• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2179
  • Last Modified:

Cannot open EMC - Access is denied

Been chasing this rabbit down the rabbit hole for a while now, picking up the chase again.

EMC will not open with original, or new, domain admin account.

Was receiving an error message that seemed to be resolved by re-enabling the winrm IIS feature. However, still can't access:

The attempt to connect to http://server.domain.local/PowerShell using "kerberos" authentication failed: Connecting to remote server failed with the following error message : Access is denied.

Event viewer system error:

The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server server$. The target name used was HTTP/Server.domain.local. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Please ensure that the target SPN is registered on, and only registered on, the account used by the server. This error can also happen when the target service is using a different password for the target service account than what the Kerberos Key Distribution Center (KDC) has for the target service account. Please ensure that the service on the server and the KDC are both updated to use the current password. If the server name is not fully qualified, and the target domain (DOMAIN.LOCAL) is different from the client domain (DOMAIN.LOCAL), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.

I have no freakin' clue where to go with this....
  • 2
1 Solution
ckeshavSr. Infrastructure SpecialistCommented:
Please check if this update is installed .NET hotfix KB 2449742

Exchange 2010 management tools do not start after the installation of .NET hotfix KB 2449742 [New Window]
UPDATE 4/20/2011: We have now identified the problem and have a solution for customers that were impacted by it Please see the following KB article for the resolution of this problem: http://support.microsoft.com/kb/2540222    The content of the original post (please see above for updates!):   We have become aware of a problem that impacts Exchange management tools on servers running Exchange 2010 on Windows Server 2008 SP2. Note: Windows 2008 R2 SP1 systems do not seem to be impacted. Windows 2008 R2 RTM is impacted. The symptoms of the problem are: Exchange Management Shell does not start Exchange Management Console does not start There might be a crash in Exchange Mailbox Replication Service (it is not clear yet if this is related) Event Viewer might have trouble opening The following events could be logged in the Application event log: Event ID: 1023 Source: .NET Runtime Event ID: 1023 Level: Error Description: .NET Runtime version 2.0.50727.5653 - Fatal Execution Engine Error (000007FEF9216D36) (80131506) Event ID: 1000 Source: Application Error Level: Error Description: Faulting application PowerShell.exe, version 6.0.6002.18111, time stamp 0x4acfacc6, faulting module mscorwks.dll, version 2.0.50727.5653, time stamp 0x4d54a59c, exception code 0xc0000005, fault offset 0x00000000001d9e19, process id 0x%9, application start time 0x%10. While we are still investigating this problem, the failures seem to start after the .NET security update KB 2449742 (MS11-028) is installed. The only workaround that we have identified up to now is a removal of this security update. Warning: We do not recommend that you uninstall any security updates, but we are providing this information so that you can implement this procedure at your own discretion. Use this procedure at your own risk. Removing a security update could may make a computer or a network more vulnerable to attack by malicious users or by malicious software such as viruses. We will update this blog post with more information as it becomes available. Nino Bilic
Fri, 15 Apr 2011 20:45:00
bustechllcAuthor Commented:
That update is not installed, and that error is not in event log.
bustechllcAuthor Commented:
Reinstalling Exchange
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

KuppingerCole Reviews AlgoSec in Executive Report

Leading analyst firm, KuppingerCole reviews AlgoSec's Security Policy Management Solution, and the security challenges faced by companies today in their Executive View report.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now