I am in the midst of an Exchange 2003 --> 2007 migration. I added the new 2007 server this weekend (cas, hub and mailbox roles) and it seems to be working fine. Our backup software (Backup Exec) runs on a different server and I upgraded that this weekend to the latest version (12.5) with the appropriate Exchange agent. Backup Exec requires the Exchange Management tools on the host -- the host is a DC running 2003R2 SP2, 32 bit. I loaded the prereqs and the 32bit version of the management tools; no errors reported. The management console works fine on the new server, but throws lots of errors on the backup server, for example: Get-ActiveSyncVirtualDirectory failed. Unable to create IIS Directory entry -- Access is Denied. There are several like this, all relating to an Access Denied error in IIS. I'm logged in the same way on both boxes -- Domain Administrator. Has anyone dealt with this before?

I should have mentioned that the new Exchange server is 2008 SP1, 64bit and Exchange is SP1.

Did you setup Exchange permission required for Backup Exec on the account you use for backup? It requires Exchange Organization and Server admin permission and Domain and local admin explicitly, to work perfectly. Check portion #1 in below article... How to configure Microsoft Exchange Server 2007 backups in Backup Exec 11d and above http://seer.entsupport.symantec.com/docs/306281.htm If you get any problem then suggest you to check with Symantec or on their forums about permission configuration... http://www.symantec.com/connect/forums Amit Tank | MVP Exchange Server | MCITP: EMA | MCSA: M | http://ExchangeShare.WordPress.com

Amit, Thanks for the reply. I think I configured the backup service account correctly, but I will double-check. The problem I'm having though is actually independent of Backup Exec. Running the Exchange Management Console while logged on to the backup server under the domain administrator account throws these errors. This is outside of Backup Exec, so I think there is more to it than possible issues with the backup service account.

Yes, I do agree but still when you are running EMC with BackupExec account which has Domain Admin permission, it requires Exchange Server Admin permission to get Exchange related IIS virtual directory access or read the data through EMC. In Exchange 2007 permission model has changed and it has 4 different roles (5 in SP1) and necessary permission required to access EMC and related data... Permission Considerations http://technet.microsoft.com/en-us/library/aa996881.aspx So suggest you to verify that backup service account is member of Exchange Organization and Exchange Server admin groups or added into those under EMC... Amit Tank | MVP Exchange Server | MCITP: EMA | MCSA: M | http://ExchangeShare.WordPress.com

HI Normally Symantec backupexc has 1 year free services support. I would suggest to use any one of below links and get their support. Support Phone Numbers http://www.symantec.com/business/support/contact_techsupp_numbers.jsp?pid=15047 MySupport Online Case Management https://mysupport.symantec.com/ Regards Chinthaka

I did verify the permissions on the backup service account, and they seem ok to me. I still don't think this is germane to the problem, though. Let me explain a little more thoroughly: "Administrator" - this is the built-in domain administrator account. This account was used to install Exchange on both systems. Member of Domain Admins "BES" - this is the name of the account used by Backup Exec. Also in Domain Admins. Also in Exchange Organization Administrators. When I log in to the backup server as "Administrator" and launch EMC from the console I get the errors referenced above. I'm not logged in as "BES" and the BackupExec program is not even running yet -- I haven't gotten that far. I understand that permission problems on "BES" could cause issues but I can't see that it's causing this issue since I'm not using that account (yet). To the other reply, I could call Symantec support (and may), but the current issue really doesn't seem to have anything to do with them. Even if Backup Exec were not installed on this system and only the Exchange management tools were, I think I would have the same problem. Thanks for the replies so far.

Hi, First please apply the hotfix for IIS 7.0. FIX: Error message when you try to administer a remote IIS 7.0 server and the impersonation level of the calling thread is set to Identify: "Exception Details: System.Runtime.InteropServices.COMException: Access is denied" http://support.microsoft.com/kb/956301 After that, please check the issue. If the issue still persists, then please try to run ExBPA from the remote EMC and then check if any error will be logged there. If you get Exchange Server WMI could not be accessed, then please follow the steps in article below to solve the problem. Exchange Server WMI could not be accessed http://technet.microsoft.com/en-us/library/aa995771.aspx If all the steps do not help,then please post the detail error information here with the EXBPA reports. Regards, Xiu

This hotfix seems to have done the trick! Thanks, Xiu. And thanks to all who replied.