, Func`4 createException, Boolean throwOnFalse)[02/11/2020 15:04:27]    INFO : Task='Check Tenant Prerequisites' Step='CheckPrereqs' FINISH Result=False Time=593.7437ms[02/11/2020 15:04:27]    INFO : --------------------------------------------------------------------------------------------------------------------------------[02/11/2020 15:04:27]    INFO : Session=OnPrem Total Cmdlet Time=0s[02/11/2020 15:04:27]    INFO : Session=Tenant Total Cmdlet Time=0.5937437s

check Best Answer

*Update*

After long days and weekends, I finally figured it out on my own. The issue was so stupid its funny. I was able to get 2016 going by doing what I mentioned above. Next, I slowly broke down every component of how Hybrid connects and found no issues. Boggled I created a test domain and set it with hybrid and it worked right away. Still confused I could not figure out what was going on. So hopeless and out of option I thought well why not remove every text record from my domain and test to see if one of them is causing the issue. I started by redoing my text record shown in the external nslookup that is pictured in my post and this time putting the Hash string O365 was looking for first instead of my SPF record and boom it worked. No clue why that mattered. I am using Amazon Route 53 so not sure if that had anything to do with it. But I now have it working.

Was this post helpful? thumb_up thumb_down

View Best Answer in replies below

Read these next...

How do spammers figure out new email accounts so quickly?
Collaboration
Hey folks,I've noticed recently that very quickly after setting up a new user in Microsoft 365 with an email address these accounts are getting phishing emails. Sometimes within a week or two. How is this possible? Wondering if there is malware on someone...
How To Prevent Against Login Credential Theft Via Cookies
Security
Is this still a concern?I realize there are differing points of view on this topic but are hackers still able to steal credentials via cookies somehow?Based on my work, it would be time-consuming (which I know is the price of increased security) to clear ...
Spark! Pro Series - 17th October 2022
Spiceworks Originals
Welcome to another Monday. This edition has been hastily thrown together as for some reason, my employer has decided to make me work for my living, Imagine! Enjoy my scribblings and Spice it up if you please...
Snap! Faster cracking, Chat with the dead, Solar Eclipses, Overemployed firing
Spiceworks Originals
Your daily dose of tech news, in brief. It's Monday. How was your weekend? Flashback: Back on October 17, 1994, IBM cut back its line of personal computers from nine models to four. The plan at the time was to have four divisions: "IBM PC for ...
Nerd Journey # 190 - Delivering a Conference Talk at VMware Explore US 2022
Best Practices & General IT
For the first time ever, John White and I delivered an in-person session to talk about some of the patterns we've run across during our 4 years of career podcasting. This episode details how we prepared for the session (even ideation) all the way throug...