Exchange Server Forums

Powershell: IIS Access denied

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2007] >> Installation >> Powershell: IIS Access denied

Page: [1]

Message

<< Older Topic Newer Topic >>

Powershell: IIS Access denied - 18.Jun.2009 5:47:05 AM

jasomo

Posts: 11
Joined: 16.Jun.2009
Status: offline

Hi all.

I've installed 2 Exchange 2007 CAS Servers over Windows 2008 coexisting with 2 frontend-2 backend Exchange 2003 Servers.

When i try to execute some powershell commands when logged to the CAS server as administrator, all them work without problems, but when i try to execute when logged as my user (the user is local administrator, exchange org full administrator, etc...) i get the following error...

[PS] C:\Users\adm9101\Desktop>Get-OabVirtualDirectory
Get-OabVirtualDirectory : Unable to create Internet Information Services (IIS)
directory entry. Error message is: Access is denied.
. HResult = -2147024891.
At line:1 char:23
+ Get-OabVirtualDirectory <<<<

What perms does my user need to get that commands work?

Thx all!

Post #: 1

Featured Links*

RE: Powershell: IIS Access denied - 18.Jun.2009 6:04:55 AM

jasomo

Posts: 11
Joined: 16.Jun.2009
Status: offline

More clues:

Executed the command from the second node it appears data from the first node but error when trying to get the data from the second.

When executed from the first node it only returns error.

[PS] C:\Windows\System32>Get-OwaVirtualDirectory

Name                       Server                     OwaVersion
----                       ------                     ----------
owa (Default Web Site)     CAS01                 Exchange2007
Exchange (Default Web S... CAS01                 Exchange2003or2000
Public (Default Web Site) CASI01                 Exchange2003or2000
Exchweb (Default Web Site) CAS01                 Exchange2003or2000
Get-OwaVirtualDirectory : Unable to create Internet Information Services (IIS)
directory entry. Error message is: Access is denied.
. HResult = -2147024891.
At line:1 char:23
+ Get-OwaVirtualDirectory <<<<

(in reply to jasomo)

Post #: 2

RE: Powershell: IIS Access denied - 18.Jun.2009 8:47:22 AM

Draconis

Posts: 256
Joined: 11.Sep.2008
From: Connecticut, USA
Status: offline

Try to verify you are at least an Exchange Server Administrator and a local administrator for any targeted servers for the Get-OABVirtualDirectory. Permission requirements below for both. Always read through the Detailed Description sections. It has pretty good info regarding what is needed for a successful execution.

Get-OABVirtualDirectory
http://technet.microsoft.com/en-us/library/aa997926.aspx

Get-OWAVirtualDirectory
http://technet.microsoft.com/en-us/library/aa998588.aspx

(in reply to jasomo)

Post #: 3

RE: Powershell: IIS Access denied - 18.Jun.2009 10:07:09 AM

jasomo

Posts: 11
Joined: 16.Jun.2009
Status: offline

Thx, Draconis

The account is in a group that is Exchange Organization Administrator and is on the Local Administrators group of both CAS Servers.

If i execute the command on CAS 1 with parameter:
-Server CAS1 --> ERROR. Unable to create... Access is denied...
-Server CAS2 --> Works!

If i execute the command on CAS 2 with parameter:
-Server CAS1 --> Works!
-Server CAS2 --> ERROR. Unable to create... Access is denied...

(in reply to Draconis)

Post #: 4