Wednesday, August 11, 2010

Upgrade from Exchange 2007 to Exchange 2010: An IIS directory entry couldn’t be created. The error message is Access is denied. HResult = -2147024891

After we upgraded our infrastructure from Exchange 2007 to Exchange 2010, when I tried to access the CAS from Exchange 2010 EMC I received “An IIS directory entry couldn’t be created. The error message was “Access is denied. HResult = -2147024891 It was running the command ‘Get-OWAVirtualDirectory’” and the OWA Virtual Directory wasn’t visible in EMC.
If you run the same command from PowerShell you will get

[PS] C:\>Get-OwaVirtualDirectory |fl
An IIS directory entry couldn’t be created. The error message is Access is denied.
. HResult = -2147024891
+ CategoryInfo : NotInstalled: (EXCH01\owa (Default Web Site):A
DObjectId) [Get-OwaVirtualDirectory], IISGeneralCOMException
+ FullyQualifiedErrorId : 46C81F27,Microsoft.Exchange.Management.SystemConfi
gurationTasks.GetOwaVirtualDirectory

In my configuration, EXCH01 was the old Exchange 2007 server. This error is generated because the Exchange 2010 does not have rights to enumerate IIS virtual directory from the old Exchange 2007 server. To solve this issue you have two options:

1. Add the “Exchange Trusted Subsystem” group to the Local Administrators group on the Exchange 2007 server.



2. Open Internet Information Service (IIS) Manager role on the Exchange 2007 server, expand to SERVER (local Computer) -> Sites -> Default Web Site select Edit Permissions, add “Exchange Trusted Subsystem” group and grant it Full Control, Run “iisreset /noforce”


No comments:

Post a Comment