Windows Server 2008 w/ Exchange 2007 & EMC Errors on XP or Server 2003
We have an Exchange 2007 Cluster on Server 2008 Enterprise.
It is 2 Mailbox Servers and 1 CAS / HT.The 4th Server is a 2007 CAS / Hub Transport role on Server 2003 x64.
The problem I am trying to resolve is a few errors I am getting on the EMC when running from the Server 2003 CAS / HT or from any XP Client in the domain. I am working as the domain admin in all scenarios.
These are the errors I am getting when I click on any 2008 Box's Server Configuration in the EMC on a 2003 or XP box:
--------------------------------------------------------Microsoft Exchange Error--------------------------------------------------------The following error(s) were reported while loading topology information:
Get-ActiveSyncVirtualDirectoryFailedError:Unable to create Internet Information Services (IIS) directory entry. Error message is: Access is denied.. HResult = -2147024891.
Access is denied.. Directory Path: IIS://<SVRNAME>.<domain>.com/W3SVC/1/ROOT/Microsoft-Server-ActiveSync Detail:server name: <SVRNAME>.<domain>.comlocal machine name: <SVRNAME>local machine fqdn: <SVRNAME>.<domain>.com
Access is denied.
Get-OabVirtualDirectoryFailedError:Unable to create Internet Information Services (IIS) directory entry. Error message is: Access is denied.. HResult = -2147024891.
Access is denied.. Directory Path: IIS://<SVRNAME>.<domain>.com/W3SVC/1/ROOT/OAB Detail:server name: <SVRNAME>.<domain>.comlocal machine name: <SVRNAME>local machine fqdn: <SVRNAME>.<domain>.com
Access is denied.
Get-OWAVirtualDirectoryFailedError:Unable to create Internet Information Services (IIS) directory entry. Error message is: Access is denied.. HResult = -2147024891.
Access is denied.. Directory Path: IIS://<SVRNAME>.<domain>.com/W3SVC/1/ROOT/owa Detail:server name: <SVRNAME>.<domain>.comlocal machine name: <SVRNAME>local machine fqdn: <SVRNAME>.<domain>.com
Access is denied.
--------------------------------------------------------OK--------------------------------------------------------
This only happens when viewing the EMC from XP or 2003. When using the EMC on the 2008 boxes or Vista; the errors do not exist. This leads me to believe that it is a security or permissions issue w/ the newer OS or perhaps IIS7. 64bit or 32bit is irrelevant as I am using both versions of the EMC w/ the same results. 2008 & Vista can look backwards at the Exchange installs on an earlier OS, but 2003 and XP fail only on the installations on 2008.
Other than this, Exchange runs perfectly, though we are still in a mixed environment w/ Exchange 2003 and moving mailboxes.
Any further help resolving these errors is appreciated.
June 17th, 2008 12:15am
Hi,
It can be reproduced in my test lab. Meanwhile, I found it has been reported as a bug.
If you prefer, you could contact Microsoft Customer Service and Support (CSS) directly to try toobtain the fix. For a complete list of Microsoft Customer Service and Support (CSS) phone numbers and information about support costs, visit the following Microsoft Web site:
http://support.microsoft.com/default.aspx?scid=fh;EN-US;CNTACTMS
NOTE: Support calls for hotfix are free. Please do not worry. Even in some cases, contacting phone support may be a charged. However, if you are simply requesting a hotfix be sent to you and no other support then charges are usually refunded or waived.
Hope it helps.
Xiu
Free Windows Admin Tool Kit Click here and download it now
June 19th, 2008 5:22am
Xiu,
Can you verify this in your test lab as well?
I changedthe DCOM Communication Properties on the XP - 2003 Boxes to the following:
Run >> dcomcnfg
Component Services >> Computers >>
Right Click - My Computer
Choose Properties
Default Properties Tab:
Enable DCOM on this computer: Checked
Default Authentication Level: Connect
Default Impersonation Level: Impersonate
The only thing I changed was the Impersonation Level to "Impersonate"; which was by default, set to "Identify".
After the change; I restarted the EMC, and no more errors. Closing and reopening the EMC was essential or the errors would persist. Nevertheless, it is solved for now.
I read an MSDN Developerarticle related to DCOM settings for cross OS communication and it specifiedComputer A as being SVR2003 andComputer B being SVR2008 / Vista. Itmentioned using "Impersonate" as possibly a higher level of security requirementto make remote connections. This may be totally unrelated, but led me to explore these settings, as I was aware some were having DCOM related issues with the EMC. However, I am unsure how this will affect other communication.
This was the article:
http://msdn.microsoft.com/en-us/library/aa389284(VS.85).aspx
Thanks for your help.
Tommy
June 19th, 2008 5:54pm
Great!
It works for me.
Thanks for yours sharing.It is really appreciate.
Free Windows Admin Tool Kit Click here and download it now
June 20th, 2008 6:47am
Hi Xiu
Do you have some more info about the hotfix as I think you need to supply reference to a kb article in order to get the right hotfix from microsoft customer service.
Thanks!
/Pei-Teh Gisseman
September 24th, 2008 4:45pm
Hi,
Please contact css to get hotfix forproduct issue id:98889
Regards,
Xiu
Free Windows Admin Tool Kit Click here and download it now
September 25th, 2008 11:01am
Hi Xiu,
we have the same problem and tried to get the hotfix you mentioned. But unfortunately it seems that there is one figure missing. Can you please verify if this is really the right id.
Thanks a lot.
December 10th, 2008 12:56pm
So far,I confirmed with product team and was told that this will be fixed in the next version(E14).
Besides, this product issue has been reported, but no temp fix is avalible now.
You can follow the work around here or wait for the next version.
Thanks for your understanding.
Xiu
Free Windows Admin Tool Kit Click here and download it now
December 10th, 2008 1:10pm