Yes, from your description, this certainly looks like a two-hop problem. This is not trivial to fix, basically you need to configure delegation between the web server and the exchange server so that the web server can use the kerberos ticket issued when the user logs on to the web server.
, . , ( , ..) - . , , .