# Get recent ASP.NET exceptions
Get-WinEvent -FilterHashtable @{
    LogName = 'Application'
    Id = 1309
    StartTime = (Get-Date).AddHours(-24)
} | ForEach-Object {
    Write-Host "=== Event at $($_.TimeCreated) ===" -ForegroundColor Cyan
    Write-Host $_.Message
    Write-Host ""
} | Select-Object -First 5

# Group exceptions by application
Get-WinEvent -FilterHashtable @{
    LogName = 'Application'
    Id = 1309
    StartTime = (Get-Date).AddDays(-1)
} -ErrorAction SilentlyContinue | ForEach-Object {
    if ($_.Message -match "Application: ([^
]+)") {
        $matches[1]
    }
} | Group-Object | Sort-Object Count -Descending | Format-Table Count, Name

# Import IIS module
Import-Module WebAdministration

# Check Exchange application pool status
Get-ChildItem IIS:\AppPools | Where-Object { $_.Name -match "Exchange|MSExchange" } | Format-Table Name, State, @{N='WorkerProcesses';E={(Get-ChildItem "IIS:\AppPools\$($_.Name)\WorkerProcesses").Count}} -AutoSize

# Check for recently recycled pools
Get-WinEvent -FilterHashtable @{
    LogName = 'System'
    ProviderName = 'WAS'
    StartTime = (Get-Date).AddHours(-24)
} -ErrorAction SilentlyContinue | Where-Object { $_.Message -match "recycle|terminate" } | Format-Table TimeCreated, Message -Wrap

# Check application pool identities
Get-ChildItem IIS:\AppPools | Where-Object { $_.Name -match "Exchange" } | Select-Object Name, @{N='Identity';E={$_.processModel.userName}} | Format-Table -AutoSize

# Check OWA virtual directory
Get-OwaVirtualDirectory | Format-List Server, Name, InternalUrl, ExternalUrl

# Check ECP virtual directory
Get-EcpVirtualDirectory | Format-List Server, Name, InternalUrl, ExternalUrl

# Test OWA connectivity
Test-OwaConnectivity -ClientAccessServer $env:COMPUTERNAME | Format-List Scenario, Result, Latency, Error

# Check for web.config errors
$owaPath = (Get-ItemProperty HKLM:\SOFTWARE\Microsoft\ExchangeServer\v15\Setup).MsiInstallPath + "FrontEnd\HttpProxy\owa"
if (Test-Path "$owaPath\web.config") {
    try {
        [xml]$config = Get-Content "$owaPath\web.config" -ErrorAction Stop
        Write-Host "OWA web.config is valid XML" -ForegroundColor Green
    } catch {
        Write-Host "OWA web.config has errors: $($_.Exception.Message)" -ForegroundColor Red
    }
}

# Check ASP.NET temp folder size
$tempPath = "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files"30319\Temporary ASP.NET Files"
if (Test-Path $tempPath) {
    $size = (Get-ChildItem $tempPath -Recurse | Measure-Object -Property Length -Sum).Sum / 1MB
    Write-Host "ASP.NET Temp folder size: $([math]::Round($size, 2)) MB"2)) MB"
    Get-ChildItem $tempPath | Format-Table Name, LastWriteTime -AutoSize
}

# Check for Exchange-specific temp files
$exchangeTemp = Get-ChildItem $tempPath -Directory | Where-Object { $_.Name -match "root|owa|ecp|ews" }
$exchangeTemp | Format-Table Name, LastWriteTime, @{N='SizeMB';E={(Get-ChildItem $_.FullName -Recurse | Measure-Object -Property Length -Sum).Sum / 1MB}} -AutoSize

# Check Exchange installation folder permissions
$exchangePath = (Get-ItemProperty HKLM:\SOFTWARE\Microsoft\ExchangeServer\v15\Setup).MsiInstallPath
$acl = Get-Acl $exchangePath
Write-Host "Exchange folder permissions:" -ForegroundColor Cyan
$acl.Access | Format-Table IdentityReference, FileSystemRights, AccessControlType -AutoSize

# Check IIS_IUSRS permissions
$iisAcl = Get-Acl "$exchangePath\FrontEnd\HttpProxy\owa"
$iisUser = $iisAcl.Access | Where-Object { $_.IdentityReference -match "IIS_IUSRS|NETWORK SERVICE" }
if ($iisUser) {
    Write-Host "IIS permissions found" -ForegroundColor Green
} else {
    Write-Host "IIS permissions may be missing!" -ForegroundColor Red
}

# Reset OWA virtual directory
$server = $env:COMPUTERNAME

# Remove and recreate OWA virtual directory
Get-OwaVirtualDirectory -Server $server | Remove-OwaVirtualDirectory -Confirm:$false
New-OwaVirtualDirectory -Server $server -WebSiteName "Default Web Site" -InternalUrl "https://mail.contoso.com/owa" -ExternalUrl "https://mail.contoso.com/owa"

# Reset ECP virtual directory
Get-EcpVirtualDirectory -Server $server | Remove-EcpVirtualDirectory -Confirm:$false
New-EcpVirtualDirectory -Server $server -WebSiteName "Default Web Site" -InternalUrl "https://mail.contoso.com/ecp" -ExternalUrl "https://mail.contoso.com/ecp"

# Restart IIS
iisreset /noforce

Import-Module WebAdministration

# Reset Exchange application pool to defaults
$poolName = "MSExchangeOWAAppPool"

# Set pool identity
Set-ItemProperty "IIS:\AppPools\$poolName" -Name processModel.identityType -Value LocalSystem

# Reset memory limits (0 = unlimited)
Set-ItemProperty "IIS:\AppPools\$poolName" -Name recycling.periodicRestart.memory -Value 0
Set-ItemProperty "IIS:\AppPools\$poolName" -Name recycling.periodicRestart.privateMemory -Value 0

# Set recycle time (default: 29 hours to avoid daily restarts at same time)
Set-ItemProperty "IIS:\AppPools\$poolName" -Name recycling.periodicRestart.time -Value "1.05:00:00"05:00:00"

# Disable rapid-fail protection for troubleshooting
Set-ItemProperty "IIS:\AppPools\$poolName" -Name failure.rapidFailProtection -Value $false

# Restart the pool
Restart-WebAppPool -Name $poolName
Write-Host "$poolName restarted" -ForegroundColor Green

# Run from elevated command prompt or PowerShell
# This repairs Exchange components without removing configuration

$setupPath = (Get-ItemProperty HKLM:\SOFTWARE\Microsoft\ExchangeServer\v15\Setup).MsiInstallPath + "bin\Setup.exe"

# Check current Exchange version
Get-ExchangeServer | Format-List Name, AdminDisplayVersion

# Run recovery mode (run as Administrator)
Write-Host "Running Exchange Setup in recovery mode..."
Write-Host "Command: $setupPath /mode:Install /IAcceptExchangeServerLicenseTerms_DiagnosticDataON"
Write-Host ""
Write-Host "This will repair Exchange components. The process may take 30-60 minutes."-60 minutes."
Write-Host "Run this command in an elevated command prompt if PowerShell doesn't work."

# Start-Process -FilePath $setupPath -ArgumentList "/mode:Install /IAcceptExchangeServerLicenseTerms_DiagnosticDataON" -Wait-FilePath $setupPath -ArgumentList "/mode:Install /IAcceptExchangeServerLicenseTerms_DiagnosticDataON" -Wait

# For ConfigurationErrorsException - verify web.config
$exchangePath = (Get-ItemProperty HKLM:\SOFTWARE\Microsoft\ExchangeServer\v15\Setup).MsiInstallPath

$webConfigs = @(
    "$exchangePath\FrontEnd\HttpProxy\owa\web.config",
    "$exchangePath\FrontEnd\HttpProxy\ecp\web.config",
    "$exchangePath\FrontEnd\HttpProxy\ews\web.config"
)

foreach ($config in $webConfigs) {
    if (Test-Path $config) {
        try {
            [xml]$xml = Get-Content $config -ErrorAction Stop
            Write-Host "Valid: $config" -ForegroundColor Green
        } catch {
            Write-Host "ERROR in $config : $($_.Exception.Message)"$_.Exception.Message)" -ForegroundColor Red
            # Backup and restore from template if needed
        }
    }
}

# Check for customizations that may be causing issues
Get-ChildItem "$exchangePath\FrontEnd\HttpProxy\owa" -Filter "*.aspx" | Where-Object {
    $_.LastWriteTime -gt (Get-Date).AddDays(-7)
} | Format-Table Name, LastWriteTime -AutoSize

# Reset permissions on Exchange directories
$exchangePath = (Get-ItemProperty HKLM:\SOFTWARE\Microsoft\ExchangeServer\v15\Setup).MsiInstallPath

# Grant IIS_IUSRS read permissions
$acl = Get-Acl $exchangePath
$rule = New-Object System.Security.AccessControl.FileSystemAccessRule("IIS_IUSRS", "ReadAndExecute", "ContainerInherit,ObjectInherit", "None", "Allow")
$acl.AddAccessRule($rule)
Set-Acl -Path $exchangePath -AclObject $acl

# Grant NETWORK SERVICE permissions
$rule2 = New-Object System.Security.AccessControl.FileSystemAccessRule("NETWORK SERVICE", "ReadAndExecute", "ContainerInherit,ObjectInherit", "None", "Allow")
$acl.AddAccessRule($rule2)
Set-Acl -Path $exchangePath -AclObject $acl

Write-Host "Permissions updated" -ForegroundColor Green

# Reset IIS
iisreset /noforce