EMC won't open. kerberos authentication failed. After SP3 update

Sorry for the long story but please read and help me out.
I have just upgraded Exchange 2010 from SP1 to SP3. I have two Exchange servers both running Windows Server 2008 R2 and both are VMs on VMWare ESXi 5, one has the CAS role and the other has the Hub and Mailbox Role. Had problems during the upgrade
process. I upgraded the schema and the CAS server first and they were fine. The Hub/Mailbox server had a problem stopping Exchange services and i had to remove VMWare Tools and reboot the server, this then broken the MBR and i had to restore the
server from a backup i took before the start of the upgrade process. After the restore of the Hub/Mailbox server Exchange came backup fine with the CAS on SP3 and Hub/Mailbox on SP1. So i started the upgrade process again on the Hub/Mailbox server
and it gave errors about Powershell on the Hub Transport upgrade task. I followed these guides to fix the problem and enabled me to install SP3 on the server:
Click Click
Also followed another guide that i can't find the link to telling me to remove the PowerShell and PowerShell-Proxy from IIS on the CAS server. This enabled the install or SP3 on the Hub/Mailbox server and Exchange has come up and is working fine.
However when i try and open the EMC or EMS on the CAS server i receive the following error:
I assume it's to do with the missing PowerShell and PowerShell-Proxy from IIS on the CAS server. I have tried recreating the PowerShell and Powershell-Proxy on the CAS server in IIS using the same settings as on the Hub/Mailbox server, but that hasn't
worked as i guess the registry and AD objects are now missing to. I really need to get this working as a third party Email archive system uses the CAS server to change Exchange settings and that isn't working now.
Thanks

Please check this.
http://technet.microsoft.com/en-in/library/dd351136%28en-us%29.aspx
Make sure all the prerequisites are installed as per :
http://technet.microsoft.com/hi-in/library/bb691354(en-us).aspx
1. Make sure IIS WinRM extension is installed
2. open powershell and run command : WinRM Quickconfig
3. Open IIS go to Powershell virtual directory and check that SSL in disabled and authentification is set only to Anonymous
4. Open Windows powershell modules
5. run Remove-PowershellVirtualDirectory command
6. run New-PowershellVirtuallirectory command
7. IISreset
Thanks, MAS
Please mark as helpful if you find my comment helpful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you.

Similar Messages

Exchange 2010 sp2 emc initialization error using "kerberos" authentication failed

We use exchange 2010 SP2.
We have 2 management stations, both w2k8 R2 SP1.
I have one mangement station on which the emc and ems works ok.
On the other management staiton (which is also in another ad site) the emc and ems don't work.
I get the following error message : The attempt to connect to
http://fqdnCasServer/PowerShell using "Kerberos" authentication failed: Connecting to remote server failed with the following error message : Access is denied. For more information, see the about_Remote_Troubleshooting Help topic.
I have checked the time on the management station and on the exchange server and this is ok.
It is not a permissions issue because the user functions ok on the other management station.
On the bad management station I can open the emc once and after a minute I get an error message and the message access denied. From then on I can't connect any more.
What am I doing wrong?
Anyone any tips?
Thanks,
JB

This is what I get in the eventlog of the bad management station.
Log Name:      MSExchange Management
Source:        MSExchange CmdletLogs
Date:          1/10/2012 11:39:27
Event ID:      6
Task Category: (1)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      Server.domain.com
Description:
The description for Event ID 6 from source MSExchange CmdletLogs cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
If the event originated on another computer, the display information had to be saved with the event.
The following information was included with the event:
Get-ExchangeServer
{Identity=Servername}
Domain/ou/ou/ou/ou/username
Exchange Management Console-Local
3080
22
00:00:00.3593888
View Entire Forest: 'True', Configuration Domain Controller: 'FQDN DC', Preferred Global Catalog: 'FQDN DC', Preferred Domain Controllers: '{ FQDN DN }'
Microsoft.Exchange.Configuration.Tasks.ManagementObjectNotFoundException: The operation couldn't be performed because object 'FQDN MGMTSTATION' couldn't be found on 'FQDN DC'.
Context
the message resource is present but the message is not found in the string/message table
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
    <Provider Name="MSExchange CmdletLogs" />
    <EventID Qualifiers="49152">6</EventID>
    <Level>2</Level>
    <Task>1</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2012-10-01T09:39:27.000000000Z" />
    <EventRecordID>11</EventRecordID>
    <Channel>MSExchange Management</Channel>
    <Computer>FQDN MGMT STATION</Computer>
    <Security />
</System>
<EventData>
    <Data>Get-ExchangeServer</Data>
    <Data>{Identity=MGMT STATION}</Data>
    <Data>domain/ou/ou/ou/ou/username</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>Exchange Management Console-Local</Data>
    <Data>3080</Data>
    <Data>
    </Data>
    <Data>22</Data>
    <Data>00:00:00.3593888</Data>
    <Data>View Entire Forest: 'True', Configuration Domain Controller: 'FQDN DC', Preferred Global Catalog: 'FQDN DC', Preferred Domain Controllers: '{ FQDN DC }'</Data>
    <Data>Microsoft.Exchange.Configuration.Tasks.ManagementObjectNotFoundException: The operation couldn't be performed because object 'FQDN MGMT STATION' couldn't be found on 'FQDN DC'.</Data>
    <Data>Context</Data>
    <Data>
    </Data>
</EventData>
</Event>

AFP authentication fails after software updates

Hi,
I'm running a 10.4.7 server configured as an Open Directory Master. It is the only server and is mainly used for AFP and SMB file sharing. (No client shell logins).
For some time now (since 10.4.3) I'm finding that after I apply a Software Update* our AFP users can no longer log in to AppleShare. They can mount the same volumes via SMB, but cannot authenticate via AFP until I have them manually reset their password (even to the old value) in Workgroup Manager.
The ApplePasswordServer.Server.log file shows:
DIGEST-MD5 authentication failed, SASL error -13 (password incorrect)
(It's definitely not a case of mis-typed passwords, as these errors are generated by saved keychain logins...and the same keychain logins work again after the old password has been re-entered again in Workgroup Manager).
Has anybody seen any problems like this before and have any ideas how to fix it?
* I haven't been able to narrow down specifically which types of Software Updates yet.
Mac OS X (10.4.7)
Mac OS X (10.4.3)

It is one user per sharepoint for personal directories on the server. Many of the users do have access to various other sharepoints however for common projects, etc.
(None of the share points are in the sub-directories of any other sharepoints either. ie. No sharepoint has an ancestor directory that is also a sharepoint.)
When the problem occurs, all AFP users lose access to all AFP sharepoints however.
The permissions on the sharepoints themselves are ok as:
- users can access the same sharepoint with SMB
- when the user re-enters their password, AFP access is restored, without needing to change the permissions whatsoever.
I hope that is a bit clearer! Appreciate your time in responding.

Photoshop CS6 & Lightroom 4 won't open or save files after iMac update 11/2013

My photoshop CS6 has crashed a few times, and it wont open any files nor save them, the same goes for my lightroom 4 & 5. how can this be fixed. I am a mamber of adobe and pay monthly for both my programs. This started after my iMac updated in November 2013. I am a photogrpher and need this fixed asap. Thank you!

In addition to writing up a request for the ability to repair an installation, ask that the updater be made more robust - e.g., capable of fully updating no matter what the state of existing files.
Also make a mental note to be more careful about fooling around with the files inside the Photoshop installation area.
Most folks don't realize that if they change anything other than in the plug-ins directory that they are chancing making future updates fail as well. Even Adobe themselves at some times have suggested changing files to work around problems. But as you point out, the cloud updater ought to be more resilient.
-Noel

Outlook 2010 Basic Authentication Fails after Server Update

It appears that since updating our 2 DCs (Win 03 Enterprise SP2) with windows update released this week (March 10 - fully patched before), Outlook
users using Basic Authentication all failed to connect to our Ex 03 SP2 server.
Domain users connecting using NTLM has no problem. Our Ex server has also been updated ..
Can anyone suggest how to trouble shoot? Thanks a lot.

Hi,
How did those server use Basic Authentication Set-up? Was there any difference between Domain Users and users who use basic authentication?
Meanwhile we can start checking below items:
Ping your Exchange server address/DNS from the client machine which using basic authentication, see if the Exchange server was pingable.
NSlookup Exchange server address/DNS from the client machine which using basic authentication, see if the address/DNS of the Exchange server could be resolved from client.
Collecting Outlook log from client machine which using basic authentication, default location is: C:\Users\<user>\AppData\Local\Temp\outlook logging\<user email account>-<user>.ost.log
at current date time.
Send the log though mail to: [email protected]
Let me know the result about 1 and 2 here or along with mail. Thanks.

Most of my apps won't open on my ipod after they updated.

Could this be a virus or does anyone know why this would happen?

Hello there, Chantel.
The following Knowledge Base article offers up some great steps for troubleshooting the issue you're describing:
iOS: Understanding multitasking
http://support.apple.com/kb/ht4211
Particularly:
If an app doesn't respond to your input, or doesn't perform as expected, do the following, testing after each step:
Check for app updates.
Force the app to close.
Restart your device.
Update your iOS device.
Learn more about troubleshooting apps.
Thanks for reaching out to Apple Support Communities.
Cheers,
Pedro.

"Kerberos" authentication failed while trying to access EMC or EMS

Salam,
I have successfully installed Exchange 2010 SP1 on a transitional environment, the installation went smooth without any problem and I've done most of the trasitioning configuration from Exchange Server 2003 to Exchange Server 2010.
Currently we're in the process of moving the mailboxes, but I've come across a problem recently which stopped all my work and I can no longer commence with this transition unless its solved.
Sometimes when I try to access EMC or EMS I get the hereunder error:
The following error occurred while attempting to connect to the specified Exchange server 'afhmail.arabfinancehouse.com.lb':
The attempt to connect to http://afhmail.arabfinancehouse.com.lb/PowerShell using "Kerberos" authentication failed: Connecting to remote server failed
with the following error message : Access is denied. For more information, see the about_Remote_Troubleshooting Help topic.
I've read most of the articles found on the internet including
http://msexchangeteam.com/archive/2010/02/04/453946.aspx to try to troubleshoot this problem but nothing has worked so far, I tried removing Win RM IIS extensions as well then adding them again with a restart and nothing. I tried the Kerbauth dll removal
also nothing and the problem keeps to occur and the situation is not stable.
Also I read in a KB article somewhere that if we have multiple domain controllers a single domain controller should be assigned on the Exchange Server (Organization Configuration, Server Configuration, Recipient Configuration) so I assigned the PDC to be selected
by those configurations at startup, yet I am still facing the same problem.
Again I emphasis that the problem comes and goes, at a time I can access EMS and at another is just gives me the Kerberos error.
Thank you very much in advance,
Kindest Regards.
Abdullah Abdullah

Hi Abdullah,
Can you open the EMS?
If yes, please run the WinRM QC and post the results here.
If possible, please use another admin's account to log on to Exchange to try to open EMC.
Frank Wang
TechNet Subscriber Support
in forum
If you have any feedback on our support, please contact
[email protected]
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Exchange Management Console couldn't start with Kerberos authentication failed

When I was making changes to Client Access\owa settings, chaning from Basic authentication to Form authentication (upn name) then changed to Basic again. It was ok after changing to Form authentication but moment after changing back to Basic, I couldn't
no longer access owa (blank page when one vertical line) and in Exchange Management Console, I got "Initialization failed" - The following error occured while attempting to connect to the specified Exchange server 'sgp-ex1.mydomain.com':
The attempt to connect to http://sgp-ex1.mydomain.com/powershell using "Kerberos" authentication failed: Connecting to the remote server failed with the following error message: The WinRM client cannto process
the request. It cannot determine the content type of the HTTP response from the destination computer. The content type is absent or invalid. For more information, see the about_Remote_Troubleshooting Help topic.
I tried the troubleshooting tool from Exchange team blog:
http://blogs.technet.com/b/exchange/archive/2010/12/07/3411644.aspx. It give 3 possible causes for this error: 1. WSMan module entry is missing from global module section of c:\Windows\System32\InetSrv\Config\ApplicationHost.config; 2. Kerbauth module shows
up as Managed module or has been loaded in the Default Web Site Level; 3. The Path of the Powershell virtual directory has been modified.
I checked carefully, all the 3 causes do not apply to my situation as WSman entry is in order, the Kerbauth is native and local and the path of Powershell virtual directory is correct.
I find that in Application log, there are Event 2297 and 2307 dumped at the time of failure:
The worker process for application pool 'MSExchangeSyncAppPool' encountered an error 'Confiugration file in not well-formed XML' trying to read configuration data from file '\\?\C:\inetpubl\temp\apppools\MSExchangeSyncAppPool\MSExchangeSyncAppPool.config',
line number '2'. The data field contains the error code.
Help is very much appreciated.
Valuable skills are not learned, learned skills aren't valuable.

Unfortunately, all the links you provided didn't help.
The first link contains 3 methods:1 Removing WinRM feature and reinstalling. 2 Rename the web.config file in location C:\inetpub\wwwroot 3 Have you installed Microsoft Dynamics CRM 4. I?
As my server is Windows 2008 R2, the first method does not apply. I couldn't find any web.config in c:\Inetpub\wwwroot. The web.config however is found in many times in .netframework and winsxs directories. The 3rd method doesn't apply as I don't have CRM.
The 2nd link contains 3 possible causes. The first 2 are the same as the ones I mentioned in my initial post. I couldn't verify the last cause because when open Exchange Management Shell, I got this error: [sgp.ex1.mydomain.com] connecting to remote server
failed with the following server failed with the following error message: The WinRM client cannot process the request, it cannot determine the content type of the HTTP response from the destination computer. The content type is absent or invalide. For more
information, see the about_Remote_Troubleshooting Help topic.
I do not think the user is not remote powershell enabled because the problem happened suddenly, while I was making changes to Authentication settings of OWA(default) in Client Access in Exchange Management Console. If the user account is not remote powershell
enabled, then I couldn't event connect to EMC in the first place.
The last link didn't help because I could open up modules under PowerShell virtual directory in IIS.
I think since the event log is saying MSExchangeSyncAppPool.config and DefaultAppPool.config not well-formed XML, that might be a clue.
In the event id 2307 this is the message:
The worker process for application pool 'DefaultAppPool' encountered an error 'Configuration file is not well-formed XML
' trying to read configuration data from file '\\?\C:\inetpub\temp\apppools\DefaultAppPool\DefaultAppPool.config', line number '2'. The data field contains the error code.
Valuable skills are not learned, learned skills aren't valuable.

Remote PowerShell Connection to Lync Server With Kerberos authentication Fails

Hi everyone ,
Remote PowerShell to Lync Server With Kerberos authentication Fails .. Is there any reason for not being able to connect when authentication specified as Kerberos . But exactly same code works when Authentication is specified as "Negotiate"
E.g :
Error -
$session=New-PSSession -ConfigurationName Microsoft.Powershell -ConnectionUri https://serverName.lync.com/ocspowershell/ -Credential $cred -Authentication Kerberos
[serverName.lync.com] Connecting to remote server failed with the following error message : The WinRM client cannot process the request. The authentication mechanism requested by the client is not supported by the server or unencrypted traffic is disabled in
the service configuration. Verify the unencrypted traffic setting in the service configuration or specify one of the authentication mechanisms supported by the server. To use Kerberos, specify the computer name as the remote destination. Also verify
that the client computer and the destination computer are joined to a domain.To use Basic, specify the computer name as the remote destination, specify Basic authentication and provide user name and password. Possible authentication mechanisms reported by
server:   Digest Negotiate For more information, see the about_Remote_Troubleshooting Help topic.
    + CategoryInfo          : OpenError: (System.Manageme....RemoteRunspace:RemoteRunspace) [], PSRemotingTransportExc
   eption
    + FullyQualifiedErrorId : PSSessionOpenFailed
Works -
$session=New-PSSession -ConfigurationName Microsoft.Powershell -ConnectionUri https://serverName.lync.com/ocspowershell/ -Credential $cred -Authentication Negotiate

Hi,
Please double check if Windows Update is the latest version, if not, please update and then test again.
Please also ensure that the workstation you are using has network access to the Certificate Authority that signed the certificate.
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

Updated to Yosemite, no problem. now iPhoto and iMovie won't open. Says I need to update software however, when i try to update indicates my User ID and PW won't work for these two pieces of software. User ID and PW works everywhere else.

Updated to Yosemite, no problem. now iPhoto and iMovie won't open. Says I need to update software however, when i try to update indicates my User ID and PW won't work for these two pieces of software. User ID and PW works everywhere else.

I am having the same problem. I even changed my password and updated all of my security information. Now it just gives me an error and retry message, which of course also does not work. Went to support and was going to open a chat (seemed the simpler option) and received a message that my support has expired for this serial number unless I want to pay $29.00. So I chose the option to call later, which was the exact time suck I was trying to avoid. Why wouldn't the new operating system also update the apps that were already part of my old platform?

IPhoto won't open due to the not being updated but when I check to upgrade to iPhoto 11 it tells me it is installed. The photos in the library were modified using 9.1.5 and the iPhoto is said to be 7.1.5 (iPhoto 8). Any ideas?

iPhoto won't open due to the not being updated but when I check to upgrade to iPhoto 11 it tells me it is installed. The photos in the library were modified using 9.1.5 and the iPhoto is said to be 7.1.5 (iPhoto 8). Any ideas?

How do you know the library was modified with iPhoto 9 (11)? If you've never had iPhoto 9 on your Mac it could'nt have. It sounds like a damaged library. Make a temporary, backup copy (if you don't already have a backup copy) of the library and apply the two fixes below in order as needed:
Fix #1
Launch iPhoto with the Command+Option keys held down and rebuild the library.
Select the options identified in the screenshot.
Fix #2
Using iPhoto Library Manager to Rebuild Your iPhoto Library
Download iPhoto Library Manager and launch.
Click on the Add Library button, navigate to your Home/Pictures folder and select your iPhoto Library folder.
Now that the library is listed in the left hand pane of iPLM, click on your library and go to the File ➙ Rebuild Library menu option
In the next window name the new library and select the location you want it to be placed.
Click on the Create button.
Note: This creates a new library based on the LIbraryData.xml file in the library and will recover Events, Albums, keywords, titles and comments but not books, calendars or slideshows. The original library will be left untouched for further attempts at fixing the problem or in case the rebuilt library is not satisfactory.
OT

CS5 won't open NEF files from D600, despite updating camera raw plug in. How do I fix this?

CS5 won't open NEF files from D600, despite updating camera raw plug in. How do I fix this?

The D600 was first supported in Camera Raw 7.3 which is only compatible with CS6 and later - not CS5 unfortunately.
http://helpx.adobe.com/creative-suite/kb/camera-raw-plug-supported-cameras.html
http://helpx.adobe.com/x-productkb/global/camera-raw-compatible-applications.html
Some options:
FREE
Download the free Adobe DNG converter, convert all D600 Raw files to DNGs then open the DNGs in CS5
http://www.adobe.com/products/photoshop/extend.displayTab2.html
PAID
Upgrade to CS6
Buy Lightroom 5.4
Buy Photoshop Elements 12
Join the Cloud and get CC (subscription only)
Join the Photoshop Photography Program and get Photoshop CC + Lightroom (subscription only)

SOLVED Key board and mouse fail after last update

Both my wireless keyboard and mouse failed after I updated yesterday. I'm using KNOPPIX to post they both work with knoppix so its not a hardware problem.
KDE 4.1
Logitech keyboard and mouse
Last edited by normc (2008-11-08 00:05:37)

Thanks a lot
Just want to add that I had to edit grub at start up and add "single" at the end of the kernel line.
The reason is that switching to runlevel 3 didn't work for me.

TS1424 I can't open the iTune store after I updated my iphone to iOS 7.

Hi there, could someone help me here please - I can't open the iTune store after I updated my iphone 4 to iOS 7. The problem occurred about 5 days later after the upgrade. There are no error messages. As I tap on the icon it opens just for a fraction of a moment and then goes off and back to the main screen. Other apps are working just fine. I tried following the troubleshooting steps as suggested by apple support, but that didn't help unfortunately...
Thank you

Refer to this article:
Can't connect to the iTunes Store
http://support.apple.com/kb/TS1368

HT1338 I'm getting a message that my Java is not updated, but when I run the update check, I'm told all is updated. Some web materials won't open because my Java is not updated. What do I do?

I'm getting a message that my Java is not updated, but when I run the update check, I'm told all is updated. Some web materials won't open because my Java is not updated. What do I do?

Hi Ginny,
There are no more updates for Java from Apple for 10.5.8, the only way to get a Java upgrade is updating your OSX.
Snow Leopard/10.6.x Requirements...
General requirements
   * Mac computer with an Intel processor
    * 1GB of memory (I say 4GB at least, more if you can afford it)
    * 5GB of available disk space (I say 30GB at least)
    * DVD drive for installation
    * Some features require a compatible Internet service provider; fees may apply.
    * Some features require Apple’s MobileMe service; fees and terms apply.
Which apps work with Mac OS X 10.6?...
http://snowleopard.wikidot.com/
It looks like they do still have it:
http://store.apple.com/us/product/MC573Z/A?fnode=MTY1NDAzOA
And it's been reported that if you have a MobileMe account Apple will send one free.

EMC won't open. kerberos authentication failed. After SP3 update

Similar Messages

Maybe you are looking for