Exchange 2010 SP3 with UR14 on all members.
Pre-question question: should the EMC and EMS be able to connect to Exchange servers with only the Mailbox role installed?
2 servers with HT/CAS roles (not a CAS array)
2 servers with mailbox role only - DAG, failover cluster
The Exchange Management Console will connect to the HT/CAS servers from the console on any of the Exchange servers.
None of the servers will connect to the 2 servers with only the Mailbox role. The error in the EMC is:
The attempt to connect to http://
Shell using "Kerberos" authentication failed: Conecting to the remote server <fqdn-of-mbx-server> failed with the following error message: The client cannot connect to the destination specified in the request. Verify that the service on the destination is running and accepting requests. Consult the logs and documentation for the WS-Management service running on the destination, most commonly IIS or WinRM.
I've checked dozens of similar messages and solutions, ranging from time sync issues to incorrect settings on the PowerShell virtual directory on the affected servers.