EMC - initialization failed - Kerberos problem
http://social.technet.microsoft.com/Forums/en-US/exchangesvradmin/thread/82f99f9d-e3d6-4bfd-9098-1046934d584b/ <br> <br> Problem is similar to that in link. I un-installed one of two Exchange 2010 servers holding CA, HT and MB roles using add-remove programs. I removed any DNS records pointing to the old server and did what Gen Li recommended in link. Still no luck. EMC will not open: <br> winrm client cannot process request because the server name cannot be resolved. <br> But why is EMC trying to connect to a server that was retired?
May 16th, 2011 12:41am

By the way, Gen Li's commands result in an error: "no command proxies have been created, because all of the requested remote commands would shadow existing commands. Use the AllowClobber parameter if you want to shadow existing commands." <br> I can connect to the server manually (by selecting a new "forest").
Free Windows Admin Tool Kit Click here and download it now
May 16th, 2011 12:54am

Hi, Because you can connect to the server manually by selecting a new forest. So I think it is not due to the permission or the Credential. Could you please try the following setups: 1. Run EMC as administrator 2. Right click “Microsoft Exchange On-Premises (CAS.domain.com)”àclick “Properties”à Select “Specify a server to connect to” and choose the new CAS server. Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
May 17th, 2011 11:49am

There is no such option. Will post screen shots later.
Free Windows Admin Tool Kit Click here and download it now
May 17th, 2011 6:55pm

Half of the tools in the EMC are gone (no icons). Cannot run ExBPA - will try command-line equivalent test-systemhealth.
May 17th, 2011 7:21pm

OK, first of all, some clarifications. This is the second Exchange 2010 SP1 server installed. It replaced another one that I have removed. (Intention was to practice database portability) Here is what happens when I attempt to open the EMC: 1. http://umxo8g.sn2.livefilestore.com/y1pZFSayrPbwl_ptd3SVmtvfwPHv3GdTlic-dnftgMUJXl6Ee-l1AmxWFBU40tS8g6op5zViT9qWp8ko2lgY97I7PpuI0PzLfKO/EMC-Failure-1.JPG?psid=1 2. Can open as "New Forest" but same or similar problem when I attempt to open it again directly. http://umxo8g.sn2.livefilestore.com/y1p3k73g7azJNm8zuYREHYnpxPpXlDiAFU1d0LZkk0gj1HWwAvdOWjnnSEaSwJOwoEf5UWCbdHXrhqbHxUK2--o3d7Fz6l12NLc/EMC-Failure-2.JPG?psid=1 3. I am missing half the tools in the EMC Toolbox! http://umxo8g.sn2.livefilestore.com/y1p3k73g7azJNlgMX8KTghdO4Gb1DkwrI5wOdvcL8b7lypD3zYPYN8-jsqoFFj0QeBLfjazdkZNgYVWdnEM0D5lH_ZuZcWtYzbI/EMC-Failure-3.JPG?psid=1 4. Here, I logon as different admin user with this group membership: domain admins enterprise admins schema admins Organization Management ExchangeFullAdmins ExchangeRootAdmins http://umxo8g.sn2.livefilestore.com/y1pc2mp6VxpnYe_5RqIKVKLOaHm8wx7bTTpym6ykvtWegJGBO1H8kqkck1u6stQH44jViz5s6lJdSqpUbT_FAbsHPe2qhQKbqQV/EMC-Failure-4.JPG?psid=1 5. This is with UAC turned off (UAC seems to have nothing to do wit it): http://umxo8g.sn2.livefilestore.com/y1pxgEVKeGPtFFyLzXYIdftoR6M14IBAlbaTT8zz8xKG7lTCJzd7cFUPwRkAYI3_HYcrLPp_-asgW4L3D3UYeML5_K7sgNqodmJ/EMC-Failure-5-UAC-off.JPG?psid=1 ######################################################## Kerberos note: I have run: w32tm /resync - to make sure I am within the 5 minute limit. klist purge I have rebooted more than once (when disabling UAC for example). Time displayed on sole domain controller (test environment) and Exchange server is the same. ########################################################### No problems in EMS: VERBOSE: Connecting to MS10A.bigfirm.local VERBOSE: Connected to MS10A.bigfirm.local. [PS] C:\Windows\system32> Logged in as a domain admin (not accidently as local admin). whoami /groups domain admins enterprise admins schema admins Organization Management ExchangeFullAdmins ExchangeRootAdmins One or two things I checked based on my Google research: No web.config file in inetpub/wwwroot SSL not enabled on PowerShell vDir in IIS7 ####################################################### Event Viewer? Nothing notable in SYSTEM APPLICATION: Many of these. EventID 3092 (WARNING) Error 1129 occurred while processing a replication event. Folder: (7-59E9) NON_IPM_SUBTREE\OFFLINE ADDRESS BOOK\/o=BIGFIRM/cn=addrlists/cn=oabs/cn=Default Offline Address List\OAB Version 2 Event 104 (ERROR) Exchange Search Indexer failed to enable the Mailbox Database DB1a (GUID = 3ddfc8c2-051f-4137-a177-3625b102c2c1) after 1 tries. The last failure was: MapiExceptionMdbOffline: Unable to Get Catalog State (hr=0x80004005, ec=1142) Plenty of these: Event ID 12321 (WARNING) Token-based Activation failed. ######################################################### Test-SystemHealth (Removed items with no bearing on matter: SSL is self signed, drivers are older than two years, etc.). WARNING: The Write DACL inherit (group) right for the Exchange Enterprise Servers group should be removed from the root of the domain. WARNING: SSL is enabled on the IIS root directory of Client Access server MS10A.bigfirm.local. This will break HTTP redirection from other Client Access servers unless it is disabled. WARNING: Active Directory server DC1.bigfirm.local is down or unreachable. This error could also be the result of a network or permissions problem. Error: Access denied However, I can access ADUC from the Exchange server and make changes. [PS] C:\>dsquery computer domainroot "CN=DC1,OU=Domain Controllers,DC=bigfirm,DC=local" "CN=MS3,OU=Servers,DC=bigfirm,DC=local" "CN=VBS-COMP,CN=Computers,DC=bigfirm,DC=local" "CN=W7a,OU=Toronto,OU=Staff,DC=bigfirm,DC=local" "CN=W2K3-BU,OU=Servers,DC=bigfirm,DC=local" "CN=MS10A,OU=Servers,DC=bigfirm,DC=local" "CN=EX11,CN=Computers,DC=bigfirm,DC=local" Looks reachable to me! Here's more proof that the DC is indeed at least accessible - from the Exchange server itself: http://umxo8g.sn2.livefilestore.com/y1pey8crQDnna_AP5vpOQgO4P0GMKxcpukAfi6XHz6yxIlC07wSHBSHQ_MXiA1X0Wn3P1ZxG8QFGdtOUK6P-EOepHLUC5gFhU6s/EMC-Failure-6.JPG?psid=1 OK guys, I've presented what I've found so far. Does anyone have any ideas? If you have any questions, ask away!
Free Windows Admin Tool Kit Click here and download it now
May 18th, 2011 8:54am

Hi Pivert, I have seen all the screen shots, So “ms10.bigfirm.local ” is the retired (old) server? If I misunderstand, please let me known. After compared the screen shots, I found some difference. 1. For the last screen shot, I found only the retired server in the members list. Are you able to remove it from the list and add all the other Exchange server in the list. 2. For the first screen shot, Right click BIGFIRM, is there is no option of “Properties”? 3. Do you come across the issue if you open EMC on any Exchange server? If not, I suggest you re-install EMC tool. Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
May 18th, 2011 11:52pm

Right, MS10.bigfirm.local is the retired server. MS10A.bigfirm.local (with an "A" after MS10) is the new server. ############################################ 1. Here? http://umxo8g.sn2.livefilestore.com/y1pey8crQDnna_AP5vpOQgO4P0GMKxcpukAfi6XHz6yxIlC07wSHBSHQ_MXiA1X0Wn3P1ZxG8QFGdtOUK6P-EOepHLUC5gFhU6s/EMC-Failure-6.JPG?psid=1 Or here? http://umxo8g.sn2.livefilestore.com/y1pxgEVKeGPtFFyLzXYIdftoR6M14IBAlbaTT8zz8xKG7lTCJzd7cFUPwRkAYI3_HYcrLPp_-asgW4L3D3UYeML5_K7sgNqodmJ/EMC-Failure-5-UAC-off.JPG?psid=1 2. Right! You can see the Right click options I have by looking at the Action pane here: http://umxo8g.sn2.livefilestore.com/y1p3k73g7azJNm8zuYREHYnpxPpXlDiAFU1d0LZkk0gj1HWwAvdOWjnnSEaSwJOwoEf5UWCbdHXrhqbHxUK2--o3d7Fz6l12NLc/EMC-Failure-2.JPG?psid=1 Those are the options I have when I right click (usually Right-Clicking, Action in the top bar menu and the Action Pane offer the same options). 3. This is the only Exchange server I have. How do I reinstall the EMC tool? Uninstall Management Tools (if Exchange let's me) and then install again (I'm not sure I can uncheck that box but I'll take a look this afternoon) - at work now and cannot look.
Free Windows Admin Tool Kit Click here and download it now
May 19th, 2011 11:08am

You could uninstall EMC from control panel. Right click “Microsoft Exchange Server 2010”àclick “uninstall”àonly ticket “Management Tools” Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
May 23rd, 2011 10:26pm

OK, will try that.
Free Windows Admin Tool Kit Click here and download it now
May 25th, 2011 10:37am

OK, had a chance to try this but the option to uninstall (uncheck) is grayed out.
May 28th, 2011 6:43am

It correct. As default the option "Management Tools" is grayed out. But if you uncheck any Exchange server , it will be highlight. Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
May 30th, 2011 5:25am

Hello Jerome, This is only for testing so I had to put it on hold, which explains my delay in getting back to it. Anyway, I tried this again and I cannot uncheck any of the options, since this is a single Exchange server. I think the key is finding the reference to the old computer (MS10) wherever it is hiding and delete it. I searched the registry (just to rule that out) and found no references to it. Simple searches in Active Directory yield no results either: dsquery computer domainroot But that reference could be hiding somewhere else.
June 13th, 2011 9:03am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics