Recently I've facedwith the following problem:
I have2 serverswith mixedroles.Everything have been workinguntil we update certificate. Since then, EMS no longer accessible on both servers with the following error:
VERBOSE: Connecting to ********-exmb1.********.local.
New-PSSession : [********-exmb1.********.local] Connecting to remote server ********-exmb1.********.local failed with
the following error message :
[Server=********-EXMB1,RequestId=3170740e-e5e9-4247-b2f7-2eb85312b717,TimeStamp=11/5/2013 9:49:43 AM] Access is
denied. For more information, see the about_Remote_Troubleshooting Help topic.
At line:1 char:1
+ New-PSSession -ConnectionURI "$connectionUri" -ConfigurationName Microsoft.Excha ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : OpenError: (System.Manageme....RemoteRunspace:RemoteRunspace) [New-PSSession], PSRemotin
gTransportException
+ FullyQualifiedErrorId : -2144108477,PSSessionOpenFailed
VERBOSE: Connecting to ********-EXMB1.********.local.
New-PSSession : [********-exmb1.********.local] Connecting to remote server ********-exmb1.********.local failed with
the following error message :
[Server=********-EXMB1,RequestId=bf5674f7-6732-4364-a032-27e2d233c46a,TimeStamp=11/5/2013 9:49:44 AM] Access is
denied. For more information, see the about_Remote_Troubleshooting Help topic.
At line:1 char:1
+ New-PSSession -ConnectionURI "$connectionUri" -ConfigurationName Microsoft.Excha ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : OpenError: (System.Manageme....RemoteRunspace:RemoteRunspace) [New-PSSession], PSRemotin
gTransportException
+ FullyQualifiedErrorId : -2144108477,PSSessionOpenFailed
VERBOSE: Connecting to ********-exmb3.********.local.
New-PSSession : [********-exmb3.********.local] Connecting to remote server ********-exmb3.********.local failed with
the following error message :
[Server=********-EXMB3,RequestId=ef11d3ba-b1c1-43f1-9314-44c1cb4dbe34,TimeStamp=11/5/2013 9:49:44 AM] Access is
denied. For more information, see the about_Remote_Troubleshooting Help topic.
At line:1 char:1
+ New-PSSession -ConnectionURI "$connectionUri" -ConfigurationName Microsoft.Excha ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : OpenError: (System.Manageme....RemoteRunspace:RemoteRunspace) [New-PSSession], PSRemotin
gTransportException
+ FullyQualifiedErrorId : -2144108477,PSSessionOpenFailed
Log Name: Application
Source: MSExchange RBAC
Date: 11/5/2013 3:15:45 PM
Event ID: 265
Task Category: RBAC
Level: Error
Keywords: Classic
User: N/A
Computer: *******-exmb1.*******.local
Description:
(Process w3wp.exe, PID 8036) "User Org: Cannot get the VanriantConfigurationSnapshot, Exception is thrown Microsoft.Exchange.Data.DataValidationException: The property can't be empty.
at Microsoft.Exchange.Data.PropertyBag.set_Item(PropertyDefinition key, Object value)
at Microsoft.Exchange.Data.Directory.ADPropertyBag.set_Item(PropertyDefinition key, Object value)
at Microsoft.Exchange.Data.PropertyBag.UpdatePropertyDependents(ProviderPropertyDefinition propertyDefinition, Object value)
at Microsoft.Exchange.Data.PropertyBag.set_Item(PropertyDefinition key, Object value)
at Microsoft.Exchange.Data.Directory.ADPropertyBag.set_Item(PropertyDefinition key, Object value)
at Microsoft.Exchange.Data.ConfigurableObject.set_Item(PropertyDefinition propertyDefinition, Object value)
at Microsoft.Exchange.Configuration.CmdletFlight.GetSnapshot(ADRawEntry executingUser, IRecipientSession recipientSession)"
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="MSExchange RBAC" />
<EventID Qualifiers="49152">265</EventID>
<Level>2</Level>
<Task>2</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-11-05T09:15:45.000000000Z" />
<EventRecordID>77335</EventRecordID>
<Channel>Application</Channel>
<Computer>*****-exmb1.******.local</Computer>
<Security />
</System>
<EventData>
<Data>w3wp.exe</Data>
<Data>8036</Data>
<Data>
</Data>
<Data>
</Data>
<Data>Microsoft.Exchange.Data.DataValidationException: The property can't be empty.
at Microsoft.Exchange.Data.PropertyBag.set_Item(PropertyDefinition key, Object value)
at Microsoft.Exchange.Data.Directory.ADPropertyBag.set_Item(PropertyDefinition key, Object value)
at Microsoft.Exchange.Data.PropertyBag.UpdatePropertyDependents(ProviderPropertyDefinition propertyDefinition, Object value)
at Microsoft.Exchange.Data.PropertyBag.set_Item(PropertyDefinition key, Object value)
at Microsoft.Exchange.Data.Directory.ADPropertyBag.set_Item(PropertyDefinition key, Object value)
at Microsoft.Exchange.Data.ConfigurableObject.set_Item(PropertyDefinition propertyDefinition, Object value)
at Microsoft.Exchange.Configuration.CmdletFlight.GetSnapshot(ADRawEntry executingUser, IRecipientSession recipientSession)</Data>
</EventData>
</Event>
What was done:
1)re-issueda certificate withCAand re-usedbythe manual.
2) Startingfromadifferent accountmembergroupsDomain Admins, Enterprise ADmins, Schema Admins.
3)Run EMS"as administrator"
4) AdjustmentCertificate inIIS->Exchange Back End ->Bindingson port444 -are triedand standardself-signedandissued byan internalCA.
No results,
Whatelse can I doto solvethis problem?