I am trying to provision Exchange 2010 Accounts. In the URI I tried to specify one of the CAS server names, and virtual name for the load balancer. I keep getting stopped-extension-dll-exception error. In the event log I get it gets the following: The extensible extension returned an unsupported error. The stack trace is: "Microsoft.MetadirectoryServices.ExtensionException: Connecting to remote server failed with the following error message : WinRM cannot process the request. The following error occured while using Kerberos authentication: The network path was not found. Possible causes are: -The user name or password specified are invalid. -Kerberos is used when no authentication method and no user name are specified. -Kerberos accepts domain user names, but not local user names. -The Service Principal Name (SPN) for the remote computer name and port does not exist. -The client and remote computers are in different domains and there is no trust between the two domains. After checking for the above issues, try the following: -Check the Event Viewer for events related to authentication. -Change the authentication method; add the destination computer to the WinRM TrustedHosts configuration setting or use HTTPS transport. Note that computers in the TrustedHosts list might not be authenticated. -For more information about WinRM configuration, run the following command: winrm help config. For more information, see the about_Remote_Troubleshooting Help topic. at Exch2010Extension.Exch2010ExtensionClass.BeginExportToCd(String connectTo, String domain, String server, String user, String password) Forefront Identity Manager 4.0.2592.0" Have anyone experienced this error?

what's your Exchange 2010 EPS URI? I bet you just have wrong URL in AD DS MA settings or other connetivity problems.

Have you read How to Configure the Exchange 2010 RPS URI ? I think it's a good starting point. If things in the article aren't clear, please provide feedback so I can correct them.http://setspn.blogspot.com

I had to add the correct SPN for the account used AD MA.

Could you elaborate more on your solution? Did you set up spn for AD MA service account? Thanks for your help in advance. -Henry Min