EMC Access Denied Error (2007 on Server 2008)
I currently have 1 Exchange 2007 server that is running on Win2003. I'm trying to setup a new Win2008 server with Exchange 2007 on it. I have installed all the roles and features needed per the Exchange team blogs and I have installed Exchange on the 2008 box. From the server everything looks fine. From the Win2003 server, I can open the EMC and everything looks fine. However when I open the EMC from my workstation I receive the following errors: --------------------------------------------------------Microsoft Exchange Error--------------------------------------------------------The following error(s) were reported while loading topology information: Get-ActiveSyncVirtualDirectoryFailedError:Unable to create Internet Information Services (IIS) directory entry. Error message is: Access is denied.. HResult = -2147024891. Access is denied.. Directory Path: IIS://<Server Name Removed>/W3SVC/1/ROOT/Microsoft-Server-ActiveSync Detail:server name: <Server Name Removed> local machine name: <WorkstationName Removed> local machine fqdn: <WorkstationName Removed> Access is denied. Get-OabVirtualDirectoryFailedError:Unable to create Internet Information Services (IIS) directory entry. Error message is: Access is denied.. HResult = -2147024891. Access is denied.. Directory Path: IIS://<Server Name Removed>/W3SVC/1/ROOT/OAB Detail:server name: <Server Name Removed> local machine name: <WorkstationName Removed> local machine fqdn: <WorkstationName Removed> Access is denied. Get-OWAVirtualDirectoryFailedError:Unable to create Internet Information Services (IIS) directory entry. Error message is: Access is denied.. HResult = -2147024891. Access is denied.. Directory Path: IIS://<Server Name Removed>/W3SVC/1/ROOT/owa Detail:server name: <Server Name Removed>local machine name: <WorkstationName Removed> local machine fqdn: <WorkstationName Removed> Access is denied. --------------------------------------------------------OK-------------------------------------------------------- The server name I've removed above is the name of the new server. I've been using the EMC from my workstation since we first installed Exchange 2007 (Over a year ago) and haven't had any problems. The EMC still works except that when I go to look at CAS related pages, only the existing (win2003) server's properties show. I've formatted the 2008 box twice and reinstalled Exchange as many times and every time gives me the same results. I've looked over the event logs and I can't find anything related. Any Ideas? Thanks!
April 30th, 2008 10:45pm

I just had the same issue on a 2003 box but in my case, I found it was self induced. I don't know how or why, but I had managed to save a password to theserver in my desktop profile. Most likely while setting up RPC over HTTPS. I simply deleted the entry I found using the instructions below and I am fine now. You must be logged on as an administrator or a member of the Administrators group in order to complete this procedure. If your computer is connected to a network, network policy settings might also prevent you from completing this procedure. Open User Accounts in Control Panel. On the Advanced tab, in Passwords and .NET Passports, click Manage Passwords. You can now add a user name and password you use to access a resource, or edit or remove an existing entry. Hope it helps Dave
Free Windows Admin Tool Kit Click here and download it now
May 26th, 2008 8:34pm

NewBDave wrote: I just had the same issue on a 2003 box but in my case, I found it was self induced. I don't know how or why, but I had managed to save a password to theserver in my desktop profile. Most likely while setting up RPC over HTTPS. I simply deleted the entry I found using the instructions below and I am fine now. You must be logged on as an administrator or a member of the Administrators group in order to complete this procedure. If your computer is connected to a network, network policy settings might also prevent you from completing this procedure. Open User Accounts in Control Panel. On the Advanced tab, in Passwords and .NET Passports, click Manage Passwords. You can now add a user name and password you use to access a resource, or edit or remove an existing entry. Hope it helps Dave Thank you so much! For more than 2 month i was searching for a solution. And this was the right hint. Michael
December 2nd, 2008 10:11am

Almost 1 year and 7 months later, your tip is still on the mark. Other posts talk about reinstalling IIS, Exchange, DCOM Config, etc.ThoughI configured an outlook profile to use different credentials than my admin account, to connect to the MB Server, the admin console was apparently still passing those cachedcredentials somehow.Windows 7 x32 with EMC SP1x32Windows Server 2008 Enterprise with SP2Exchange 2007 SP1Thanks muchjerryabouelnasr
Free Windows Admin Tool Kit Click here and download it now
December 9th, 2009 9:47am

btw - the same problem manifested when running the Get-OwaVirtualDirectory cmdlet from the EMS - i.e. the credentials used were those in the Windows Vault/Credential Manager, rather than the security context from which the Exchange Admin tools were running.jerryabouelnasr
December 9th, 2009 9:51am

Great find. This did the trick for me. As the previous poster mentioned, this happened after running Remove-ActiveSyncMailboxPolicy.
Free Windows Admin Tool Kit Click here and download it now
June 23rd, 2010 10:20pm

I have had this problem for 4 months now, i got lucky and this was the first place i looked when searching for my issue. This did the trick 4 me 2. I am however a little concerned, i don't save passwords, i wonder how this credential was saved using the EMC thru the RSAT tools for win7???!!!
February 24th, 2011 11:22am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics