Exchange 2010 Access is denied error when you want to manage the CAS role

Running Exchange 2007 has had its pros and cons. Now that Exchange 2010 is out we want to take advantage of the new features you need do the Exchange migrations. After installing Exchange 2010 server in an Exchange 2007 server environment can give some quirky results. After the installation Exchange 2010 and open the Exchange management console you go to Microsoft Exchange On-Premises -> ServerConfiguration -> Client Access and you will receive the following error message.

 

So let run the “Get-OwaVirtualDirectory” in powershell and see what is has to say.

[PS] C:\Windows\system32>Get-OwaVirtualDirectory

An IIS directory entry couldn't be created. The error message is Access is denied.
. HResult = -2147024891
    + CategoryInfo          : NotInstalled: (<ExchangeServer2007>\Exchange (Default Web Site):ADObjectId) [Get-OwaVirtualDirectory]
   , IISGeneralCOMException
    + FullyQualifiedErrorId : 4B12EB5D,Microsoft.Exchange.Management.SystemConfigurationTasks.GetOwaVirtualDirectory

What the command does is reads the Active Directory objects to see all the registered OWA virtual directories. The virtual directories you retrieve are the virtual directories from Exchange 2010 but also from Exchange 2007. Next the command connects to these directories and needs admin rights. This is exactly where the problem is. Exchange 2010 creates a few new groups and one of them is Exchange Trusted Subsystem. Exchange Trusted Subsystem is automatically added to the local administrators group of the Exchange 2010 server but not on the Exchange 2007 servers. This is the problem! All you need to do is add the Exchange Trusted Subsystem to the local administrators group on the Exchange 2007 CAS servers and restart the server.

Now when we run the “Get-OwaVirtualDirectory” in powershell we see:

[PS] C:\Windows\system32>Get-OwaVirtualDirectory

Name                                    Server                                  OwaVersion
----                                    ------                                  ----------
Exchange (Default Web Site)             <ExchangeServer2007>                                 Exchange2003or2000
Public (Default Web Site)               <ExchangeServer2007>                               Exchange2003or2000
Exadmin (Default Web Site)              <ExchangeServer2007>                                 Exchange2003or2000

 

owa (Default Web Site)                  <ExchangeServer2010>                                 Exchange2010

In the GUI you will only see the Exchange 2010 sever OWA configuration.

 

FacebookDigg It!NewsVineRedditStumbleUpon

Tags: ,

Comments

Jérôme
6/18/2010 1:43:07 AM Permalink

Thanks a lot for this trick ! Smile

It solves muy problem ! Smile

Abu Dhabi Home U.A.E.
7/28/2010 11:27:35 AM Permalink

Thanks for sharing info. Keep up the good work...We hope you will visit our blog often as we discuss topics of interest to you

materials for construction U.A.E.
7/28/2010 4:53:53 PM Permalink

I like your post & I will always be coming frequently to read more of your post. Thank you very much for your post once more.

Rent in Dubaii United States
7/28/2010 5:10:54 PM Permalink

I bookmarked this blog a while ago because of the useful content and I am never being disappointed. Keep up the good work

Dubai Properties United States
7/28/2010 5:11:15 PM Permalink

Thanks for sharing the information dude. I found the information very helpful. That’s a awesome article you posted. I will come back to read some more.

Add comment




  Country flag

biuquote
  • Comment
  • Preview
Loading