Yet Another - An IIS directory entry couldn't be created. The error message is Access is denied.

Not open for further replies.


I have recently installed exchange 2010 in a mixed environment (exchange 2003 and exchange 2007), Installation completed without any errors. Now when I try to access the “Outlook Web App” Tab under 2010 CAS server, I receive an error “An IIS directory entry couldn't be created. The error message is Access is denied. .HResult = -2147027891 “. having said that ,same command work's fine on Exchange 2007 Server .Google search and forums pointed me to add “Exchange Trusted Subsystem” to Local Administrator Group on all the exchange servers (including 2007 and 2003 ) , still no luck .. Any help or pointers will be greatly appreciated .

Current Setup :

AD: Win 2008 DC (2003 Functional level)

Exchange Setup:

· Exchange 2003 running on a Windows 2003 Server (First Admin Group).

· Exchange 2007(Build 83.6) (Srv Name :Exch01) running on windows 2008 R2.

· Exchange 2010 (Build 639.21) running on windows 2008 R2 .

Here is the “Get-owavirtualdirectory “ Output on Exchange 2010

[PS] C:\Windows\system32>Get-OwaVirtualDirectory -verbose

VERBOSE: [21:44:42.707 GMT] Get-OwaVirtualDirectory : Active Directory session settings for 'Get-OwaVirtualDirectory'

are: View Entire Forest: 'False', Default Scope: '', Configuration Domain Controller: '',

Preferred Global Catalog: '', Preferred Domain Controllers: '{ }'

VERBOSE: [21:44:42.722 GMT] Get-OwaVirtualDirectory : Runspace context: Executing user:,
Executing user organization: , Current organization: , RBAC-enabled: Enabled.

VERBOSE: [21:44:42.722 GMT] Get-OwaVirtualDirectory : Beginning processing.

VERBOSE: [21:44:42.722 GMT] Get-OwaVirtualDirectory : Current ScopeSet is: {Domain Read Scope: {, }, Domain Write

Scope(s): {, }, Configuration Scope: {, }, Server Configuration Scope(s): {, }, , Exclusive Scope: {, }}

VERBOSE: [21:44:42.722 GMT] Get-OwaVirtualDirectory : Resolved current organization: .

VERBOSE: [21:44:42.738 GMT] Get-OwaVirtualDirectory : Searching objects of type " ADOwaVirtualDirectory" with filter

" $null" , scope " SubTree" under the root " $null" .

VERBOSE: [21:44:42.769 GMT] Get-OwaVirtualDirectory : Previous operation run on domain controller ''.

VERBOSE: [21:44:42.769 GMT] Get-OwaVirtualDirectory : Preparing to output objects. The maximum size of the result set

is " unlimited" .

An IIS directory entry couldn't be created. The error message is Access is denied.

> HResult = -2147024891
+ CategoryInfo : NotInstalled: (EXCH01\owa (Default Web Site):ADObjectId) [Get-OwaVirtualDirectory], IISG
+ FullyQualifiedErrorId : 48F3BF5D,Microsoft.Exchange.Management.SystemConfigurationTasks.GetOwaVirtualDirectory


Did you add the “Exchange Trusted Subsystem" on all Exchange 2007 servers in the environment?

Are your DCs Windows 2003? If so can you try the following if the above did not work?
Launch IIS Manager Navigate to -> Web Sites -> Default Web Site Right Click on Default Web Site and choose Permissions Add Exchang Trusted Subsystem and grant Full Control Restart IIS Restart the Exchange 2010 Server

MCITP: Enterprise Messaging Administrator 2007/2010 | MCITP: Server Administrator | MCTS: Windows Server 2008 Applications Infrastructure, Configuring | MCP | MCDST
Not open for further replies.