Exchange Server TechCenter > Exchange Server Forums > Clients > Unable to view Exchange Certificate?
Ask a questionAsk a question
 

AnswerUnable to view Exchange Certificate?

  • Friday, November 06, 2009 5:11 PMBob Bobbins Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Any ideas why i get this msg and how to rectify it?

    Its a default installation under SBS2008/Exchange2007, I bought a Godaddy SSL cert for the domain name.
    I am connected as Network Administrator.

    [PS] C:\Windows\System32>Get-ExchangeCertificate | fl
    Get-ExchangeCertificate : Unable to create Internet Information Services (IIS)
    directory entry. Error message is: Access is denied.
    . HResult = -2147024891.
    At line:1 char:24
    + Get-ExchangeCertificate  <<<< | fl

    regards

Answers

  • Friday, November 06, 2009 7:38 PMJon-Alfred Smith Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer

    You have to launch the Exchange Management Shell (EMS) with elevated permissions. This is true even if you are logged in as an Administrator:

    Right-click EMS, select Run as administrator.


    MCTS: Messaging | MCSE: S+M | Small Business Specialist

All Replies

  • Friday, November 06, 2009 7:38 PMJon-Alfred Smith Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer

    You have to launch the Exchange Management Shell (EMS) with elevated permissions. This is true even if you are logged in as an Administrator:

    Right-click EMS, select Run as administrator.


    MCTS: Messaging | MCSE: S+M | Small Business Specialist
  • Monday, November 09, 2009 6:16 AMFrank.WangMSFT, ModeratorUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Proposed Answer
    Hi Bob,

    How about your question now?

    You said you connected as Network Administrator. Which groups does the Netword Administator belongs to?
    Please also do as Jon said: run as administrator to test.
    By the way, you must be at least an Exchange View-Only Administrator role to run the cmdlet.
    http://technet.microsoft.com/en-us/library/bb124950.aspx

    And how you conncet to Exchange server? By log on to the server locally or connect to server on client which is installed Exchange Administator tool?
    Please also have a look at this post, maybe it will be helpful.
    Unable to create Internet Information Services (IIS) directory entry. Error message is: Access is denied
    http://social.technet.microsoft.com/Forums/en-US/exchangesvradmin/thread/35ea71ec-034f-4f79-bb95-992bc00dee79
     
    Frank Wang
  • Wednesday, November 11, 2009 8:28 AMFrank.WangMSFT, ModeratorUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Hi Bob,

    How about your question? Any update?
    Frank Wang
  • Thursday, November 12, 2009 9:54 AMBob Bobbins Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Cheers guys, Running powershell as Administrator works fine. I'd presumed Network Admin would have had adequate permissions but alas no :s

    The SSL etc are all set up fine and clients can connect from the LAN and WAN :) BUT, OAB is not set-up at all and needs to be i guess (Autodiscover too), The OAB only provides AD user listings? in which case its hardly any use to us having very few mail users...

    I am as you might have guessed an Exchange newbie :)

    On a side note, i had thought the 'wipe' ability in relation to Mobile devices would only delete 'Exchange' information so happily tried it on my Windows Mobile... what a mistake! It reset the phone back to a default default default state! including wiping the entire Storage card which of course held the phone backups :) That'll teach me!

    I connect via RD Frank. Thank you for the links, they and this entire forum are very useful.