Website under construction

Using the Microsoft Exchange Best Practices Analyzer 
You can also run the Exchange Best Practices Analyzer on the Web Application Proxy server. You can 
do this via the Server Manager GUI. In the far left pane, select Local Server and then scroll down to 
Best Practices Analyzer in the middle pane, as shown in Figure 2-89. 

---

84 
CHAPTER 2 | Software-defined datacenter 
Figure 2-89:
Best Practices Analyzer in Server Manager 
On the right side of the Server Manager GUI, click Tasks and then select Start BPA Scan, as depicted in 
Figure 2-90. 
Figure 2-90:
Starting a BPA Scan 
You also can run the Best Practices Analyzer by using the following Windows PowerShell cmdlet: 
Invoke-BpaModel Microsoft/Windows/RemoteAccessServer
Get-BpaResult Microsoft/Windows/RemoteAccessServer
In this case, there is an issue related to certificate problems specifically (Figure 2-91); an error message 
appears stating, "Web Application Proxy could not publish an application due to certificate problems." 
Figure 2-91:
Viewing the Best Practices Analyzer results 
The event listed in the Best Practices Analyzer pane provides details that will help you to resolve the 
issue, as shown in Figure 2-92. 

---

85 
CHAPTER 2 | Software-defined datacenter 
Figure 2-92:
Viewing details from the Best Practices Analyzer 
The table on TechNet offers the following suggestion for event 12021: 
Make sure that the certificate thumbprints that are configured for Web Application Proxy applications 
are installed on all the Web Application Proxy machines with a private key in the local computer store. 
Armed with this information, you can review the certificates on the Web Application Proxy server to 
ensure that they have the correct names and expiration dates, and that the thumbprint matches the 
one on the server. Then, you can review the certificates on the server, ensure that they are correct, and 
reissue them if they are incorrect.