Remote PowerShell Connection to Lync Server With Kerberos authentication Fails

Hi everyone ,
Remote PowerShell to Lync Server With Kerberos authentication Fails .. Is there any reason for not being able to connect when authentication specified as Kerberos . But exactly same code works when Authentication is specified as "Negotiate"
E.g :
Error -
$session=New-PSSession -ConfigurationName Microsoft.Powershell -ConnectionUri https://serverName.lync.com/ocspowershell/ -Credential $cred -Authentication Kerberos
[serverName.lync.com] Connecting to remote server failed with the following error message : The WinRM client cannot process the request. The authentication mechanism requested by the client is not supported by the server or unencrypted traffic is disabled in
the service configuration. Verify the unencrypted traffic setting in the service configuration or specify one of the authentication mechanisms supported by the server. To use Kerberos, specify the computer name as the remote destination. Also verify
that the client computer and the destination computer are joined to a domain.To use Basic, specify the computer name as the remote destination, specify Basic authentication and provide user name and password. Possible authentication mechanisms reported by
server:   Digest Negotiate For more information, see the about_Remote_Troubleshooting Help topic.
    + CategoryInfo          : OpenError: (System.Manageme....RemoteRunspace:RemoteRunspace) [], PSRemotingTransportExc
   eption
    + FullyQualifiedErrorId : PSSessionOpenFailed
Works -
$session=New-PSSession -ConfigurationName Microsoft.Powershell -ConnectionUri https://serverName.lync.com/ocspowershell/ -Credential $cred -Authentication Negotiate

Hi,
Please double check if Windows Update is the latest version, if not, please update and then test again.
Please also ensure that the workstation you are using has network access to the Certificate Authority that signed the certificate.
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

Similar Messages

Exchange Management Console couldn't start with Kerberos authentication failed

When I was making changes to Client Access\owa settings, chaning from Basic authentication to Form authentication (upn name) then changed to Basic again. It was ok after changing to Form authentication but moment after changing back to Basic, I couldn't
no longer access owa (blank page when one vertical line) and in Exchange Management Console, I got "Initialization failed" - The following error occured while attempting to connect to the specified Exchange server 'sgp-ex1.mydomain.com':
The attempt to connect to http://sgp-ex1.mydomain.com/powershell using "Kerberos" authentication failed: Connecting to the remote server failed with the following error message: The WinRM client cannto process
the request. It cannot determine the content type of the HTTP response from the destination computer. The content type is absent or invalid. For more information, see the about_Remote_Troubleshooting Help topic.
I tried the troubleshooting tool from Exchange team blog:
http://blogs.technet.com/b/exchange/archive/2010/12/07/3411644.aspx. It give 3 possible causes for this error: 1. WSMan module entry is missing from global module section of c:\Windows\System32\InetSrv\Config\ApplicationHost.config; 2. Kerbauth module shows
up as Managed module or has been loaded in the Default Web Site Level; 3. The Path of the Powershell virtual directory has been modified.
I checked carefully, all the 3 causes do not apply to my situation as WSman entry is in order, the Kerbauth is native and local and the path of Powershell virtual directory is correct.
I find that in Application log, there are Event 2297 and 2307 dumped at the time of failure:
The worker process for application pool 'MSExchangeSyncAppPool' encountered an error 'Confiugration file in not well-formed XML' trying to read configuration data from file '\\?\C:\inetpubl\temp\apppools\MSExchangeSyncAppPool\MSExchangeSyncAppPool.config',
line number '2'. The data field contains the error code.
Help is very much appreciated.
Valuable skills are not learned, learned skills aren't valuable.

Unfortunately, all the links you provided didn't help.
The first link contains 3 methods:1 Removing WinRM feature and reinstalling. 2 Rename the web.config file in location C:\inetpub\wwwroot 3 Have you installed Microsoft Dynamics CRM 4. I?
As my server is Windows 2008 R2, the first method does not apply. I couldn't find any web.config in c:\Inetpub\wwwroot. The web.config however is found in many times in .netframework and winsxs directories. The 3rd method doesn't apply as I don't have CRM.
The 2nd link contains 3 possible causes. The first 2 are the same as the ones I mentioned in my initial post. I couldn't verify the last cause because when open Exchange Management Shell, I got this error: [sgp.ex1.mydomain.com] connecting to remote server
failed with the following server failed with the following error message: The WinRM client cannot process the request, it cannot determine the content type of the HTTP response from the destination computer. The content type is absent or invalide. For more
information, see the about_Remote_Troubleshooting Help topic.
I do not think the user is not remote powershell enabled because the problem happened suddenly, while I was making changes to Authentication settings of OWA(default) in Client Access in Exchange Management Console. If the user account is not remote powershell
enabled, then I couldn't event connect to EMC in the first place.
The last link didn't help because I could open up modules under PowerShell virtual directory in IIS.
I think since the event log is saying MSExchangeSyncAppPool.config and DefaultAppPool.config not well-formed XML, that might be a clue.
In the event id 2307 this is the message:
The worker process for application pool 'DefaultAppPool' encountered an error 'Configuration file is not well-formed XML
' trying to read configuration data from file '\\?\C:\inetpub\temp\apppools\DefaultAppPool\DefaultAppPool.config', line number '2'. The data field contains the error code.
Valuable skills are not learned, learned skills aren't valuable.

How do I run Remote Panel Connection Mgr on server with just runtime & exe

We are running a LabVIEW 6.1 executable on a PC with Windows2000. We have remote panels enabled and the system seems to be working fine. However, we would like to be able to run the Remote Panel Connection Manager in order to monitor the load we placing on our communications system. I can run it while in development mode, but the option is no longer available under Tools once I create the exe. On the actual server machines we do not have the full development system (only the runtime engine) installed. Is there a way to run the Remote Panel Connection Manager while running just the exe with the runtime engine?

The manager is a separate VI. It's located in \project\remotepanel.llb. You could try building an separate exe from it or including it as a support file in the exe you want to run as a remote panel. If it does run, you might have to create a custom menu in order to call it from your exe.

Connecting to ocs server with already authenticated user

Hi:
I'm trying to connect to an ocs server, but I wan't to avoid authenticating again.
Here's the code that I took from one of ocs's documents:
Note 290445.1 - Changes to the Login Portlet implementation for Portal 9.0.4.1/10.1.2
This code doesn't work because
/pls/orasso/orasso.wwsso_app_admin.ls_login"
does not exist on the ocs server.
I also tried it with sso/login.jsp.
Can someone point me in the right direction. I probably have to get /pls/orasso/orasso.wwsso_app_admin.ls_login"
from someplace.
Thanks,
Jerry
[email protected]
if (!parent.frames.s2pFrame) {
document.write("No parent.frames.s2pFrame<br>");
document.loginForm.site2pstoretoken.value =
"<v1.2~E0839293~C845405AC95AE4C810749B1AC84DB375EC3A27EF49EA28A6535E3D7381CC95DB8C7DAC3C8B949D011B2313C3B2C9DF69690739FCFD90DDA302878F8E274452C126C542753F70E
AF40F737C756D814327992A5A6D5DF1E25E3B399B686578F170FF53155D5E9690110F3EEA3753307
CD346A8489F6416B2B2CBA2EA45D7213C36F5A7591B2EC51E8C87E8A27B4B46CF14AF6FD54D7E14D
606AB8857E658B7260459E3AFBAF2F6F640C9F3720244E3D60ED104F6831EF183CD9A638E1933F92
53AD74EC169793FEE7CE8A20604C1C6513A0F37A121F16AF5F7A7CA80492769A8F7F4AC27E9986D4
E709AF83BFCB9D8C7E280DD1ECBF256B6C3FAC3452E530A8C92D9D355936A60041C>";
} else {
document.write("Yes parent.frames.s2pFrame<br>");
var hw = parent.frames.s2pFrame.window;
var hd = hw.document;
var s2p = hd.forms.freshTokenForm.site2pstoretoken.value;
document.loginForm.site2pstoretoken.value = s2p;
document.loginForm.password.value = (document.loginForm.password.value == "") ? document.loginForm.p_request.value
: document.loginForm.password.value;
document.loginForm.p_request.value = "";
document.loginForm.submit();
</script>
<p>
<h1>Sign In</h1>
<form name
="loginForm"
action="http://email-srv4.weizmann.ac.il:7777/pls/orasso/orasso.wwsso_app_admin.ls_login
method="post">
<input name="site2pstoretoken" type="hidden" value ="">
<input name="password" type="hidden" value ="">
Username: <input name="ssousername" type="text" value =""><br>
Password: <input name="p_request" type="password" value =""><br><br>
<input name="Login" type="button" value="Login" onClick="loginSubmit();">
</form>
<iframe
name="s2pFrame"
style="width:0px; height:0px; border:
0px"
src=http://email-srv4.weizmann.ac.il:7778/pls/portal/portal.wwptl_login.show_site2pstoretoken>
</iframe>

</html>

ORA-27140: attach to post/wait facility failedThis is to do with filesystem permissions on $ORALCE_HOME/bin
Login as the 'oracle' account (or the account with which oracle binaries are installed.
goto $ORACLE_HOME/bin
chmod 6751 account_used_to_install

How to setup Oracle OCI Driver with Kerberos Authentication in Eclipse

Hello I am trying to setup a connection to Oracle Server with kerberos authentication.
I am able to connect using SQL Developer but it seems impossible to do the same through the eclipse plugin any pointers?

Currently there is no support for Kerberos authentication on OEPE DB support. I'll open an enhancement request.

PS remoting with Kerberos authenticated sites

Hi everyone,
I was looking at the fabulous PowerShell Remoting feature and had it functional on a Windows 2003 server. Really cool !
Then I tried to activated it on a Windows 2008 R2 with Sharepoint 2010 configured with Kerberos authenticated sites. Fail.
It seems that WinRM needs an SPN HTTP for the machine name itself whereas If I do that, I'll get stuck with duplicate SPNs (Application pool service account already has a HTTP SPN). I tried removing the service account SPN and create the machine SPN and then
it works.
So my question is in the title :
How are you supposed to configure PS Remoting with an already Kerberos-authentication website configured without having SPN duplicate issues ?
Thanks!
Wes

Quick update on this as I have more infos.
The DNS workaround you mention fsocas is in the case that WinRM (or enable-PSRemote) is actually working and running.
In my case, it's not the case because WinRM isn't able to "activate" the listener, it will trigger a security error before doing it.
For your case fsocas, I suppose you could just use this method to make it work :
On your machine (from which you ps-remote):
Set-Item WSMAN:\localhost\Client\TrustedHosts -value 'ip address of the server'
So here's the complete scenario I have.
SharePoint 2010 server with Central admin running on it using this url :
http://name-of-the-server:8080
This url uses an application pool running under a domain account (let's call him domain\mycentraladmin)
To setup Kerberos, I added the corresponding SPNs to the domain account of the application pool (domain\mycentraladmin) :
- HTTP\name-of-the-server
- HTTP\name-of-the-server.domain.org
- HTTP\name-of-the-server:8080
- HTTP\name-of-the-server.domain.org:8080
So the Central admin site uses Kerberos for authentication. Everything works.
Running "Enable-PSRemoting -force" wll fail with this error :
Set-WSManQuickConfig : WinRM cannot process the request. The following error occured while using Negotiate authenticati
on: An unknown security error occurred.
or more specifically (using winrm command directly)
Error number: -2144108387 0x8033809D
An unknown security error occurred.
So, since WinRM seems to check for a HTTP SPN set on the computer object (HTTP\name-of-the-server), it will always fail because it will find the HTTP SPN but not set on the computer object. Thus, it cannot authenticate using Kerberos and just fails.
To have a proper configuration, I found out an interesting fact :
http://blogs.dirteam.com/blogs/tomek/archive/2009/12/20/kerberos-a-sprawa-portu.aspx
Internet Explorer only checks for a HTTP SPN on the default HTTP port (80). To force him to check the HTTP SPN with the port, you need to add a specific registry key.
Here's my simple Powershell script for this:
$Reg_Key = "HKLM:\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_INCLUDE_PORT_IN_SPN_KB908209"
New-item -type Directory $Reg_Key
New-ItemProperty -Path $Reg_Key -Name "iexplore.exe" -value "1" -propertytype dword
Note that this needs to be done on the client side (your machine).
Now, I modified the SPN configuration. It now looks like :
- HTTP\name-of-the-server:8080
- HTTP\name-of-the-server.domain.org:8080
I remove the default HTTP SPNs (which were necessary before applying the registry key to connect by Kerberos on the Central admin). But with the registry key in place, I'm able to log on to the Central admin with Kerberos.
With this working, I went on the server and triggered the cmdlet "Enable-PSRemoting -force". Success :)
Et voilà ! A nice setup without any dirty workaround.

Polycom CX600 "Signing in-" "Connecting to Lync Server"

Hi,
We have a customer who's using Lync 2013 and Polycom CX600 desk phones. They are getting a strange error where UserA can sign in to the phone, sign out, then back in again without error.
If UserB tried to sign in to the that phone they would get the message “Signing in…” “Connecting to Lync Server” it never times out until you stop it!
The only way to allow UserB to sign in is to perform a hard reset of the device. It's a single AD domain with a domain integrated ADCS deployment. They have tried two different levels of firmware with the same outcome. I setup the environment for
Lync PE as per Jeff Schertz's blog post.
Anyone got ideas??
http://lync2010tips.blogspot.com - [email protected] - If this post has been useful please click the green arrow to the left or click 'Propose as answer'

Have you checked the logs on the Front End Server and if nothing is there, ran logging through Lync's Centralized Logging Service? Please keep in mind that the immediacy that was OCSLogger.exe does not seem to exist based on my experiences with
CLS.
For checking on what may be occurring, I would recommend the Authentication scenario as it checks the following:
Scenario: Authentication
SipStack
UserServices
WebInfrastructure
UserPinService
CertProvisioning
Start-CsClsLogging -Scenario Authentication
Wait at least a minute, log in as the original user, then try to reproduce the issue, then wait a minute or two and stop the logging
Stop-CsClsLogging -Scenario Authentication
Give it a few minutes to compile a list then do a search of the CLS logs
Search-CsClsLogging -OutputFilePath "C:\Users\Admin\Desktop\Auth.txt"
Now, if you have the Lync 2013
Debugging Tools installed, launch Snooper (The default path is 'C:\Program Files\Microsoft Lync Server 2013\Debugging Tools') and drag the Auth.txt file into it.
With that said, you should be able to better decypher what is occurring based on what happens with the successful log on and cross referencing what happens with the failure.

Unable to connect to essbase server with Smart View

Hi,
I'm having trobules connecting Smart View in order to make some adhoc analysis, however I could perfectly establish connection with Planning and navigate through web forms in excel.
The address I'm using to connect to Essbase is: http://<server>:19000/aps/SmartView and the planning url is http://<server>:19000/HyperionPlanning/SmartView
I've been already using those urls in other server with version 11.1.2 but now that I'm trying to connect to a server with v11.1.1.3 I just can't. Whenever I connect to Planning in order to see the forms a prompt appears with the message saying that "I'm connecting to a server with an older version" but I could perfectly work with the forms. When I connect to essbase, I can see the Applications but I just can't make any adhoc analysis.
Could anyone have any idea of what could be happening?
Thanks in advance
Edited by: user9143843 on Jan 13, 2011 4:58 AM

Thanks for your response, I've already checked that port and keep getting the same message "Common Provider null datasource error". I can see the applications but can't get any further than that, no analysis adhoc, no smart slice, only disconnect :(

How to connect MS-sql server with SAP BW

hi all,
i want the connection procedure to how to connect MS-sql server with SAP BW.so that i can extract the data from ms sql server and can create cubes using that data.please help me in this issue.

Hi Vamshi,
Go through this DOC it explains u how to connect to other data bases like SQL...
[https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/58f4db47-0501-0010-a2bf-ff01b150fdff]
this is a thread related to connect the SQL server..
[DB Connect MS SQL Server;
Regards,
NR
Assign points if helpful...

The attempt to connect to the server on port 80 failed code error 12029

This error while playback of webapplication in the open script used for the load testing
I need some solution to solve this issue
The attempt to connect to the server on port 80 failed. Comparable WinInet error code: Error 12029: ERROR_INTERNET_CANNOT_CONNECT. Caused by: java.net.NoRouteToHostException occurred. Error Message: No route to host: connect
Error in section Run at line (script.java:37). The attempt to connect to the server metric.ind.rediff.com on port 80 failed.
Comparable WinInet error code: Error 12029: ERROR_INTERNET_CANNOT_CONNECT. Caused by: java.net.NoRouteToHostException occurred. Error Message: No route to host: connect
oracle.oats.scripting.modules.basic.api.exceptions.ScriptException: The attempt to connect to the server metric.ind.rediff.com on port 80 failed.
Comparable WinInet error code: Error 12029: ERROR_INTERNET_CANNOT_CONNECT.
     at oracle.oats.scripting.modules.http.api.ThinBrowser.createResponseFromHttpJob(ThinBrowser.java:306)
     at oracle.oats.scripting.modules.http.api.ThinBrowser.navigate(ThinBrowser.java:217)
     at oracle.oats.scripting.modules.http.api.ThinBrowser.navigate(ThinBrowser.java:183)
     at oracle.oats.scripting.modules.http.api.HTTPService.navigate(HTTPService.java:635)
     at oracle.oats.scripting.modules.http.api.HTTPService.navigate(HTTPService.java:1823)
     at oracle.oats.scripting.modules.http.api.HTTPService.get(HTTPService.java:2333)
     at oracle.oats.scripting.modules.http.api.HTTPService.get(HTTPService.java:2300)
     at script.run(script.java:37)
     at oracle.oats.scripting.modules.basic.api.IteratingVUser.run(IteratingVUser.java:262)
     at oracle.oats.scripting.modules.basic.api.internal.IteratingAgent.run(IteratingAgent.java:632)
     at java.lang.Thread.run(Thread.java:619)
Caused by: java.net.NoRouteToHostException: No route to host: connect
     at java.net.PlainSocketImpl.socketConnect(Native Method)
     at java.net.PlainSocketImpl.doConnect(PlainSocketImpl.java:333)
     at java.net.PlainSocketImpl.connectToAddress(PlainSocketImpl.java:195)
     at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:182)
     at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:366)
     at java.net.Socket.connect(Socket.java:519)
     at oracle.oats.lbrowser.http.RSyncConnection.connect(RSyncConnection.java:480)
     at oracle.oats.lbrowser.http.RSyncConnection.runCurrentJob(RSyncConnection.java:871)
     at oracle.oats.lbrowser.http.RSyncConnection.IRBrowserConnection_doJob(RSyncConnection.java:201)
     at oracle.oats.lbrowser.http.RBrowser.Navigate(RBrowser.java:899)
     at oracle.oats.lbrowser.http.RBrowser.Navigate(RBrowser.java:833)
     at oracle.oats.lbrowser.http.RBrowser.Navigate(RBrowser.java:798)
     at oracle.oats.scripting.modules.http.api.ThinBrowser.navigate(ThinBrowser.java:212)
     ... 9 more
14:57:18,531 ERROR [1] Iteration 1 failed at line (script.java:37). The attempt to connect to the server metric.ind.rediff.com on port 80 failed.
Comparable WinInet error code: Error 12029: ERROR_INTERNET_CANNOT_CONNECT. Caused by: java.net.NoRouteToHostException occurred. Error Message: No route to host: connect
oracle.oats.scripting.modules.basic.api.exceptions.ScriptException: The attempt to connect to the server metric.ind.rediff.com on port 80 failed.
Comparable WinInet error code: Error 12029: ERROR_INTERNET_CANNOT_CONNECT.
     at oracle.oats.scripting.modules.http.api.ThinBrowser.createResponseFromHttpJob(ThinBrowser.java:306)
     at oracle.oats.scripting.modules.http.api.ThinBrowser.navigate(ThinBrowser.java:217)
     at oracle.oats.scripting.modules.http.api.ThinBrowser.navigate(ThinBrowser.java:183)
     at oracle.oats.scripting.modules.http.api.HTTPService.navigate(HTTPService.java:635)
     at oracle.oats.scripting.modules.http.api.HTTPService.navigate(HTTPService.java:1823)
     at oracle.oats.scripting.modules.http.api.HTTPService.get(HTTPService.java:2333)
     at oracle.oats.scripting.modules.http.api.HTTPService.get(HTTPService.java:2300)
     at script.run(script.java:37)
     at oracle.oats.scripting.modules.basic.api.IteratingVUser.run(IteratingVUser.java:262)
     at oracle.oats.scripting.modules.basic.api.internal.IteratingAgent.run(IteratingAgent.java:632)
     at java.lang.Thread.run(Thread.java:619)
Caused by: java.net.NoRouteToHostException: No route to host: connect
     at java.net.PlainSocketImpl.socketConnect(Native Method)
     at java.net.PlainSocketImpl.doConnect(PlainSocketImpl.java:333)
     at java.net.PlainSocketImpl.connectToAddress(PlainSocketImpl.java:195)
     at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:182)
     at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:366)
     at java.net.Socket.connect(Socket.java:519)
     at oracle.oats.lbrowser.http.RSyncConnection.connect(RSyncConnection.java:480)
     at oracle.oats.lbrowser.http.RSyncConnection.runCurrentJob(RSyncConnection.java:871)
     at oracle.oats.lbrowser.http.RSyncConnection.IRBrowserConnection_doJob(RSyncConnection.java:201)
     at oracle.oats.lbrowser.http.RBrowser.Navigate(RBrowser.java:899)
     at oracle.oats.lbrowser.http.RBrowser.Navigate(RBrowser.java:833)
     at oracle.oats.lbrowser.http.RBrowser.Navigate(RBrowser.java:798)
     at oracle.oats.scripting.modules.http.api.ThinBrowser.navigate(ThinBrowser.java:212)
Edited by: user8692266 on Feb 10, 2010 1:47 AM
Edited by: user8692266 on Feb 10, 2010 1:47 AM

Hi
I'm guessing that you are going trough a proxy, if so you need to set your proxy setting for playback:
View -> OpenScript preferences -> Playback -> HTTP and enter the proxy settings.
Regards
Alex

Windows AD with Kerberos authentication not supported for NW AS JAVA 7.1

The Admin guide for BO 3.1 states that Windows AD with Kerberos authentication is not supported on NetWeaver AS.
Can anybody suggest & confirm on this???

I know we haven't been receiving cases for it, but I think in theory it should work fine. BO doesn't really care what web/app kerberos comes from as the manual authentication uses the java SDK (i.e tomcat 5.5 would use Sun JDK 1.5), and SSO kerberos (vintela) uses 3rd party libraries. It's possible our 3rd party libraries may not support netweaver yet. If I hear anything else I'll post.
Regards,
Tim

Exchange 2010 sp2 emc initialization error using "kerberos" authentication failed

We use exchange 2010 SP2.
We have 2 management stations, both w2k8 R2 SP1.
I have one mangement station on which the emc and ems works ok.
On the other management staiton (which is also in another ad site) the emc and ems don't work.
I get the following error message : The attempt to connect to
http://fqdnCasServer/PowerShell using "Kerberos" authentication failed: Connecting to remote server failed with the following error message : Access is denied. For more information, see the about_Remote_Troubleshooting Help topic.
I have checked the time on the management station and on the exchange server and this is ok.
It is not a permissions issue because the user functions ok on the other management station.
On the bad management station I can open the emc once and after a minute I get an error message and the message access denied. From then on I can't connect any more.
What am I doing wrong?
Anyone any tips?
Thanks,
JB

This is what I get in the eventlog of the bad management station.
Log Name:      MSExchange Management
Source:        MSExchange CmdletLogs
Date:          1/10/2012 11:39:27
Event ID:      6
Task Category: (1)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      Server.domain.com
Description:
The description for Event ID 6 from source MSExchange CmdletLogs cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
If the event originated on another computer, the display information had to be saved with the event.
The following information was included with the event:
Get-ExchangeServer
{Identity=Servername}
Domain/ou/ou/ou/ou/username
Exchange Management Console-Local
3080
22
00:00:00.3593888
View Entire Forest: 'True', Configuration Domain Controller: 'FQDN DC', Preferred Global Catalog: 'FQDN DC', Preferred Domain Controllers: '{ FQDN DN }'
Microsoft.Exchange.Configuration.Tasks.ManagementObjectNotFoundException: The operation couldn't be performed because object 'FQDN MGMTSTATION' couldn't be found on 'FQDN DC'.
Context
the message resource is present but the message is not found in the string/message table
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
    <Provider Name="MSExchange CmdletLogs" />
    <EventID Qualifiers="49152">6</EventID>
    <Level>2</Level>
    <Task>1</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2012-10-01T09:39:27.000000000Z" />
    <EventRecordID>11</EventRecordID>
    <Channel>MSExchange Management</Channel>
    <Computer>FQDN MGMT STATION</Computer>
    <Security />
</System>
<EventData>
    <Data>Get-ExchangeServer</Data>
    <Data>{Identity=MGMT STATION}</Data>
    <Data>domain/ou/ou/ou/ou/username</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>Exchange Management Console-Local</Data>
    <Data>3080</Data>
    <Data>
    </Data>
    <Data>22</Data>
    <Data>00:00:00.3593888</Data>
    <Data>View Entire Forest: 'True', Configuration Domain Controller: 'FQDN DC', Preferred Global Catalog: 'FQDN DC', Preferred Domain Controllers: '{ FQDN DC }'</Data>
    <Data>Microsoft.Exchange.Configuration.Tasks.ManagementObjectNotFoundException: The operation couldn't be performed because object 'FQDN MGMT STATION' couldn't be found on 'FQDN DC'.</Data>
    <Data>Context</Data>
    <Data>
    </Data>
</EventData>
</Event>

"Kerberos" authentication failed while trying to access EMC or EMS

Salam,
I have successfully installed Exchange 2010 SP1 on a transitional environment, the installation went smooth without any problem and I've done most of the trasitioning configuration from Exchange Server 2003 to Exchange Server 2010.
Currently we're in the process of moving the mailboxes, but I've come across a problem recently which stopped all my work and I can no longer commence with this transition unless its solved.
Sometimes when I try to access EMC or EMS I get the hereunder error:
The following error occurred while attempting to connect to the specified Exchange server 'afhmail.arabfinancehouse.com.lb':
The attempt to connect to http://afhmail.arabfinancehouse.com.lb/PowerShell using "Kerberos" authentication failed: Connecting to remote server failed
with the following error message : Access is denied. For more information, see the about_Remote_Troubleshooting Help topic.
I've read most of the articles found on the internet including
http://msexchangeteam.com/archive/2010/02/04/453946.aspx to try to troubleshoot this problem but nothing has worked so far, I tried removing Win RM IIS extensions as well then adding them again with a restart and nothing. I tried the Kerbauth dll removal
also nothing and the problem keeps to occur and the situation is not stable.
Also I read in a KB article somewhere that if we have multiple domain controllers a single domain controller should be assigned on the Exchange Server (Organization Configuration, Server Configuration, Recipient Configuration) so I assigned the PDC to be selected
by those configurations at startup, yet I am still facing the same problem.
Again I emphasis that the problem comes and goes, at a time I can access EMS and at another is just gives me the Kerberos error.
Thank you very much in advance,
Kindest Regards.
Abdullah Abdullah

Hi Abdullah,
Can you open the EMS?
If yes, please run the WinRM QC and post the results here.
If possible, please use another admin's account to log on to Exchange to try to open EMC.
Frank Wang
TechNet Subscriber Support
in forum
If you have any feedback on our support, please contact
[email protected]
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

How to connect a CVS server with remote Hosts(NWDS7.0)

Hi Frndz..
I installed CVSNT server in one machine n itz workiing fine with that NWDS in that machine , now i want make connect that CVS server from remote machines NWDS's to use that CVS server as a central repo'
Can anyone guide me how can i connect that server from remote machines thru NWDS.
Thnaks in Advance
Regards
Rajesh

rajesh,
did u check this link
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/d079e754-8c85-2b10-8b9a-b36db5262122
Thanks
Bala Duvvuri

Tricky Issue with connecting to Lync server from my desktop lync client 2010

I am facing a tricky situation here,
Firstly i have 3 modes of connecting my laptop to the internet as follows:
1)Using Wi-Fi connection.
2)A physical LAN cable connection
3)An internet data card (A USB data card).
Now, i can comfortably use my Lync using 1st and 2nd mode of connectivity. But i am having a real issue using the 3rd mode of connectivity i.e using internet data card, it just doesn't connect to the Lync server at all, even though i can browse internet
very well.
Later i got a workaround to solve this, what i did was, i connect to internet first with 1st and 2nd modes i.e wifi or lan cable and then i also connect to internet using 3rd mode i.e data card.
After this i start my Lync, which now connects perfectly and then when it is connected and working.
I disconnect my WiFi or LAN cable this causes Lync to restart, but this time it connect within minutes again using internet of my datacard, isn't this Bizarre ??
Now Could someone please help me to connect the Lync just by using my internet datacard?
Atlast 2 thing which may be of help is :
1)I can easily connect Outlook to the exchange server using my datacard and retrieve my mails.
2)When i connect to internet using my internet datacard, I can still see "Not Connected Symbol" in my network indicator on my Win7 PC, But i can still Brows
internet.
This problem may have something to do with networking, not sure. Please Help me to solve this !!!
Ambrish

Infact it was a Network Issue, found following on technet and solved the issue:
I found a solution for (my version of) this problem. My tray icon never showed the red X, but if I clicked on the icon, the popup showed a bigger icon with a red X, and said "Not connected". As in your case, Internet worked, but I'm unable to setup
a VPN connection because it insists on using a non-existent modem, obviously because I'm "not connected" (which I am).
I monitored the processes running the NlaSvc and Netprofm services (using ProcMon), and noticed that both were denied read/write access to subkeys within the HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList hierarchy.
The processes were running as NetworkService and LocalService, respectively, so I tried adding full access for these service accounts to the entire subkey
mentioned above. Notice that permissions are not automatically inherited in the registry, so you may need to explicitly "replace all child object permissions with inheritable permissions from this object".
Within seconds, Network and Sharing Center tells me I'm connected to my domain. Yay!
A reboot was required to fix the tray icon and its popup.
However, I'm still unable to add my VPN connection.
I'm interested in hearing from you guys if your registries miss the same permissions? If so, Windows 7 must have a bug somewhere with misaligned service permissions/rights.
Ambrish

Remote PowerShell Connection to Lync Server With Kerberos authentication Fails

Similar Messages

Maybe you are looking for