We have errors in the Evt log on the exchange server which match what is described here:
Our Exchange servers are in the Organization Management group which has the " explicit Deny permission on “Exchange Web Services Token Serialization” and “Exchange Web Services Impersonation” rights" and thus get the errors in the event log. Can I remove the server accounts from that group without causing any new problems?