Pro-Exchange,Lync & Office 365
Belgian Microsoft Unified Communications Professionals
Microsoft Exchange Server, Microsoft Lync Server & Office 365
EMC 2010 – Client Access Server Configuration : An IIS directory entry couldn’t be created. The error message is Access is denied. HResult = -2147024891

I Recently upgraded my Exchange Organization with some Exchange 2010 server.
Obviously you start with the CAS Server 2010. Opening the EMC returned a strange error : An IIS directory entry couldn’t be created. The error message is Access is denied. HResult = –2147024891
That was strange as the setup did not return any errors

image

After some searching on the internet I found the answer on this site:
http://msexchangegeek.com/2009/09/18/get-owavirtualdirectory-returns-an-iis-directory-entry-couldnt-be-created-the-error-message-is-access-is-denied/

Strangely enough this error is spawned because there is/are Exchange 2007 CAS Server(s) that do not give permissions to Exchange 2010 to enumerate IIS.
As you may know is this very odd because the EMC 2010 does not display any Exchange 2007 Server!
The Solution is to add the security group “Exchange Trusted Subsystem” as member of Local Administrators group on an ALL Exchange Server 2007 boxes

In my opinion this should be solved by the Exchange 2010 setup process or some additional ADPREP parameter that takes care of this.


Posted 10-28-2009 11:32 by Johan Delimon

Comments

Sean Williams wrote re: EMC 2010 – Client Access Server Configuration : An IIS directory entry couldn’t be created. The error message is Access is denied. HResult = -2147024891
on 11-11-2009 4:06

I have this sme issue however the Exchange 2007 server is on a Domain Controller.  We have been looking forward to 2010 so we can eliminate our last Windows 2003 DC the last legacy server from the previous enginer.  How can we get past this error since  have no local administrators group.  I have tried adding the “Exchange Trusted Subsystem” to the Domain Admins group, no success.