Cannot open EMC - Access is denied

Posted on 2011-05-02
Last Modified: 2012-05-11
Been chasing this rabbit down the rabbit hole for a while now, picking up the chase again.

EMC will not open with original, or new, domain admin account.

Was receiving an error message that seemed to be resolved by re-enabling the winrm IIS feature. However, still can't access:

The attempt to connect to http://server.domain.local/PowerShell using "kerberos" authentication failed: Connecting to remote server failed with the following error message : Access is denied.

Event viewer system error:

The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server server$. The target name used was HTTP/Server.domain.local. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Please ensure that the target SPN is registered on, and only registered on, the account used by the server. This error can also happen when the target service is using a different password for the target service account than what the Kerberos Key Distribution Center (KDC) has for the target service account. Please ensure that the service on the server and the KDC are both updated to use the current password. If the server name is not fully qualified, and the target domain (DOMAIN.LOCAL) is different from the client domain (DOMAIN.LOCAL), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.

I have no freakin' clue where to go with this....
Question by:bustechllc
    LVL 8

    Expert Comment

    Please check if this update is installed .NET hotfix KB 2449742
    Exchange 2010 management tools do not start after the installation of .NET hotfix KB 2449742 [New Window]
    UPDATE 4/20/2011: We have now identified the problem and have a solution for customers that were impacted by it Please see the following KB article for the resolution of this problem:    The content of the original post (please see above for updates!):   We have become aware of a problem that impacts Exchange management tools on servers running Exchange 2010 on Windows Server 2008 SP2. Note: Windows 2008 R2 SP1 systems do not seem to be impacted. Windows 2008 R2 RTM is impacted. The symptoms of the problem are: Exchange Management Shell does not start Exchange Management Console does not start There might be a crash in Exchange Mailbox Replication Service (it is not clear yet if this is related) Event Viewer might have trouble opening The following events could be logged in the Application event log: Event ID: 1023 Source: .NET Runtime Event ID: 1023 Level: Error Description: .NET Runtime version 2.0.50727.5653 - Fatal Execution Engine Error (000007FEF9216D36) (80131506) Event ID: 1000 Source: Application Error Level: Error Description: Faulting application PowerShell.exe, version 6.0.6002.18111, time stamp 0x4acfacc6, faulting module mscorwks.dll, version 2.0.50727.5653, time stamp 0x4d54a59c, exception code 0xc0000005, fault offset 0x00000000001d9e19, process id 0x%9, application start time 0x%10. While we are still investigating this problem, the failures seem to start after the .NET security update KB 2449742 (MS11-028) is installed. The only workaround that we have identified up to now is a removal of this security update. Warning: We do not recommend that you uninstall any security updates, but we are providing this information so that you can implement this procedure at your own discretion. Use this procedure at your own risk. Removing a security update could may make a computer or a network more vulnerable to attack by malicious users or by malicious software such as viruses. We will update this blog post with more information as it becomes available. Nino Bilic
    Fri, 15 Apr 2011 20:45:00

    Accepted Solution

    That update is not installed, and that error is not in event log.

    Author Closing Comment

    Reinstalling Exchange

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    IT, Stop Being Called Into Every Meeting

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    "Migrate" an SMTP relay receive connector to a new server using info from an old server.
    Ransomware continues to be a growing problem for both personal and business users alike and Antivirus companies are still struggling to find a reliable way to protect you from this dangerous threat.
    In this video we show how to create a Shared Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Sha…
    This video discusses moving either the default database or any database to a new volume.

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    11 Experts available now in Live!

    Get 1:1 Help Now