Cannot open EMC - Access is denied

Posted on 2011-05-02
Medium Priority
Last Modified: 2012-05-11
Been chasing this rabbit down the rabbit hole for a while now, picking up the chase again.

EMC will not open with original, or new, domain admin account.

Was receiving an error message that seemed to be resolved by re-enabling the winrm IIS feature. However, still can't access:

The attempt to connect to http://server.domain.local/PowerShell using "kerberos" authentication failed: Connecting to remote server failed with the following error message : Access is denied.

Event viewer system error:

The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server server$. The target name used was HTTP/Server.domain.local. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Please ensure that the target SPN is registered on, and only registered on, the account used by the server. This error can also happen when the target service is using a different password for the target service account than what the Kerberos Key Distribution Center (KDC) has for the target service account. Please ensure that the service on the server and the KDC are both updated to use the current password. If the server name is not fully qualified, and the target domain (DOMAIN.LOCAL) is different from the client domain (DOMAIN.LOCAL), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.

I have no freakin' clue where to go with this....
Question by:bustechllc
  • 2

Expert Comment

ID: 35504611
Please check if this update is installed .NET hotfix KB 2449742

Exchange 2010 management tools do not start after the installation of .NET hotfix KB 2449742 [New Window]
UPDATE 4/20/2011: We have now identified the problem and have a solution for customers that were impacted by it Please see the following KB article for the resolution of this problem: http://support.microsoft.com/kb/2540222    The content of the original post (please see above for updates!):   We have become aware of a problem that impacts Exchange management tools on servers running Exchange 2010 on Windows Server 2008 SP2. Note: Windows 2008 R2 SP1 systems do not seem to be impacted. Windows 2008 R2 RTM is impacted. The symptoms of the problem are: Exchange Management Shell does not start Exchange Management Console does not start There might be a crash in Exchange Mailbox Replication Service (it is not clear yet if this is related) Event Viewer might have trouble opening The following events could be logged in the Application event log: Event ID: 1023 Source: .NET Runtime Event ID: 1023 Level: Error Description: .NET Runtime version 2.0.50727.5653 - Fatal Execution Engine Error (000007FEF9216D36) (80131506) Event ID: 1000 Source: Application Error Level: Error Description: Faulting application PowerShell.exe, version 6.0.6002.18111, time stamp 0x4acfacc6, faulting module mscorwks.dll, version 2.0.50727.5653, time stamp 0x4d54a59c, exception code 0xc0000005, fault offset 0x00000000001d9e19, process id 0x%9, application start time 0x%10. While we are still investigating this problem, the failures seem to start after the .NET security update KB 2449742 (MS11-028) is installed. The only workaround that we have identified up to now is a removal of this security update. Warning: We do not recommend that you uninstall any security updates, but we are providing this information so that you can implement this procedure at your own discretion. Use this procedure at your own risk. Removing a security update could may make a computer or a network more vulnerable to attack by malicious users or by malicious software such as viruses. We will update this blog post with more information as it becomes available. Nino Bilic
Fri, 15 Apr 2011 20:45:00

Accepted Solution

bustechllc earned 0 total points
ID: 35504820
That update is not installed, and that error is not in event log.

Author Closing Comment

ID: 35714909
Reinstalling Exchange

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

It’s a season to be thankful, and we’re thankful for users like you who engage on site, solve technology problems, and network with others in the industry. What tech are we most thankful for? Keep reading.
Your business may be under attack from a silent enemy that is hard to detect. It works stealthily in the shadows to access and exploit your critical business information, sensitive confidential data and intellectual property, for commercial gain. T…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, just open a new email message. In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Whether it be Exchange Server Crash Issues, Dirty Shutdown Errors or Failed to mount error, Stellar Phoenix Mailbox Exchange Recovery has always got your back. With the help of its easy to understand user interface and 3 simple steps recovery proced…
Suggested Courses

830 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question