Installer reports following error message when Exchange Management Shell cannot be run: The "ApplicationImpersonation" management role can't be found

Products

• Mail Security for Microsoft Exchange

Issue/Introduction

During the installation of Symantec Mail Security for Exchange (SMSMSE) the service account credentials are entered.  After clicking the Next button a dialog box titled Error is displayed with the following message:

The "ApplicationImpersonation" management role can't be found.  Check the role entry name, and try again.

The installation does not complete.

Cause

The account performing the installation does not have Exchange Organization Management permissions, and therefore, cannot run the Exchange Management Shell.
The Exchange Management Shell is needed in order to install the SMSMSE Transport Agents.

 

Start the Exchange Management Shell from Start|All Programs|Microsoft Exchange Server 2010|Exchange Management Shell.  The shell cannot connect to the Exchange server and reports the following error message:

[exch01.example.com] Processing data from remote server failed with the following error message: The user "example.com/Domain Users/Adminstrators/svc01" isn't assigned to any management roles.  For more information, see the about_Remote_Troubleshooting Help topic.
+ CategoryInfo : OpenError: (System.Manageme....RemoteRunspace:RemoteRunspace) [], PSRemotingTransportException + FullyQualifiedErrorId : PSSessionOpenFailed

 

Resolution

Run the SMSMSE installer as a domain administrator.  By default all Domain Administrators have Exchange Organization Management permissions.

See the following article for all required permissions for the account performing the SMSMSE installation: How to Install Symantec Mail Security for Microsoft Exchange (SMSMSE) With an Account that is not an Active Directory (AD) Domain Administrator.