When opening the Exchange Management Console, you may get the following error if the time on the Exchange server is out of sync with the domain controller:
The following error occurred when trying to connect to the specified Exchange Server ‘server.org’: The attempt to connect to http://myserver.org/PowerShell using “Kerberos” authentication failed: Connecting to the remote server failed with the following error: Access is denied.
To fix this error, simply open a command prompt and run
net time /set to resync the Exchange server’s clock with the domain controller.
If the Exchange server is a virtual machine, you might also want to check and make sure the virtual machine’s time is not being synced with the host, otherwise, you will run into intermittent issues with Kerberos authentication.