Exchange Geek's Weblog

I'm a Geek!

«
»

Get-OWAVirtualDirectory returns “An IIS directory entry couldn’t be created. The error message is Access is denied.”

Posted by Exchange Geek on 18/09/2009


Note: This issue is fixed in Exchange Server 2007 SP2 RU2. If you have the latest RU installed then you will not face this problem.

Today, I had a problem with my lab installation of Exchange 2010. The setup is pretty simple of a mixed mode organization having an Exchange 2003 SP2, Exchange Server 2007 SP2 32Bit, and an Exchange 2007 RC1 setup in it.

After installation I noticed that, when I open EMC on Exchange 2010 server and click on Client Access server role under server management node I get a weird error as below:

image

The EMS on Exchange 2010 server showed up the red lines of death too.

PS] C:\>Get-OwaVirtualDirectory |FL
An IIS directory entry couldn’t be created. The error message is Access is deni
ed.
. HResult = -2147024891
    + CategoryInfo          : NotInstalled: (GLEX2007\owa (Default Web Site):A
   DObjectId) [Get-OwaVirtualDirectory], IISGeneralCOMException
    + FullyQualifiedErrorId : 46C81F27,Microsoft.Exchange.Management.SystemCon
   figurationTasks.GetOwaVirtualDirectory

image

Turns out, if I have Exchange 2007 server in co-existence with Exchange 2010 the security group “Exchange Trusted Subsystem” needs to be a member of Local Administrators group on an Exchange Server 2007 box.

image

And, that should be it. The error went away as soon as the security group Exchange Trusted Subsystem was added to local admins group on Exchange server 2007.

Thanks to Henrik for helping me out on this. :-)

This entry was posted on 18/09/2009 at 2:58 AM and is filed under Exchange 2010. You can follow any responses to this entry through the RSS 2.0 feed. Both comments and pings are currently closed.

12 Responses to “Get-OWAVirtualDirectory returns “An IIS directory entry couldn’t be created. The error message is Access is denied.””

  1. Jan said

    11/11/2009 at 3:50 AM

    it helped. :D

    cool workaround… :D

  2. Sean Williams said

    11/11/2009 at 8:51 PM

    I am having the same issue however Exchange 2007 is installed on a Domain Controller (Yes, I know it should not have been. It was done by the previous engineer here). Any ideas? I have added “Exchange Trusted Subsystem ” to the Domain Admins group withno success.

  3. Sean Williams said

    11/11/2009 at 10:12 PM

    Was able to solve this on a 2003 DC running Exchange 2007 by:

    Opening Internet Information Service (IIS) Manager
    Expanding to SERVER (local Computer) -> Web Sites -> Default Web Site
    Right Click on Default Web Site and choose Permissions
    Add Exchang Trusted Subsystem and grant Full Control
    Restart IIS
    Reboot your 2010 Exchange Server

  4. Exchange Geek said

    12/11/2009 at 2:03 AM

    Great. Thanks for posting, Sean.

  5. kurt said

    20/11/2009 at 3:36 AM

    installed a exch 2010 with coex 2007 today…
    this error was something!!!
    just what i needed!!
    it works now!!
    thanks

  6. NZRegs said

    20/11/2009 at 6:05 AM

    Perfect solution! Thanks!!

  7. Robert said

    21/11/2009 at 7:32 AM

    Thanks – what a lifesaver. Exchange 2010 Prerequisite check gets a C- in my book.

  8. Chris said

    21/12/2009 at 4:22 AM

    Excellent! Thank you!

  9. MiKeDaDoC said

    24/12/2009 at 2:19 PM

    Exactly what I was looking for :-)

    Thanks!!

  10. CharlesM said

    31/12/2009 at 2:25 AM

    Thanks a bunch! Required on ALL 2007 servers in Organization, but solved problem immediately!

  11. John Thorpe said

    27/01/2010 at 3:28 PM

    Thank God for Google :) …..

    …. and thank you for this fix as I can now configure OWA on 2010!!

  12. Exchange Server 2007 SP2 RU2 available for download « Exchange Geek's Weblog said

    30/01/2010 at 4:35 PM

    [...] Get-OWAVirtualDirectory returns “An IIS directory entry couldn't be created. The error message…[...]

Comments are closed.

«
»