Article ID: 2276957 - Last Review: August 4, 2010 - Revision: 2.0

"HTTP status code of 403" error when you start Exchange Management Shell on an Exchange Server 2010 Client Access server

View products that this article applies to.

System TipThis article applies to a different operating system than the one you are using. Article content that may not be relevant to you is disabled.

Expand all | Collapse all

SYMPTOMS

When you try to open Exchange Management Shell (EMS) on a Microsoft Exchange Server 2010 Client Access server, you receive the following error message in EMS:

VERBOSE: Connecting to <server name>
[<server name>] Connecting to remote server failed with the following error message : The WinRM client received an HTTP status code of 403 from the remote WS-Management service. For more information, see the about_Remote_Troubleshooting Help topic.
+ CategoryInfo : OpenError: (System.Manageme....RemoteRunspace:RemoteRunspace) [], PSRemotingTransportException
+ FullyQualifiedErrorId : PSSessionOpenFailed
Failed to connect to any Exchange Server in the current site.
Please enter the Server FQDN where you want to connect:

Back to the top

CAUSE

This problem occurs because the Require SSL option on the PowerShell virtual directory in Internet Information Services (IIS) Manager is enabled. However, this option setting is not needed because Exchange Server 2010 uses Kerberos authentication.

Back to the top

RESOLUTION

To resolve this problem, follow these steps:

On the Exchange Server 2010 Client Access server, open IIS Manager.
Locate the PowerShell Virtual directory under Default Web Site, and then click SSL Settings in the details pane.
Double-click SSL Settings and then clear the Require SSL option.
In the details pane, click Apply to save the settings in IIS Manager.
Restart IIS.
Close EMS, and then reopen it.

Back to the top