Quantcast
Channel: Exchange Server 2013 - General Discussion forum
Viewing all articles
Browse latest Browse all 4521

Exchange Management Shell - Access Denied

$
0
0
Good day,

Recently I've facedwith the following problem:

 I have2 serverswith mixedroles.Everything have been working
until we update certificate. Since then, EMS no longer accessible on both servers with the following error:

VERBOSE: Connecting to ********-exmb1.********.local.
New-PSSession : [********-exmb1.********.local] Connecting to remote server ********-exmb1.********.local failed with
the following error message :
[Server=********-EXMB1,RequestId=3170740e-e5e9-4247-b2f7-2eb85312b717,TimeStamp=11/5/2013 9:49:43 AM] Access is
denied. For more information, see the about_Remote_Troubleshooting Help topic.
At line:1 char:1
+ New-PSSession -ConnectionURI "$connectionUri" -ConfigurationName Microsoft.Excha ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : OpenError: (System.Manageme....RemoteRunspace:RemoteRunspace) [New-PSSession], PSRemotin
   gTransportException
    + FullyQualifiedErrorId : -2144108477,PSSessionOpenFailed
VERBOSE: Connecting to ********-EXMB1.********.local.
New-PSSession : [********-exmb1.********.local] Connecting to remote server ********-exmb1.********.local failed with
the following error message :
[Server=********-EXMB1,RequestId=bf5674f7-6732-4364-a032-27e2d233c46a,TimeStamp=11/5/2013 9:49:44 AM] Access is
denied. For more information, see the about_Remote_Troubleshooting Help topic.
At line:1 char:1
+ New-PSSession -ConnectionURI "$connectionUri" -ConfigurationName Microsoft.Excha ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : OpenError: (System.Manageme....RemoteRunspace:RemoteRunspace) [New-PSSession], PSRemotin
   gTransportException
    + FullyQualifiedErrorId : -2144108477,PSSessionOpenFailed
VERBOSE: Connecting to ********-exmb3.********.local.
New-PSSession : [********-exmb3.********.local] Connecting to remote server ********-exmb3.********.local failed with
the following error message :
[Server=********-EXMB3,RequestId=ef11d3ba-b1c1-43f1-9314-44c1cb4dbe34,TimeStamp=11/5/2013 9:49:44 AM] Access is
denied. For more information, see the about_Remote_Troubleshooting Help topic.
At line:1 char:1
+ New-PSSession -ConnectionURI "$connectionUri" -ConfigurationName Microsoft.Excha ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : OpenError: (System.Manageme....RemoteRunspace:RemoteRunspace) [New-PSSession], PSRemotin
   gTransportException
    + FullyQualifiedErrorId : -2144108477,PSSessionOpenFailed

Inthe Application logerror occurs:

Log Name:      Application
Source:        MSExchange RBAC
Date:          11/5/2013 3:15:45 PM
Event ID:      265
Task Category: RBAC
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      *******-exmb1.*******.local
Description:
(Process w3wp.exe, PID 8036) "User  Org:  Cannot get the VanriantConfigurationSnapshot, Exception is thrown Microsoft.Exchange.Data.DataValidationException: The property can't be empty.
   at Microsoft.Exchange.Data.PropertyBag.set_Item(PropertyDefinition key, Object value)
   at Microsoft.Exchange.Data.Directory.ADPropertyBag.set_Item(PropertyDefinition key, Object value)
   at Microsoft.Exchange.Data.PropertyBag.UpdatePropertyDependents(ProviderPropertyDefinition propertyDefinition, Object value)
   at Microsoft.Exchange.Data.PropertyBag.set_Item(PropertyDefinition key, Object value)
   at Microsoft.Exchange.Data.Directory.ADPropertyBag.set_Item(PropertyDefinition key, Object value)
   at Microsoft.Exchange.Data.ConfigurableObject.set_Item(PropertyDefinition propertyDefinition, Object value)
   at Microsoft.Exchange.Configuration.CmdletFlight.GetSnapshot(ADRawEntry executingUser, IRecipientSession recipientSession)"
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="MSExchange RBAC" />
    <EventID Qualifiers="49152">265</EventID>
    <Level>2</Level>
    <Task>2</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2013-11-05T09:15:45.000000000Z" />
    <EventRecordID>77335</EventRecordID>
    <Channel>Application</Channel>
    <Computer>*****-exmb1.******.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data>w3wp.exe</Data>
    <Data>8036</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>Microsoft.Exchange.Data.DataValidationException: The property can't be empty.
   at Microsoft.Exchange.Data.PropertyBag.set_Item(PropertyDefinition key, Object value)
   at Microsoft.Exchange.Data.Directory.ADPropertyBag.set_Item(PropertyDefinition key, Object value)
   at Microsoft.Exchange.Data.PropertyBag.UpdatePropertyDependents(ProviderPropertyDefinition propertyDefinition, Object value)
   at Microsoft.Exchange.Data.PropertyBag.set_Item(PropertyDefinition key, Object value)
   at Microsoft.Exchange.Data.Directory.ADPropertyBag.set_Item(PropertyDefinition key, Object value)
   at Microsoft.Exchange.Data.ConfigurableObject.set_Item(PropertyDefinition propertyDefinition, Object value)
   at Microsoft.Exchange.Configuration.CmdletFlight.GetSnapshot(ADRawEntry executingUser, IRecipientSession recipientSession)</Data>
  </EventData>
</Event>

What was done:

1)re-issueda certificate withCAand re-usedbythe manual.

2) Startingfromadifferent accountmembergroupsDomain Admins, Enterprise ADmins, Schema Admins.

3)Run EMS"as administrator"

4) AdjustmentCertificate inIIS->Exchange Back End ->Bindingson port444 -are triedand standardself-signedandissued byan internalCA.

No results,

Whatelse can I doto solvethis problem?




Viewing all articles
Browse latest Browse all 4521

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>