When attempting to open “Server Configuration>Client Access” from the Exchange Management Console, you receive the following error:
An IIS directory entry couldn’t be created. The error message is Access is denied. HResult = -2147024891 It was running the command ‘Get-OwaVirtualDirectory’.
To resolve this issue, add the “domainExchange Trusted Subsystem” group to the local administrators group of all of your exchange servers.