Hi, I'm in the early stages of installing Exchange 2010 into a 2003 AD environment. We're currently running Exchange 2003. I've done all the prereqs, successfully run 'prepareschema' and 'preparead' however I'm having an issue with one of my child domains (I have 2) when doing the 'preparealldomain' command. When running that command (or preparedomain:durham.rmf.com) I get the following error: Microsoft.Exchange.Management.Deployment.ScriptExecutionException: The following error was generated when "$error.Clear(); if ($RolePrepareAllDomains) { initialize-DomainPermissions -AllDomains:$true -CreateTenantRoot:$RoleIsDatacenter; } elseif ($RoleDomain -ne $null) { initialize-DomainPermissions -Domain $RoleDomain -CreateTenantRoot:$RoleIsDatacenter; } else { initialize-DomainPermissions -CreateTenantRoot:$RoleIsDatacenter; }" was run: "Active Directory operation failed on sv08001.durham.rmf.com. This error is not retriable. Additional information: Access is denied. Active directory response: 00000005: SecErr: DSID-03151E04, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0 It obviously states that it's some kind of access/security error but where? I'm running everything as the enterprise admin. I'm stuck and could really use some advice on where to look next, thanks!

Probably permissions inheritance isn't set somewhere correctly. Try it from a DC in that domain using the domain admin account for that domain. Simon.Simon Butler, Exchange MVP Blog | Exchange Resources

Thanks for the reply Simon. All domains are 2003, all DCs except for 1 in the parent domain are Server 2003. Can I run the 'preparedomain' for Exchange 2010 on a 32 bit Windows Server 2003? If so, I'll give that a go and report back. Please let me know, thanks!

You won??t be able to run the Exchange 2010 binaries on 32-bit Windows 2003, no. You need Windows 2008 64-bit. "RuitBier" wrote in message news:eab18eef-f865-4692-a43f-5e1a648afcd9@communitybridge.codeplex.com... Thanks for the reply Simon. All domains are 2003, all DCs except for 1 in the parent domain are Server 2003. Can I run the 'preparedomain' for Exchange 2010 on a 32 bit Windows Server 2003? If so, I'll give that a go and report back. Please let me know, thanks! Neil Hobson | Principal Consultant | Silversands | www.silversands.co.uk | www.msexchange.org/neil_hobson

Hi, As Neil told you will not be able to run Exchange 2010 binaries on 32 bit Windows 2003. You will need a Windows 2008 64 bit/windows 2008 R2 member server to run Exchange 2010 binaries. Thanks.Nagaraj N

OK, I was able to successfully run the "setup /preparedomain" from a 2008 server in the child domain however I still can't run it from a server in the parent domain which I'll need to resolve before moving forward with the Exchange 2010 deployment. Since one of the child domains was successul and the other wasn't I'm now going through and doing a comparison of permissions between the two. Can anyone tell me where I should start? I'm looking at some of the advanced permissions of objects in ADUC but there a so many to go through....