Fix DNS Lookup and Outlook Anywhere Errors in Exchange EAC
Question details
The user needs to resolve Access Denied and IIS directory-entry errors for DNS Lookup and Outlook Anywhere in the Exchange Admin Center.

- Product
- Microsoft Exchange Server
- Device & OS
- not provided
- Scenario
- Navigating the Exchange Admin Center (EAC) to manage DNS and Outlook Anywhere settings on a hybrid server.
- Observed behavior
- EAC displays Access Denied and IIS directory-entry errors, even though standard mail flow and Outlook on the web operate normally.
Confirm that your standard mail flow and Outlook on the Web (OWA) are fully functional to isolate the issue directly to the EAC interface and IIS virtual directories.
Consult Exchange Hybrid IT Pro Forums and Microsoft Support
Because hybrid configurations involve complex integrations between on-premises IIS, DNS, and Exchange Online, specialized diagnostic tools are required to resolve administrative permission errors.
Hybrid Exchange errors within the Admin Center, especially those involving IIS directory entries and Access Denied prompts, usually point to underlying backend misconfigurations or corrupted virtual directories.
Attempting manual IIS changes without proper guidance in a hybrid setup can disrupt currently working mail flow.
Take screenshots of the specific Access Denied messages and IIS directory-entry errors shown in the Exchange Admin Center.
Navigate to the official Microsoft Tech Community or Exchange IT Pro forums. Create a detailed post including your server architecture (Exchange version, Hybrid configuration) and the specific errors.
If forum suggestions do not resolve the issue, open a support ticket via your Microsoft 365 Admin Center to request deeper troubleshooting of your hybrid server, IIS, and DNS configuration.

Need a Reliable and Lightweight Office Suite? Try WPS Office
While complex backend server issues like Exchange hybrid errors require specialized IT troubleshooting, your daily document and email management should remain simple and efficient. WPS Office offers a powerful, free alternative to Microsoft Office that is easy to deploy and use.

Frequently Asked Questions
Why does EAC show 'Access Denied' when mail flow works fine?
This usually indicates an issue with IIS virtual directory permissions, authentication settings, or SSL certificates specifically configured for the Exchange Admin Center backend site, rather than the core Transport services that handle actual mail routing.
What is Outlook Anywhere in Microsoft Exchange?
Outlook Anywhere (formerly RPC over HTTP) is a feature that allows external client computers using Microsoft Outlook to connect securely to their corporate Exchange servers over the internet without requiring a VPN.
Can DNS misconfigurations cause IIS directory errors in Exchange?
Yes. If the Exchange server cannot correctly resolve internal or external virtual directory URLs due to local DNS issues, IIS may fail to route the administrative requests properly, leading to directory-entry errors inside the EAC interface.




