Exchange 2013 Autodiscover. 500 internal server error. how to fix?

Question

Microsoft Exchange

after CU update on Exchange 2013, Outlook 2016
clients stopped connecting to Outlook 2010, 2013 work, OWA works, new 2016 - no - constantly asks for password (inside network and outside)
https://testconnectivity.microsoft.com reports:

spoiler

Attempting to send an Autodiscover POST request to potential Autodiscover URLs.
Autodiscover settings weren't obtained when the Autodiscover POST request was sent.
Additional Details
Elapsed Time: 1952 ms.
Test Steps
The Microsoft Connectivity Analyzer is attempting to retrieve an XML Autodiscover response from URL https://autodiscover.domain.ru:443/Autodiscover/Au... for user [email protected]
The Microsoft Connectivity Analyzer failed to obtain an Autodiscover XML response.
Additional Details
An HTTP 500 response was returned from Unknown.
HTTP Response Headers:
request-id: 28560d3f-60a9-4d38-ba3e-9fe5d42aecc8
X-CalculatedBETarget: kvmail.mydomain.local
X-DiagInfo: KVMAIL
X-BEServer: KVMAIL
Cache-Control: private
Set-Cookie: ClientId=9QNDYXGKKVZALFBOSQ; expires=Wed, 25-Jul-2018 08:38:55 GMT; path=/; HttpOnly,X-BackEndCookie=S-1-5-21-1903798712-2405474663-4193718316-2295=u56Lnp2ejJqBz53IzJybxsrSxsfNntLLzsnG0sbJmczSzsyenMecyJqbzp2egYHNz87I0s/H0s3Lq8/HxczHxcrJ; expires=Thu, 24-Aug-2017 08:38:56 GMT; path=/Autodiscover; secure; HttpOnly
Server: Microsoft-IIS/8.5
X-AspNet-Version: 4.0.30319
Persistent-Auth: true
X-Powered-By: ASP.NET
X-FEServer: KVMAIL
Date: Tue, 25 Jul 2017 08:38:55 GMT
Content-Length: 0
Elapsed Time: 1952 ms.

further on the server:

spoiler

[PS] C:\>Test-WebServicesConnectivity
Source ServiceEndpoint Scenario Result Latency
(MS)
------ --------------- -------- ------ -------
kvmail.mydomain.local autodiscover.domain.ru Автообнаружение: поставщик ... Failure 22
kvmail.mydomain.local EWS: GetFolder Skipped 0

rolled CU 15 - did not help ... rolled CU 17 - did not help.
all URLs in virtual directories of the external address mail.domain.ru , in DNS there is a link to the internal server
mail.domain.ru 192.168.0.12
autodiscover.domain.ru 12.168.0.12
kvmail.mydomain.local 192.168.0.12
the certificate was purchased, it is registered mail.domain.ru, the certificate weighs on IIS services, SMTP
recreated all virtual directories ( https://technet.microsoft.com/ru-ru/library/dd2981...
did inheritance on domain users (advanced components)
in IIS on directories gave permissions to the C:\inetpub\wwwroot folder to read and execute
when opening https://192.168.0.12/Autodiscover/Autodiscover.xml(from the outside the same) asks for a password, after entering it shows:

spoiler

This XML file does not appear to have any style information associated with it. The document tree is shown below.
600Недопустимый запрос

rearranged IIS - did not help.
shoveled heaps of forums, I can not find a solution. can you tell me some ideas?

Answer 1

after all the manipulations, it helped:
1. on all connectors: web, expr, exch
Set-OutlookProvider-Identity web -CertPrincipalName $null
2. in IIS on the default web site in the virtual directories EWS and Autodoscover and Microsoft-AS - authentication
restart the server. I found Egor for which I thank him

Answer 2

1. autodiscover is not in c:\inetpub\wwwroot (but somewhere here: c:\program files\microsoft\exchange server\v15\frontend\httpproxy\autodiscover if you haven't changed anything)
2. show the output:
In general, the error indicates that the xml file is not available.

Answer 3

Hello
look here: https://community.spiceworks.com/topic/1524535-exc...
Show output:
Get-WebServicesVirtualDirectory
Get-clientaccessServer
Get-mapivirtualdirectory