Exchange Server TechCenter >
Exchange Server Forums
>
Clients
>
Unable to view Exchange Certificate?
Unable to view Exchange Certificate?
- Any ideas why i get this msg and how to rectify it?
Its a default installation under SBS2008/Exchange2007, I bought a Godaddy SSL cert for the domain name.
I am connected as Network Administrator.
[PS] C:\Windows\System32>Get-ExchangeCertificate | fl
Get-ExchangeCertificate : Unable to create Internet Information Services (IIS)
directory entry. Error message is: Access is denied.
. HResult = -2147024891.
At line:1 char:24
+ Get-ExchangeCertificate <<<< | fl
regards
Answers
You have to launch the Exchange Management Shell (EMS) with elevated permissions. This is true even if you are logged in as an Administrator:
Right-click EMS, select Run as administrator.
MCTS: Messaging | MCSE: S+M | Small Business Specialist- Proposed As Answer byFrank.WangMSFT, ModeratorThursday, November 12, 2009 2:11 AM
- Marked As Answer byBob Bobbins Thursday, November 12, 2009 9:43 AM
All Replies
You have to launch the Exchange Management Shell (EMS) with elevated permissions. This is true even if you are logged in as an Administrator:
Right-click EMS, select Run as administrator.
MCTS: Messaging | MCSE: S+M | Small Business Specialist- Proposed As Answer byFrank.WangMSFT, ModeratorThursday, November 12, 2009 2:11 AM
- Marked As Answer byBob Bobbins Thursday, November 12, 2009 9:43 AM
- Hi Bob,
How about your question now?
You said you connected as Network Administrator. Which groups does the Netword Administator belongs to?
Please also do as Jon said: run as administrator to test.
By the way, you must be at least an Exchange View-Only Administrator role to run the cmdlet.
http://technet.microsoft.com/en-us/library/bb124950.aspx
And how you conncet to Exchange server? By log on to the server locally or connect to server on client which is installed Exchange Administator tool?
Please also have a look at this post, maybe it will be helpful.
Unable to create Internet Information Services (IIS) directory entry. Error message is: Access is denied
http://social.technet.microsoft.com/Forums/en-US/exchangesvradmin/thread/35ea71ec-034f-4f79-bb95-992bc00dee79
Frank Wang- Proposed As Answer byFrank.WangMSFT, ModeratorThursday, November 12, 2009 2:11 AM
- Hi Bob,
How about your question? Any update?
Frank Wang - Cheers guys, Running powershell as Administrator works fine. I'd presumed Network Admin would have had adequate permissions but alas no :s
The SSL etc are all set up fine and clients can connect from the LAN and WAN :) BUT, OAB is not set-up at all and needs to be i guess (Autodiscover too), The OAB only provides AD user listings? in which case its hardly any use to us having very few mail users...
I am as you might have guessed an Exchange newbie :)
On a side note, i had thought the 'wipe' ability in relation to Mobile devices would only delete 'Exchange' information so happily tried it on my Windows Mobile... what a mistake! It reset the phone back to a default default default state! including wiping the entire Storage card which of course held the phone backups :) That'll teach me!
I connect via RD Frank. Thank you for the links, they and this entire forum are very useful.


