• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 964
  • Last Modified:

Exchange Power Shell insufficient permissions

Windows Smal Business Server 2008
Exchange 2007
When I try to run the following command within the Exchange 2007 Management Shell, I get the "Insufficient Permissions" error message below, and I am logged in remotely as a domain admin!

Here is the command I enter into the Exchange Management Shell:
New-ExchangeCertificate -generaterequest -keysize 2048 -subjectname "c=us, l=detroit, s=CA, o=Private Name Here,cn=mail.privatenamehere.org" -domainname  exchange.privatenamehere.org,autodiscover.privatenamehere.org,owa.privatenamehere.org -PrivateKeyExportable $true -path c:\Users\certrequest.txt

Here is the error message:
New-ExchangeCertificate : Either you cannot overwrite the outupt file c;users\certrequest.txt because it is set to read-only or you have insufficient permissions to create the certificate request.

2 Solutions
Is UAC disabled or did you start the powershell window with "run as administrator" option?  I don't happen to have access to a 2008 server now, but my Win7 PC doesn't let me write to c:\ or c:\users unless I run as admin.  Have you tried another path?
cliffordgormleyAuthor Commented:
I had to Rt Clk and Run As Administrator.

Why would anybody have to do that when you are already logged in as admin????

This really is ridiculous.

Thanks for the answer!
the root of C is protected and with UAC enabled you must run the application as adminstrator for access to write (prevents an unwanted script from causing harm when running under an administrator's credentials)
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Easily manage email signatures in Office 365

Managing email signatures in Office 365 can be a challenging task if you don't have the right tool. CodeTwo Email Signatures for Office 365 will help you implement a unified email signature look, no matter what email client is used by users. Test it for free!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now