locked
Unable to run get-exchangecertificate cmdlet RRS feed

  • Question

  • Hi,

    When I run get-exchangecertificate I get the error:

    WARNING: An unexpected error has occurred and debug information is being
    generated: The process does not possess the 'SeSecurityPrivilege' privilege
    which is required for this operation.
    Get-ExchangeCertificate : The process does not possess the 'SeSecurityPrivilege
    ' privilege which is required for this operation.
    At line:1 char:23
    + Get-ExchangeCertificate <<<<

    It is being run as administrator and in the local security policy as well as domain security policy at DC 'manage auditing and security log' includes Exchange Servers.

    Please help.


    Hasan
    Thursday, December 15, 2011 9:46 AM

Answers

  • Hi Hasan,

    Which version of Exchange server do you use? Exchange 2007 or Exchange 2010?

    Is there any related error event in the Event Viewer?

    Please run the Setup /prepareAD again to see whether it works.

    Please also run the Exbpa in the Toolbox to do a Health Check.

    Please check permission as KB said:

    Default permissions for the MachineKeys folders

    http://support.microsoft.com/kb/278381


    Frank Wang

    TechNet Community Support

    Hi,

    I have exchange 2007. this is production environment so i cant take risk of setup /preparead command. i have run exbpa but it is showing all set.

    THe KB which u tell is not applying on windows 2008 server. I am unable to find All Users Profile\Application Data\Microsoft\Crypto\RSA

    I found it in my user profile...........permissions were not set for EVERYONE.......but permission to my user ID were set. I include EVERYONE permission and login again. and it is running that comamnd. no more error.

    but i dont understand what was wrong, when my user was given full access permission then why EVERYONE was required???


    Hasan
    • Edited by Exchanger-007 Monday, December 19, 2011 7:30 AM
    • Marked as answer by emma.yoyo Tuesday, December 27, 2011 2:28 AM
    Monday, December 19, 2011 7:22 AM

All replies

  • Hi Hasan,

    Which version of Exchange server do you use? Exchange 2007 or Exchange 2010?

    Is there any related error event in the Event Viewer?

    Please run the Setup /prepareAD again to see whether it works.

    Please also run the Exbpa in the Toolbox to do a Health Check.

    Please check permission as KB said:

    Default permissions for the MachineKeys folders

    http://support.microsoft.com/kb/278381


    Frank Wang

    TechNet Community Support

    Monday, December 19, 2011 3:11 AM
  • Hi Hasan,

    Which version of Exchange server do you use? Exchange 2007 or Exchange 2010?

    Is there any related error event in the Event Viewer?

    Please run the Setup /prepareAD again to see whether it works.

    Please also run the Exbpa in the Toolbox to do a Health Check.

    Please check permission as KB said:

    Default permissions for the MachineKeys folders

    http://support.microsoft.com/kb/278381


    Frank Wang

    TechNet Community Support

    Hi,

    I have exchange 2007. this is production environment so i cant take risk of setup /preparead command. i have run exbpa but it is showing all set.

    THe KB which u tell is not applying on windows 2008 server. I am unable to find All Users Profile\Application Data\Microsoft\Crypto\RSA

    I found it in my user profile...........permissions were not set for EVERYONE.......but permission to my user ID were set. I include EVERYONE permission and login again. and it is running that comamnd. no more error.

    but i dont understand what was wrong, when my user was given full access permission then why EVERYONE was required???


    Hasan
    • Edited by Exchanger-007 Monday, December 19, 2011 7:30 AM
    • Marked as answer by emma.yoyo Tuesday, December 27, 2011 2:28 AM
    Monday, December 19, 2011 7:22 AM
  • Have you refre this thread :

    http://social.technet.microsoft.com/Forums/eu/exchangesvradmin/thread/891dac12-7465-4517-a153-eedc5afb4f5f

    Also check this one :

    http://ilantz.wordpress.com/2008/08/12/sesecurityprivilege-issues-while-running-setup-for-exchange-2007/


    Viral Rathod Blog : http://viralr.wordpress.com

    I checked these already. ONLY permissions were not set for EVERYONE.......but permission to my user ID were set. I include EVERYONE permission and login again. and it is running that comamnd. no more error.

    but i dont understand what was wrong, when my user was given full access permission then why EVERYONE was required???


    Hasan
    Thursday, December 22, 2011 3:40 AM
  •  when my user was given full access permission then why EVERYONE was required???

    Hi Hasan,

    You can check the "Effective Permission" for your account. Maybe the permission is denied to a group which contains your account.


    Frank Wang

    TechNet Community Support

    Friday, December 23, 2011 5:15 AM