Exchange Management Console Initialization Failed

Let me give you a little background.  Most of my professional career has been spent as one of the Active Directory guys in very large corporate environments.  Those IT departments are very compartmentalized.  There's an AD team, a networking group, a SharePoint team, a Exchange team, etc.  Now I'm the sole IT guy in a small firm.  Prior to this my experience with Exchange is I knew how to spell it (and sometimes I got that wrong).

Just ahead to yesterday.  I'm four days into my first week here and I notice there are problems with the domain trust.  Secondary DNS zone transfers weren't working properly, there is an orphaned Site in AD with an orphaned DC that's been offline since 2016, time sync was misconfigured, etc.  I spent most of yesterday cleaning up the AD problems.  Prior to this the Exchange Management Console on the Exchange 2010 server was functioning fine.  Now it's throwing the following error:

Initialization failed

The following error occurred while searching for the on-premises Exchange server:

[server FQDN] Connecting to remote server failed with the following error message:
The WinRM client cannot process the request.  The WinRM client tried to use Kerberos
authentication mechanism, but the destination computer (server FQDN:80)
returned an 'access denied' error.  Change the configuration to allow Kerberos authentication
mechanism to be used or specify one of the authentication mechanisms supported by the
server.  To use Kerberos, specify the local computer name as the remote destination.  Also
verify that the client computer and the destination computer are joined to a domain.  To use
Basic, specify the local computer name as the remote destination, specify Basic
authentication and provide user name and password.  Possible authentication mechanisms
reported by server: For more information, see the about_Remote_Troubleshooting Help
topic.  It was running the command 'Discover-ExchangeServer -UseWIA $true -SuppressError
$true -CurrentVersion 'Version 14.3 (Build 123.4)''.

In this environment Exchange 2010 on Server 2008 R2 SP1 is running on a 2012 Hyper-V host.  Any help would be greatly appreciated!
Paul NicklSystems EngineerAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Zaheer IqbalTechnical Assurance & ImplementationCommented:
As part of your cleanup look back at what you have removed from AD and if the changes you have made may have caused this issue, just to rule that out first.
0
Zaheer IqbalTechnical Assurance & ImplementationCommented:
Also check the WinRM service is running on the Exchange server you are trying to connect to.
0
Zaheer IqbalTechnical Assurance & ImplementationCommented:
The FQDN what is that connecting to is that the FQDN of the exchange server ?
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

Paul NicklSystems EngineerAuthor Commented:
Thanks for chiming in Zaheer.  I'll answer them in order.

1.  I have no idea why it was setup this way but we're running two separate domains.  One (call it DOM1.local) has only the Exchange server and two DC's.  The other (call it DOM2.local) contains all the rest of our application servers as well as three 2012 Hyper-V hosts.  There's a two-way transitive trust between the two domains.  The domain cleanup I performed yesterday was strictly on DOM2.local.  The only change I made to DOM1.local where the Exchange server lives is fixed the domain time source so it pointed to a NIST and a USNO servers.

2.  The WinRM is running on the Exchange server and I'm RDP into that server running the EMC.

3.  Yes, the FQDN is the Exchange server I'm trying to connect to.[/list]
0
Zaheer IqbalTechnical Assurance & ImplementationCommented:
0
Zaheer IqbalTechnical Assurance & ImplementationCommented:
Was there a timing issue ? at all on the domain.

Can you restart the Exchange server(s)?
0
Paul NicklSystems EngineerAuthor Commented:
The following is the result:

PS C:\> Test-WSMan -Authentication default

wsmid           : http://schemas.dmtf.org/wbem/wsman/identity/1/wsmanidentity.xsd
ProtocolVersion : http://schemas.dmtf.org/wbem/wsman/1/wsman.xsd
ProductVendor   : Microsoft Corporation
ProductVersion  : OS: 6.2.9200 SP: 0.0 Stack: 3.0

There was a sub 5 minute time drift on the domain Exchange exists in because the PDC wasn't pointed to an external time source.  I can restart the Exchange server after hours but since I'm so in the dark concerning the cause of this problem I wasn't confident a simple reboot would solve the problem.

I forgot there's an EMC installed on my Windows 10 workstation.  I'm not sure if it helps but when I launch the EMC from there while logged in as a Domain Admin in the domain Exchange exists, I get the following error:

Initialization failed

The following error occurred while searching for the on-premises Exchange server:

The World Wide Web Publishing Service (W3SVC) isn't running on any Exchange servers in the site.  If you want to connect to Remote
PowerShell, this service must be running.  Make sure that the W3SVC is running on at least one Exchange server.

I should note that W3SVC is running and the Exchange server is at least still sending and receiving emails.
0
Zaheer IqbalTechnical Assurance & ImplementationCommented:
Very strange indeed. i would try and the give the server a restart and see if that helps.
0
Radhakrishnan RSenior Technical LeadCommented:
Hi,

We used to see this error periodically in exchange environment. Simply start>>run>>cmd>>iisreset

Most of the times this worked for me.
0
Paul NicklSystems EngineerAuthor Commented:
Thanks Radhakrishnan.  IIS restarted successfully but I'm still getting the same errors on both the EMC on the Exchange server as well as the EMC on my workstation.  Unless someone else has alternative suggestions I'll have to try a reboot as Zaheer proposed.
0
Radhakrishnan RSenior Technical LeadCommented:
Hi,

""There was a sub 5 minute time drift on the domain Exchange exists in because the PDC wasn't pointed to an external time source.  I can restart the Exchange server after hours but since I'm so in the dark concerning the cause of this problem I wasn't confident a simple reboot would solve the problem."

You need to fix the time sync issue first, i believe the server is getting the time from BIOS? if so, you need to configure it to contact and get the time from PDC.

What's the output of the below commands?

w32tm /query /configuration

and

w32tm /query /status
0
Paul NicklSystems EngineerAuthor Commented:
I resolved the time drift yesterday.  The below command was run on the PDC where the Exchange server resides and the computer in the command is a US government time server.

C:\Windows\system32>w32tm /stripchart /computer:time-a-g.nist.gov /dataonly /samples:4
Tracking time-a-g.nist.gov [129.6.15.28:123].
Collecting 4 samples.
The current time is 12/8/2017 12:45:05 PM.
12:45:05, +00.0028935s
12:45:07, -00.0007626s
12:45:09, -00.0000648s
12:45:11, -00.0012664s

The following command was run from the Exchange server itself:

C:\Windows\system32>w32tm /stripchart /computer:time-a-g.nist.gov /dataonly /samples:4
Tracking time-a-g.nist.gov [129.6.15.28:123].
Collecting 4 samples.
The current time is 12/8/2017 12:51:00 PM.
12:51:00, +00.0021574s
12:51:02, +00.0013943s
12:51:04, -00.0042171s
12:51:06, -00.0122039s
0
Paul NicklSystems EngineerAuthor Commented:
I just completed a reboot with no success.  The EMC is still showing the same WinRM / Kerberos / Access Denied error.  I could really use a hand resolving this issue.
0
Zaheer IqbalTechnical Assurance & ImplementationCommented:
Can you install EMC on your computer and try to connect to the Exchange servers ?
0
Paul NicklSystems EngineerAuthor Commented:
Morning Zaheer.  I actually have EMC installed on my workstation and it's giving the following error:

Initialization failed

The following error occurred while searching for the on-premises Exchange server:

The World Wide Web Publishing Service (W3SVC) isn't running on any Exchange servers in the site.  If you want to connect to Remote
PowerShell, this service must be running.  Make sure that the W3SVC is running on at least one Exchange server.

I will give the Kerberos solution a try.  Thanks for the link!
0
Radhakrishnan RSenior Technical LeadCommented:
Hi,

Is all the exchange related services started? also, any appool showing stopped?
0
Paul NicklSystems EngineerAuthor Commented:
After looking at that TechNet Kerberos fix I realized I actually tried that about mid last week.  I gave it another try with the same result:  no change in the error EMC is displaying and continued initialization failure.

Hi Radhakrishnan.  It looks like all the Exchange services are started with the exception of Microsoft Exchange Monitoring and Microsoft Exchange Server Extension for Windows Server Backup.  As for the appool showing stopped, could you elaborate on how to check that?  Below is the list of services and their status:

Status   Name               DisplayName
------   ----               -----------
Stopped  Acronis VSS Pro... Acronis VSS Provider
Stopped  AcronisActivePr... Acronis Active Protection Service
Running  AcronisAgent       Acronis Remote Agent Service
Running  AcrSch2Svc         Acronis Scheduler2 Service
Running  AeLookupSvc        Application Experience
Stopped  ALG                Application Layer Gateway Service
Running  AppHostSvc         Application Host Helper Service
Stopped  AppIDSvc           Application Identity
Running  Appinfo            Application Information
Stopped  AppMgmt            Application Management
Running  ARSM               Acronis Removable Storage Managemen...
Stopped  aspnet_state       ASP.NET State Service
Stopped  AudioEndpointBu... Windows Audio Endpoint Builder
Stopped  AudioSrv           Windows Audio
Running  BFE                Base Filtering Engine
Stopped  BITS               Background Intelligent Transfer Ser...
Stopped  Browser            Computer Browser
Running  CertPropSvc        Certificate Propagation
Stopped  clr_optimizatio... Microsoft .NET Framework NGEN v2.0....
Stopped  clr_optimizatio... Microsoft .NET Framework NGEN v2.0....
Stopped  clr_optimizatio... Microsoft .NET Framework NGEN v4.0....
Stopped  clr_optimizatio... Microsoft .NET Framework NGEN v4.0....
Stopped  COMSysApp          COM+ System Application
Running  CryptSvc           Cryptographic Services
Running  DcomLaunch         DCOM Server Process Launcher
Stopped  defragsvc          Disk Defragmenter
Stopped  dgggaox            {5150918D-AF2C-4F28-A1ED-578A4BD161AD}
Running  Dhcp               DHCP Client
Running  DiagTrack          Diagnostics Tracking Service
Running  Dnscache           DNS Client
Stopped  DNTUS26            DameWare NT Utilities 2.6
Stopped  dot3svc            Wired AutoConfig
Running  DPS                Diagnostic Policy Service
Stopped  dwmrcs             DameWare Mini Remote Control
Stopped  EapHost            Extensible Authentication Protocol
Stopped  EFS                Encrypting File System (EFS)
Running  eventlog           Windows Event Log
Running  EventSystem        COM+ Event System
Stopped  FCRegSvc           Microsoft Fibre Channel Platform Re...
Stopped  fdPHost            Function Discovery Provider Host
Stopped  FDResPub           Function Discovery Resource Publica...
Running  FontCache          Windows Font Cache Service
Stopped  FontCache3.0.0.0   Windows Presentation Foundation Fon...
Running  gpsvc              Group Policy Client
Stopped  gupdate            Google Update Service (gupdate)
Stopped  gupdatem           Google Update Service (gupdatem)
Stopped  hidserv            Human Interface Device Access
Stopped  hkmsvc             Health Key and Certificate Management
Stopped  idsvc              Windows CardSpace
Stopped  IEEtwCollectorS... Internet Explorer ETW Collector Ser...
Running  IISADMIN           IIS Admin Service
Running  IKEEXT             IKE and AuthIP IPsec Keying Modules
Stopped  IPBusEnum          PnP-X IP Bus Enumerator
Running  iphlpsvc           IP Helper
Running  KeyIso             CNG Key Isolation
Stopped  KtmRm              KtmRm for Distributed Transaction C...
Running  LanmanServer       Server
Running  LanmanWorkstation  Workstation
Stopped  lltdsvc            Link-Layer Topology Discovery Mapper
Running  lmhosts            TCP/IP NetBIOS Helper
Stopped  LMIGuardianSvc     LMIGuardianSvc
Stopped  MMCSS              Multimedia Class Scheduler
Running  MMS                Acronis Managed Machine Service
Running  MpsSvc             Windows Firewall
Running  MSDTC              Distributed Transaction Coordinator
Running  MSExchangeAB       Microsoft Exchange Address Book
Running  MSExchangeADTop... Microsoft Exchange Active Directory...
Running  MSExchangeAntis... Microsoft Exchange Anti-spam Update
Running  MSExchangeEdgeSync Microsoft Exchange EdgeSync
Running  MSExchangeFBA      Microsoft Exchange Forms-Based Auth...
Running  MSExchangeFDS      Microsoft Exchange File Distribution
Running  MSExchangeImap4    Microsoft Exchange IMAP4
Running  MSExchangeIS       Microsoft Exchange Information Store
Running  MSExchangeMailb... Microsoft Exchange Mailbox Assistants
Running  MSExchangeMailb... Microsoft Exchange Mailbox Replication
Running  MSExchangeMailS... Microsoft Exchange Mail Submission
Stopped  MSExchangeMonit... Microsoft Exchange Monitoring
Running  MSExchangePop3     Microsoft Exchange POP3
Running  MSExchangeProte... Microsoft Exchange Protected Servic...
Running  MSExchangeRepl     Microsoft Exchange Replication
Running  MSExchangeRPC      Microsoft Exchange RPC Client Access
Running  MSExchangeSA       Microsoft Exchange System Attendant
Running  MSExchangeSearch   Microsoft Exchange Search Indexer
Running  MSExchangeServi... Microsoft Exchange Service Host
Running  MSExchangeThrot... Microsoft Exchange Throttling
Running  MSExchangeTrans... Microsoft Exchange Transport
Running  MSExchangeTrans... Microsoft Exchange Transport Log Se...
Running  msftesql-Exchange  Microsoft Search  (Exchange)
Running  MSiSCSI            Microsoft iSCSI Initiator Service
Stopped  msiserver          Windows Installer
Stopped  napagent           Network Access Protection Agent
Running  Netlogon           Netlogon
Running  Netman             Network Connections
Stopped  NetMsmqActivator   Net.Msmq Listener Adapter
Running  NetPipeActivator   Net.Pipe Listener Adapter
Running  netprofm           Network List Service
Running  NetTcpActivator    Net.Tcp Listener Adapter
Running  NetTcpPortSharing  Net.Tcp Port Sharing Service
Running  NlaSvc             Network Location Awareness
Running  nscp               NSClient++ (x64)
Running  nsi                Network Store Interface Service
Stopped  PerfHost           Performance Counter DLL Host
Stopped  pla                Performance Logs & Alerts
Running  PlugPlay           Plug and Play
Running  PolicyAgent        IPsec Policy Agent
Running  Power              Power
Running  ProfSvc            User Profile Service
Stopped  ProtectedStorage   Protected Storage
Stopped  RasAuto            Remote Access Auto Connection Manager
Stopped  RasMan             Remote Access Connection Manager
Stopped  RemoteAccess       Routing and Remote Access
Running  RemoteRegistry     Remote Registry
Running  RpcEptMapper       RPC Endpoint Mapper
Stopped  RPCHTTPLBS         RPC/HTTP Load Balancing Service
Stopped  RpcLocator         Remote Procedure Call (RPC) Locator
Running  RpcSs              Remote Procedure Call (RPC)
Stopped  RSoPProv           Resultant Set of Policy Provider
Stopped  sacsvr             Special Administration Console Helper
Running  SamSs              Security Accounts Manager
Running  SAVAdminService    Sophos Anti-Virus status reporter
Running  SAVService         Sophos Anti-Virus
Stopped  SCardSvr           Smart Card
Running  Schedule           Task Scheduler
Stopped  SCPolicySvc        Smart Card Removal Policy
Stopped  sdmdvwnq           {ED85B23D-915C-4309-B6CE-1E9C6E21C4E1}
Stopped  seclogon           Secondary Logon
Running  SENS               System Event Notification Service
Running  SessionEnv         Remote Desktop Configuration
Running  ShadowProtectSvc   ShadowProtect Service
Stopped  SharedAccess       Internet Connection Sharing (ICS)
Running  ShellHWDetection   Shell Hardware Detection
Stopped  SNMPTRAP           SNMP Trap
Running  Sophos Agent       Sophos Agent
Running  Sophos AutoUpda... Sophos AutoUpdate Service
Running  Sophos Message ... Sophos Message Router
Running  Sophos Web Cont... Sophos Web Control Service
Running  sophossps          Sophos System Protection Service
Running  Spooler            Print Spooler
Stopped  sppsvc             Software Protection
Stopped  sppuinotify        SPP Notification Service
Stopped  SSDPSRV            SSDP Discovery
Stopped  SstpSvc            Secure Socket Tunneling Protocol Se...
Running  stc_raw_agent      StorageCraft Raw Agent
Stopped  StorageCraft Im... StorageCraft ImageReady
Running  swi_service        Sophos Web Intelligence Service
Stopped  swi_update_64      Sophos Web Intelligence Update
Stopped  swprv              Microsoft Software Shadow Copy Prov...
Stopped  TapiSrv            Telephony
Running  TermService        Remote Desktop Services
Stopped  THREADORDER        Thread Ordering Server
Stopped  Tib Mounter Ser... Tib Mounter Service
Running  TrkWks             Distributed Link Tracking Client
Stopped  TrustedInstaller   Windows Modules Installer
Stopped  UI0Detect          Interactive Services Detection
Running  UmRdpService       Remote Desktop Services UserMode Po...
Stopped  upnphost           UPnP Device Host
Running  UxSms              Desktop Window Manager Session Manager
Stopped  VaultSvc           Credential Manager
Stopped  vds                Virtual Disk
Running  vmicheartbeat      Hyper-V Heartbeat Service
Running  vmickvpexchange    Hyper-V Data Exchange Service
Running  vmicshutdown       Hyper-V Guest Shutdown Service
Running  vmictimesync       Hyper-V Time Synchronization Service
Running  vmicvss            Hyper-V Volume Shadow Copy Requestor
Stopped  vmssrf             {E96E96DD-F635-46CA-8323-F8E08C6983F6}
Running  VSNAPVSS           StorageCraft Shadow Copy Provider
Stopped  VSS                Volume Shadow Copy
Running  W32Time            Windows Time
Running  W3SVC              World Wide Web Publishing Service
Running  WAS                Windows Process Activation Service
Stopped  wbengine           Block Level Backup Engine Service
Stopped  WcsPlugInService   Windows Color System
Stopped  WdiServiceHost     Diagnostic Service Host
Stopped  WdiSystemHost      Diagnostic System Host
Stopped  Wecsvc             Windows Event Collector
Stopped  wercplsupport      Problem Reports and Solutions Contr...
Stopped  WerSvc             Windows Error Reporting Service
Stopped  wftnfnl            {C90466E7-9F4B-47A8-8457-3D6D61179728}
Stopped  WinHttpAutoProx... WinHTTP Web Proxy Auto-Discovery Se...
Running  Winmgmt            Windows Management Instrumentation
Running  WinRM              Windows Remote Management (WS-Manag...
Stopped  wmiApSrv           WMI Performance Adapter
Stopped  WPDBusEnum         Portable Device Enumerator Service
Running  wqserver_service   WatchGuard Quarantine Server
Stopped  wsbexchange        Microsoft Exchange Server Extension...
Running  wuauserv           Windows Update
Stopped  wudfsvc            Windows Driver Foundation - User-mo...
Stopped  xlmmcghpl          {E03D8656-7EAC-489D-80AA-70CADC789C11}
0
Radhakrishnan RSenior Technical LeadCommented:
Hi,

Start>>run>>inetmgr>>Expand the server name>>Application pools

 apppool.JPG
0
Zaheer IqbalTechnical Assurance & ImplementationCommented:
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Paul NicklSystems EngineerAuthor Commented:
I attempted to launch the Exchange Management Shell on the Exchange server and received the following error.  It's verbatim from the EMC error but has a reference to AD Sites and Services I've highlighted in bold.  Could that be related to the issue?

VERBOSE: Connecting to server FQDN
[server FQDN] Connecting to remote server failed with the following error message : The WinRM client cannot
 process the request. The WinRM client tried to use Kerberos authentication mechanism, but the destination computer (server FQDN:80) returned an 'access denied' error. Change the configuration to allow Kerberos authentication
mechanism to be used or specify one of the authentication mechanisms supported by the server. To use Kerberos, specify
the local computer name as the remote destination. Also verify that the client computer and the destination computer ar
e joined to a domain. To use Basic, specify the local computer name as the remote destination, specify Basic authentica
tion and provide user name and password. Possible authentication mechanisms reported by server: For more information, s
ee the about_Remote_Troubleshooting Help topic.
    + CategoryInfo          : OpenError: (System.Manageme....RemoteRunspace:RemoteRunspace) [], PSRemotingTransportException
    + FullyQualifiedErrorId : PSSessionOpenFailed
WARNING: No Exchange servers are available in the Active Directory site KAL. Connecting to an Exchange server in
another Active Directory site.

VERBOSE: Connecting to server FQDN
[ptl-exchange2.ptl.local] Connecting to remote server failed with the following error message : The WinRM client cannot
 complete the operation within the time specified. Check if the machine name is valid and is reachable over the network
 and firewall exception for Windows Remote Management service is enabled. For more information, see the about_Remote_Tr
oubleshooting Help topic.
    + CategoryInfo          : OpenError: (System.Manageme....RemoteRunspace:RemoteRunspace) [], PSRemotingTransportException
    + FullyQualifiedErrorId : PSSessionOpenFailed
Failed to connect to an Exchange server in the current site.
0
Paul NicklSystems EngineerAuthor Commented:
Thanks Radhakrishnan.  All the app pools are running.

App-Pools.PNG
I'll give that a try and let you know the results Zaheer.  Thanks.
0
Paul NicklSystems EngineerAuthor Commented:
Thank you Zaheer and Radhakrishnan for your assistance.  I don't understand why the last solution you linked worked . . . well, I understand why it worked but I don't understand why a fully functioning server just over a week ago suddenly stopped having a functioning EMC when no patches or software was installed.  But your solution worked Zaheer.

Much thanks to both of you!
1
Radhakrishnan RSenior Technical LeadCommented:
Hi,

Have you logged in as 'domain administrator' user type? have you tried to login to the server as another domain admin user?

Are you able to open Active Directory users and computers from the server? (start>>run>>dsa.msc)?
0
Zaheer IqbalTechnical Assurance & ImplementationCommented:
Excellent good to hear you have got it sorted now ;)
Anytime
1
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.