New-PSSession WinRM无法处理请求 [英] New-PSSession WinRM cannot process the request

问题描述

尝试使用PowerShell远程连接Exchange Server 2013并获取以下错误请指南

thx。



新PSSession：[exch .mydo.com.com]连接到远程服务器tdl-exch.tdl.com失败，出现以下错误

消息：WinRM无法处理请求。使用

Kerberos身份验证时出现以下错误，错误代码为0x80090311：目前没有可用于登录请求的登录服务器。

 可能的原因是：

  - 指定的用户名或密码无效。

  - 如果未指定身份验证方法且未指定用户名，则使用-Kerberos。

  -Kerberos接受域名用户名，但不接受本地用户名。

  - 远程计算机名称和端口的服务主体名称（SPN）不存在。

  - 客户端和远程计算机位于不同的域中，两个域之间没有信任。

 检查上述问题后，请尝试以下操作：

  ; - 检查事件查看器以查找与身份验证相关的事件。

  - 更改身份验证方法;将目标计算机添加到WinRM TrustedHosts配置设置或使用
使用HTTPS传输。

 请注意，TrustedHosts列表中的计算机可能未经过身份验证。

    - 有关WinRM配置的更多信息，请运行以下命令：winrm help config。有关更多

的信息，请参阅about_Remote_Troubleshooting帮助主题。
$
在行：1字符：12

+ $ Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri ht ...
$
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ <无线电通信/>
  &NBSP; + CategoryInfo  &NBSP; &NBSP; &NBSP;  ：OpenError :( System.Manageme .... RemoteRunspace：RemoteRunspace）[New-PSSession]，PSRemotin

    gTransportException

  &NBSP; + FullyQualifiedErrorId：AuthenticationFailed，PSSessionOpenFailed

PS C：\ Windows \ system32> $ UserCredential = Get-Credential

---

iffi

解决方案

从我的个人经验来看这些通常意味着2件事。

1。你的证书不匹配。您还可以将凭证参数添加到要使用的特定凭据。否则它将使用您的本地凭证。

2。网络问题。确保以下端口对您的Exchange服务器开放（也用于邮箱迁移等）。

Port	Protocol
808（TCP）	邮箱复制服务用于通信
53（TCP）	DNS
135（TCP）	RPC End Point
389（TCP）	LDAP
3268	LDAP
1024>（TCP）	如果邮箱存储未静态配置，则需要打开1024个更高端口
88（TCP）	Kerberos
445（TCP）	Microsoft-DS服务
443（TCP）	邮箱复制代理服务使用端口443通过HTTPS与其他Exchange 2010客户端访问服务器通信。

3.确保您的mrs代理服务已启用

Trying to connect exchange server 2013 remotely using powershell and getting following error pls guide
thx.

New-PSSession : [exch.mydomain.com] Connecting to remote server tdl-exch.tdl.com failed with the following error
message : WinRM cannot process the request. The following error with errorcode 0x80090311 occurred while using
Kerberos authentication: There are currently no logon servers available to service the logon request.
 Possible causes are:
  -The user name or password specified are invalid.
  -Kerberos is used when no authentication method and no user name are specified.
  -Kerberos accepts domain user names, but not local user names.
  -The Service Principal Name (SPN) for the remote computer name and port does not exist.
  -The client and remote computers are in different domains and there is no trust between the two domains.
 After checking for the above issues, try the following:
  -Check the Event Viewer for events related to authentication.
  -Change the authentication method; add the destination computer to the WinRM TrustedHosts configuration setting or
use HTTPS transport.
 Note that computers in the TrustedHosts list might not be authenticated.
   -For more information about WinRM configuration, run the following command: winrm help config. For more
information, see the about_Remote_Troubleshooting Help topic.
At line:1 char:12
+ $Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri ht ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : OpenError: (System.Manageme....RemoteRunspace:RemoteRunspace) [New-PSSession], PSRemotin
   gTransportException
    + FullyQualifiedErrorId : AuthenticationFailed,PSSessionOpenFailed
PS C:\Windows\system32> $UserCredential = Get-Credential

---

iffi

解决方案

From my personal experience these normally mean 2 things.

1. your credentials dont match up. you can also add the credential parameter to specific which credentials to use. otherwise it will use your local credentials.

2. network issues. Make sure the following ports are open towards your exchange server (also used for mailbox migrations etc.)

Port	Protocol
808 (TCP)	Mailbox Replication Service uses to communicate
53 (TCP)	DNS
135 (TCP)	RPC End Point
389 (TCP)	LDAP
3268	LDAP
1024 > (TCP)	if mailbox store is not statically configured then 1024 higher ports need to be open
88 (TCP)	Kerberos
445 (TCP)	Microsoft-DS Service
443 (TCP)	Mailbox Replication Proxy service uses port 443 to communicate with other Exchange 2010 client access server via HTTPS.

3. make sure your mrs proxy service is enabled

这篇关于New-PSSession WinRM无法处理请求的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！