When I try to install Exchange Server 2007 SP1 on a Windows Server 2008 64bit Standard Edition I get the following in the Installation Error logs: [8/27/2009 7:17:35 AM] [2] Beginning processing.[8/27/2009 7:17:35 AM] [2] [ERROR] Unexpected Error[8/27/2009 7:17:35 AM] [2] [ERROR] The process does not possess the 'SeSecurityPrivilege' privilege which is required for this operation.[8/27/2009 7:17:35 AM] [2] Ending processing.[8/27/2009 7:17:35 AM] [1] The following 1 error(s) occurred during task execution:[8/27/2009 7:17:35 AM] [1] 0. ErrorRecord: The process does not possess the 'SeSecurityPrivilege' privilege which is required for this operation.[8/27/2009 7:17:35 AM] [1] 0. ErrorRecord: System.Security.AccessControl.PrivilegeNotHeldException: The process does not possess the 'SeSecurityPrivilege' privilege which is required for this operation. at System.Security.AccessControl.Win32.SetSecurityInfo(ResourceType type, String name, SafeHandle handle, SecurityInfos securityInformation, SecurityIdentifier owner, SecurityIdentifier group, GenericAcl sacl, GenericAcl dacl) at System.Security.AccessControl.NativeObjectSecurity.Persist(String name, SafeHandle handle, AccessControlSections includeSections, Object exceptionContext) at System.Security.AccessControl.NativeObjectSecurity.Persist(String name, AccessControlSections includeSections, Object exceptionContext) at System.Security.AccessControl.FileSystemSecurity.Persist(String fullPath) at Microsoft.Exchange.Management.Deployment.SetLocalPermissions.SetDirectorySecurity(String path, DirectorySecurity directorySecurity) at Microsoft.Exchange.Management.Deployment.SetLocalPermissions.ChangePermissions[TTarget,TSecurity,TAccessRule,TRights](XmlNode targetNode, Dictionary`2 rightsDictionary, GetTarget`1 getTarget, GetOrginalPermissionsOnTarget`2 getOrginalPermissionsOnTarget, SetPermissionsOnTarget`2 setPermissionsOnTarget, CreateAccessRule`2 createAccessRule, AddAccessRule`2 addAccessRule, RemoveAccessRuleAll`1 removeAccessRuleAll) at Microsoft.Exchange.Management.Deployment.SetLocalPermissions.SetPermissionsOnCurrentLevel[TTarget,TSecurity,TAccessRule,TRights](XmlNode permissionSetNode, String targetType, Dictionary`2 rightsDictionary, GetTarget`1 getTarget, GetOrginalPermissionsOnTarget`2 getOrginalPermissionsOnTarget, SetPermissionsOnTarget`2 setPermissionsOnTarget, CreateAccessRule`2 createAccessRule, AddAccessRule`2 addAccessRule, RemoveAccessRuleAll`1 removeAccessRuleAll) at Microsoft.Exchange.Management.Deployment.SetLocalPermissions.SetPermissionsOnCurrentLevel(XmlNode permissionSetNode) at Microsoft.Exchange.Management.Deployment.SetLocalPermissions.InternalProcessRecord()[8/27/2009 7:17:35 AM] [1] [ERROR] The process does not possess the 'SeSecurityPrivilege' privilege which is required for this operation.[8/27/2009 7:17:35 AM] [1] Setup is halting task execution because of one or more errors in a critical task.[8/27/2009 7:17:35 AM] [1] Finished executing component tasks.[8/27/2009 7:17:36 AM] [1] Ending processing.[8/27/2009 7:26:26 AM] [0] End of Setup[8/27/2009 7:26:26 AM] [0] **********************************************Please help.David Kellett

Check Xiu's response in below thread and see if it resolves the issue... http://social.technet.microsoft.com/Forums/en-US/exchangesvrdeploy/thread/ec44f4b6-1971-42f2-9201-ba1d6a0321b4Amit Tank | MVP Exchange Server | MCITP: EMA | MCSA: M | http://ExchangeShare.WordPress.com

I did this before I posted here and it didn't work.David Kellett

Hello; I thought this was supposed to be monitored by a Microsoft Technical Guru. It's been three days and no one has come up with a solution or even something to try that I haven't already done. Help, someone, please.David Kellett

Here it is now, September 1st and still no useful responses. I don't understand. I need to get this up and going. Isn't there anybody who can help?DaveDavid Kellett

Hi Dave,This issue may occur if the Manage Auditing and Security Log right (SeSecurityPrivilege) was removed on some or all Domain Controllers. Therefore, would you please let me know whether you have run the PolicyTest to check whether the Manage Auditing and Security Log right missed on some Domain Controllers? This utility is located in the \i386\Server\Setup\ServerRoles\Common folder on the Microsoft Exchange Server CD. The policytest.exe utility produces a list of domain controllers and reports the presence or absence of the required privilege on these domain controllers. If the policytest.exe indicates that the required privileges are not present, you have two options: 1. Run Setup /PrepareDomain in the domain to prepare domain again and then use a tool such as ReplMon or RepAdmin to synchronize the entire domain Note: You need to ensure no AD replication issue exists in the environment. 2. Add the audit security privilige manually instead of running setup /preparedomain for Exchange 2007 You can refer to following article: XADM: Exchange 2000 Error Messages Are Generated Because of SeSecurityPrivilege Right and Policytest Issues http://support.microsoft.com/kb/314294/en-us Note: For Exchange 2007, the Exchange Servers group and Administrators group are required to have the privilege. To prevent inadvertent denial of the SeSecurityPrivilege right to Exchange 2007 Enterprise servers, you can create a custom policy for domain controllers to implement the SeSecurityPrivilege right: 1. Start the Active Directory Users and Computers Microsoft Management Console (MMC). 2. Open the properties of the Domain Controllers container. 3. Click the Group Policy tab, and then click New. Name the new policy (for example, "DOMAIN_NAME Auditing Rights"). 4. This step is optional. This step makes the policy load faster. Right-click the new policy, click Properties, and then disable the User Configuration. 5. Click the new policy, and then click Edit. Expand Computer Configuration, expand Windows Settings, and then expand Security Settings. Expand Local Policies, expand User Rights Assignment, and then configure all of the accounts that require the SeSecurityPrivilege right.IMPORTANT: All of the settings that you configure in this policy replace the same settings in other policies, instead of merging with them. Unconfigured options are still applied from other policies. 6. Set the new policy to a higher priority than the default domain controller's policy. If you do not do so, the policy has no effect because the default policy configures the same setting. 7. Force AD replication and Update Group Policy For more information regarding the issue: Issues that may occur when the "Manage auditing and security log" permission is removed from the Exchange Enterprise Servers group in Exchange 2000 Server http://support.microsoft.com/kb/896703/en-us "Store Could Not Be Mounted" Error Message When You Try to Mount Mailbox Store or Public Folder Store http://support.microsoft.com/kb/316709/en-us Mike Shen TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.com

I'm attempting to follow your instructions but number 1 all thought it ran didn't give the permissions, I tested it with policy test and got !!!Right Not Found!!!. So I attempted to follow number 2 and when I open Active Directory Users and Computers and open the properties of the Domain Controllers container there is no Group Policy Tab. Now what do I do? I attempt to create a new policy in Group Policy Management but I cannot see a way to disable User Configuration. Now what.David Kellett

Here's the latest from the install logs:[9/2/2009 8:49:12 AM] [2] Beginning processing.[9/2/2009 8:49:12 AM] [2] Ending processing.[9/2/2009 8:49:12 AM] [1] Executing 'Remove-XmlNode -XmlFileRelativePath "Scripts\" -XmlFileName "Exchange2007Edge_WinSrv2008.xml" -XmlNodeNameToRemove "_locDefinition";', handleError = False[9/2/2009 8:49:12 AM] [2] Launching sub-task '$error.Clear(); Remove-XmlNode -XmlFileRelativePath "Scripts\" -XmlFileName "Exchange2007Edge_WinSrv2008.xml" -XmlNodeNameToRemove "_locDefinition";'.[9/2/2009 8:49:12 AM] [2] Beginning processing.[9/2/2009 8:49:12 AM] [2] ExchangeInstallPath = C:\Program Files\Microsoft\Exchange Server\, Relative Path = Scripts\, Xml Full File Path = C:\Program Files\Microsoft\Exchange Server\Scripts\Exchange2007Edge_WinSrv2008.xml, Xml Node Name = _locDefinition[9/2/2009 8:49:12 AM] [2] Ending processing.[9/2/2009 8:49:12 AM] [1] Executing 'Set-WERRegistryMarkers;', handleError = False[9/2/2009 8:49:12 AM] [2] Launching sub-task '$error.Clear(); Set-WERRegistryMarkers;'.[9/2/2009 8:49:12 AM] [2] Beginning processing.[9/2/2009 8:49:12 AM] [2] Ending processing.[9/2/2009 8:49:12 AM] [1] Processing component 'All Roles Common First' (Creating the Exchange server configuration in the Active Directory).[9/2/2009 8:49:12 AM] [1] Executing 'Set-LocalPermissions', handleError = False[9/2/2009 8:49:12 AM] [2] Launching sub-task '$error.Clear(); Set-LocalPermissions'.[9/2/2009 8:49:12 AM] [2] Beginning processing.[9/2/2009 8:49:12 AM] [2] [ERROR] Unexpected Error[9/2/2009 8:49:12 AM] [2] [ERROR] The process does not possess the 'SeSecurityPrivilege' privilege which is required for this operation.[9/2/2009 8:49:12 AM] [2] Ending processing.[9/2/2009 8:49:12 AM] [1] The following 1 error(s) occurred during task execution:[9/2/2009 8:49:12 AM] [1] 0. ErrorRecord: The process does not possess the 'SeSecurityPrivilege' privilege which is required for this operation.[9/2/2009 8:49:12 AM] [1] 0. ErrorRecord: System.Security.AccessControl.PrivilegeNotHeldException: The process does not possess the 'SeSecurityPrivilege' privilege which is required for this operation. at System.Security.AccessControl.Win32.SetSecurityInfo(ResourceType type, String name, SafeHandle handle, SecurityInfos securityInformation, SecurityIdentifier owner, SecurityIdentifier group, GenericAcl sacl, GenericAcl dacl) at System.Security.AccessControl.NativeObjectSecurity.Persist(String name, SafeHandle handle, AccessControlSections includeSections, Object exceptionContext) at System.Security.AccessControl.NativeObjectSecurity.Persist(String name, AccessControlSections includeSections, Object exceptionContext) at System.Security.AccessControl.FileSystemSecurity.Persist(String fullPath) at Microsoft.Exchange.Management.Deployment.SetLocalPermissions.SetDirectorySecurity(String path, DirectorySecurity directorySecurity) at Microsoft.Exchange.Management.Deployment.SetLocalPermissions.ChangePermissions[TTarget,TSecurity,TAccessRule,TRights](XmlNode targetNode, Dictionary`2 rightsDictionary, GetTarget`1 getTarget, GetOrginalPermissionsOnTarget`2 getOrginalPermissionsOnTarget, SetPermissionsOnTarget`2 setPermissionsOnTarget, CreateAccessRule`2 createAccessRule, AddAccessRule`2 addAccessRule, RemoveAccessRuleAll`1 removeAccessRuleAll) at Microsoft.Exchange.Management.Deployment.SetLocalPermissions.SetPermissionsOnCurrentLevel[TTarget,TSecurity,TAccessRule,TRights](XmlNode permissionSetNode, String targetType, Dictionary`2 rightsDictionary, GetTarget`1 getTarget, GetOrginalPermissionsOnTarget`2 getOrginalPermissionsOnTarget, SetPermissionsOnTarget`2 setPermissionsOnTarget, CreateAccessRule`2 createAccessRule, AddAccessRule`2 addAccessRule, RemoveAccessRuleAll`1 removeAccessRuleAll) at Microsoft.Exchange.Management.Deployment.SetLocalPermissions.SetPermissionsOnCurrentLevel(XmlNode permissionSetNode) at Microsoft.Exchange.Management.Deployment.SetLocalPermissions.InternalProcessRecord()[9/2/2009 8:49:12 AM] [1] [ERROR] The process does not possess the 'SeSecurityPrivilege' privilege which is required for this operation.[9/2/2009 8:49:12 AM] [1] Setup is halting task execution because of one or more errors in a critical task.[9/2/2009 8:49:12 AM] [1] Finished executing component tasks.[9/2/2009 8:49:12 AM] [1] Ending processing.[9/2/2009 8:49:22 AM] [0] End of Setup[9/2/2009 8:49:22 AM] [0] **********************************************David Kellett

Hi Dave, Thanks for your response. As the Policytest indicated that Right Not Found, I suspect that the issue occurs because the Manage Auditing and Security Log right (SeSecurityPrivilege) missed. Would you please let me know whether only one DC is in your environment? Regarding the steps to create a custom policy for domain controllers to implement the SeSecurityPrivilege right, I would like to explain that the step 4 to disable User Configuration is an optional step in order to make policy load faster. You can simply skip the step and perform step 5 to configure the SeSecurityPrivilege right to account Administrators and Exchange Servers Group, Thanks, Mike

I have done everything you recommended and tested with policytest and got the result of Right found: "SeSecurityPriviledge". I have two DCs in this domain. I still get the exact same error when I try to install and here is a copy of the latest setup log: [9/4/2009 8:38:40 AM] [0] **********************************************[9/4/2009 8:38:40 AM] [0] Starting Microsoft Exchange 2007 Setup[9/4/2009 8:38:40 AM] [0] **********************************************[9/4/2009 8:38:40 AM] [0] Operating System version: Microsoft Windows NT 6.0.6001 Service Pack 1.[9/4/2009 8:38:40 AM] [0] Setup version: 8.1.240.6.[9/4/2009 8:38:40 AM] [0] Logged on user: KICOMPUTING\Administrator.[9/4/2009 8:38:40 AM] [0] Command Line Parameter Name='mode', Value='Install'.[9/4/2009 8:38:40 AM] [0] Command Line Parameter Name='sourcedir', Value='D:\'.[9/4/2009 8:38:40 AM] [0] Command Line Parameter Name='fromsetup', Value=''.[9/4/2009 8:38:40 AM] [0] ExSetupUI was started with the following command: '-mode:install -sourcedir:D:" /FromSetup'.[9/4/2009 8:38:41 AM] [0] Setup is choosing the domain controller to use[9/4/2009 8:38:41 AM] [0] Setup is choosing a local domain controller...[9/4/2009 8:38:42 AM] [0] Setup has chosen the local domain controller KI1A64BIT2008.KIComputing.local for initial queries[9/4/2009 8:38:42 AM] [0] PrepareAD has been run, and has replicated to this domain controller; so setup will use KI1A64BIT2008.KIComputing.local[9/4/2009 8:38:42 AM] [0] Setup is choosing a global catalog...[9/4/2009 8:38:42 AM] [0] Setup has chosen the global catalog server KI1A64BIT2008.KIComputing.local.[9/4/2009 8:38:42 AM] [0] Setup will use the domain controller 'KI1A64BIT2008.KIComputing.local'.[9/4/2009 8:38:42 AM] [0] Setup will use the global catalog 'KI1A64BIT2008.KIComputing.local'.[9/4/2009 8:38:42 AM] [0] Exchange configuration container for the organization is 'CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=KIComputing,DC=local'.[9/4/2009 8:38:42 AM] [0] Exchange organization container for the organization is 'CN=KIComputing,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=KIComputing,DC=local'.[9/4/2009 8:38:42 AM] [0] Setup will search for an Exchange Server object for the local machine with name 'KI1A64BIT2008'.[9/4/2009 8:38:42 AM] [0] No Exchange Server with identity 'KI1A64BIT2008' was found.[9/4/2009 8:38:42 AM] [0] The following roles are unpacked: BridgeheadRole ClientAccessRole MailboxRole AdminToolsRole [9/4/2009 8:38:42 AM] [0] The following roles are installed: [9/4/2009 8:38:42 AM] [0] The local server has some Exchange files installed.[9/4/2009 8:38:42 AM] [0] Setup will use the path 'D:\' for installing Exchange.[9/4/2009 8:38:42 AM] [0] The server is cluster type: 'None'.[9/4/2009 8:38:42 AM] [0] The requested cluster type: 'None'.[9/4/2009 8:38:42 AM] [0] The installation mode is set to: 'Install'.[9/4/2009 8:38:42 AM] [0] An Exchange organization with name 'KIComputing' was found in this forest.[9/4/2009 8:38:42 AM] [0] Active Directory Initialization status : 'True'.[9/4/2009 8:38:42 AM] [0] Schema Update Required Status : 'False'.[9/4/2009 8:38:42 AM] [0] Organization Configuration Update Required Status : 'False'.[9/4/2009 8:38:42 AM] [0] Domain Configuration Update Required Status : 'False'.[9/4/2009 8:38:42 AM] [0] The locally installed version is 8.1.240.6.[9/4/2009 8:38:42 AM] [0] Exchange Installation Directory : 'C:\Program Files\Microsoft\Exchange Server'.[9/4/2009 8:38:42 AM] [0] Applying default role selection state[9/4/2009 8:38:42 AM] [0] Setup is determining what organization-level operations to perform.[9/4/2009 8:38:42 AM] [0] Because the value was specified, setup is setting the argument OrganizationName to the value KIComputing.[9/4/2009 8:38:42 AM] [0] Setup will run from path 'C:\Program Files\Microsoft\Exchange Server\'.[9/4/2009 8:38:42 AM] [0] InstallModeDataHandler has 0 DataHandlers[9/4/2009 8:38:42 AM] [0] RootDataHandler has 1 DataHandlers[9/4/2009 8:38:47 AM] [0] Setup is determining what organization-level operations to perform.[9/4/2009 8:38:47 AM] [0] Because the value was specified, setup is setting the argument OrganizationName to the value KIComputing.[9/4/2009 8:38:47 AM] [0] Setup will run from path 'C:\Program Files\Microsoft\Exchange Server\'.[9/4/2009 8:38:47 AM] [0] InstallModeDataHandler has 1 DataHandlers[9/4/2009 8:38:47 AM] [0] Setup is determining what organization-level operations to perform.[9/4/2009 8:38:47 AM] [0] Because the value was specified, setup is setting the argument OrganizationName to the value KIComputing.[9/4/2009 8:38:47 AM] [0] Setup will run from path 'C:\Program Files\Microsoft\Exchange Server\'.[9/4/2009 8:38:47 AM] [0] InstallModeDataHandler has 2 DataHandlers[9/4/2009 8:38:48 AM] [0] Setup is determining what organization-level operations to perform.[9/4/2009 8:38:48 AM] [0] Because the value was specified, setup is setting the argument OrganizationName to the value KIComputing.[9/4/2009 8:38:48 AM] [0] Setup will run from path 'C:\Program Files\Microsoft\Exchange Server\'.[9/4/2009 8:38:48 AM] [0] InstallModeDataHandler has 3 DataHandlers[9/4/2009 8:38:50 AM] [0] Validating options for the 0 requested roles[9/4/2009 8:38:50 AM] [0] Validating options for the 0 requested roles[9/4/2009 8:38:53 AM] [0] Setup is determining what organization-level operations to perform.[9/4/2009 8:38:53 AM] [0] Because the value was specified, setup is setting the argument OrganizationName to the value KIComputing.[9/4/2009 8:38:53 AM] [0] Setup will run from path 'C:\Program Files\Microsoft\Exchange Server\'.[9/4/2009 8:38:53 AM] [0] InstallModeDataHandler has 3 DataHandlers[9/4/2009 8:38:53 AM] [0] RootDataHandler has 1 DataHandlers[9/4/2009 8:38:53 AM] [0] **************[9/4/2009 8:38:53 AM] [0] Setup will run the task 'Install-BridgeheadRole'[9/4/2009 8:38:53 AM] [1] Setup launched task 'Install-BridgeheadRole -DomainController 'KI1A64BIT2008.KIComputing.local' -updatesdir 'D:\Updates' -StartTransportService $true' [9/4/2009 8:38:53 AM] [1] Beginning processing.[9/4/2009 8:38:53 AM] [1] Attempting Install for BridgeheadRole.[9/4/2009 8:38:53 AM] [1] The following roles are installed: [9/4/2009 8:38:53 AM] [1] The following roles are current: [9/4/2009 8:38:53 AM] [1] Reading components for role 'BridgeheadRole' from 'res://BridgeheadRoleDefinition.xml'[9/4/2009 8:38:53 AM] [1] Found 22 components[9/4/2009 8:38:54 AM] [1] Loaded component 'All Roles Common First - Run Once' with 10 task info blocks from 'res://AllRolesCommonFirst_RunOnce.xml'[9/4/2009 8:38:54 AM] [1] Loaded component 'All Roles Common First' with 8 task info blocks from 'res://AllRolesCommonFirst.xml'[9/4/2009 8:38:54 AM] [1] Loaded component 'All Roles Precompile Management Binaries' with 30 task info blocks from 'res://AllRolesPrecompileManagementBinaries.xml'[9/4/2009 8:38:55 AM] [1] Loaded component 'Bridgehead Permissions Configuration' with 1 task info blocks from 'res://BridgeheadLocalPermissionsComponent.xml'[9/4/2009 8:38:55 AM] [1] Loaded component 'Common Perf Counters ' with 2 task info blocks from 'res://CommonPerfCountersComponent.xml'[9/4/2009 8:38:55 AM] [1] Loaded component 'Provision Server' with 9 task info blocks from 'res://ProvisionServerComponent.xml'[9/4/2009 8:38:56 AM] [1] Loaded component 'All Active-Directory Roles Common' with 14 task info blocks from 'res://AllADRolesCommon.xml'[9/4/2009 8:38:56 AM] [1] Loaded component 'Exchange 2003 Pseudo-MTA Configuration' with 1 task info blocks from 'res://LegacyMTAComponent.xml'[9/4/2009 8:38:56 AM] [1] Loaded component 'Exchange 2003 SMTP VSI Configuration' with 1 task info blocks from 'res://LegacySMTPComponent.xml'[9/4/2009 8:38:56 AM] [1] Loaded component 'Transport Perf Counters' with 21 task info blocks from 'res://TransportPerfCountersComponent.xml'[9/4/2009 8:38:57 AM] [1] Loaded component 'Enable RPC-EPMAP firewall exception' with 1 task info blocks from 'res://RpcEpmapFirewallException.xml'[9/4/2009 8:38:57 AM] [1] Loaded component 'Bridgehead Role Setter' with 1 task info blocks from 'res://BridgeheadRoleSetterComponent.xml'[9/4/2009 8:38:57 AM] [1] Loaded component 'Transport Common Configuration' with 22 task info blocks from 'res://TransportCommonComponent.xml'[9/4/2009 8:38:58 AM] [1] Loaded component 'Bridgehead Perf Counters' with 8 task info blocks from 'res://BridgeheadPerfCountersComponent.xml'[9/4/2009 8:38:58 AM] [1] Loaded component 'Bridgehead Configuration' with 18 task info blocks from 'res://BridgeheadComponent.xml'[9/4/2009 8:38:58 AM] [1] Loaded component 'Transport Log Search Service' with 1 task info blocks from 'res://TransportLogSearchServiceComponent.xml'[9/4/2009 8:38:58 AM] [1] Loaded component 'Data Storage Configuration' with 1 task info blocks from 'res://DataStorageComponent.xml'[9/4/2009 8:38:59 AM] [1] Loaded component 'Monitoring Service Configuration' with 5 task info blocks from 'res://MonitoringComponent.xml'[9/4/2009 8:38:59 AM] [1] Loaded component 'Active Directory Topology Service Configuration' with 2 task info blocks from 'res://AllADRolesCommonServiceControl.xml'[9/4/2009 8:38:59 AM] [1] Loaded component 'Bridgehead Service Configuration' with 3 task info blocks from 'res://BridgeheadServiceControl.xml'[9/4/2009 8:39:00 AM] [1] Loaded component 'Transport Common Service Control' with 1 task info blocks from 'res://TransportCommonServiceControl.xml'[9/4/2009 8:39:00 AM] [1] Loaded component 'All Roles Common Last' with 4 task info blocks from 'res://AllRolesCommonLast.xml'[9/4/2009 8:39:00 AM] [1] Adding unique component 'All Roles Common First - Run Once'[9/4/2009 8:39:00 AM] [1] Adding 'All Roles Common First' because it is marked AlwaysExecute[9/4/2009 8:39:00 AM] [1] Adding unique component 'All Roles Precompile Management Binaries'[9/4/2009 8:39:00 AM] [1] Adding unique component 'Bridgehead Permissions Configuration'[9/4/2009 8:39:00 AM] [1] Adding unique component 'Common Perf Counters '[9/4/2009 8:39:00 AM] [1] Adding unique component 'Provision Server'[9/4/2009 8:39:00 AM] [1] Adding unique component 'All Active-Directory Roles Common'[9/4/2009 8:39:00 AM] [1] Adding unique component 'Exchange 2003 Pseudo-MTA Configuration'[9/4/2009 8:39:00 AM] [1] Adding unique component 'Exchange 2003 SMTP VSI Configuration'[9/4/2009 8:39:00 AM] [1] Adding unique component 'Transport Perf Counters'[9/4/2009 8:39:00 AM] [1] Adding unique component 'Enable RPC-EPMAP firewall exception'[9/4/2009 8:39:00 AM] [1] Adding unique component 'Bridgehead Role Setter'[9/4/2009 8:39:00 AM] [1] Adding unique component 'Transport Common Configuration'[9/4/2009 8:39:00 AM] [1] Adding unique component 'Bridgehead Perf Counters'[9/4/2009 8:39:00 AM] [1] Adding unique component 'Bridgehead Configuration'[9/4/2009 8:39:00 AM] [1] Adding unique component 'Transport Log Search Service'[9/4/2009 8:39:00 AM] [1] Adding unique component 'Data Storage Configuration'[9/4/2009 8:39:00 AM] [1] Adding unique component 'Monitoring Service Configuration'[9/4/2009 8:39:00 AM] [1] Adding unique component 'Active Directory Topology Service Configuration'[9/4/2009 8:39:00 AM] [1] Adding unique component 'Bridgehead Service Configuration'[9/4/2009 8:39:00 AM] [1] Adding unique component 'Transport Common Service Control'[9/4/2009 8:39:00 AM] [1] Adding 'All Roles Common Last' because it is marked AlwaysExecute[9/4/2009 8:39:00 AM] [1] The following roles are installed: [9/4/2009 8:39:00 AM] [1] Writing informational script to 'C:\ExchangeSetupLogs\Install-BridgeheadRole-20090904-0839000490.ps1'[9/4/2009 8:39:00 AM] [1] Executing '$RoleIsClusterNode = $False', handleError = False[9/4/2009 8:39:00 AM] [2] Launching sub-task '$error.Clear(); $RoleIsClusterNode = $False'.[9/4/2009 8:39:00 AM] [1] Executing '$RoleNetBIOSName = "KI1A64BIT2008"', handleError = False[9/4/2009 8:39:00 AM] [2] Launching sub-task '$error.Clear(); $RoleNetBIOSName = "KI1A64BIT2008"'.[9/4/2009 8:39:00 AM] [1] Executing '$RoleInvocationID = "20090904-0839000490"', handleError = False[9/4/2009 8:39:00 AM] [2] Launching sub-task '$error.Clear(); $RoleInvocationID = "20090904-0839000490"'.[9/4/2009 8:39:00 AM] [1] Executing '$RoleInstallPath = "C:\Program Files\Microsoft\Exchange Server\"', handleError = False[9/4/2009 8:39:00 AM] [2] Launching sub-task '$error.Clear(); $RoleInstallPath = "C:\Program Files\Microsoft\Exchange Server\"'.[9/4/2009 8:39:00 AM] [1] Executing '$RoleStartTransportService = $True', handleError = False[9/4/2009 8:39:00 AM] [2] Launching sub-task '$error.Clear(); $RoleStartTransportService = $True'.[9/4/2009 8:39:00 AM] [1] Executing '$RoleInstallationMode = "Install"', handleError = False[9/4/2009 8:39:00 AM] [2] Launching sub-task '$error.Clear(); $RoleInstallationMode = "Install"'.[9/4/2009 8:39:00 AM] [1] Executing '$RolePreviousVersion = ""', handleError = False[9/4/2009 8:39:00 AM] [2] Launching sub-task '$error.Clear(); $RolePreviousVersion = ""'.[9/4/2009 8:39:00 AM] [1] Executing '$RoleBinPath = "C:\Program Files\Microsoft\Exchange Server\Bin"', handleError = False[9/4/2009 8:39:00 AM] [2] Launching sub-task '$error.Clear(); $RoleBinPath = "C:\Program Files\Microsoft\Exchange Server\Bin"'.[9/4/2009 8:39:00 AM] [1] Executing '$RoleSetupLoggingPath = "C:\ExchangeSetupLogs"', handleError = False[9/4/2009 8:39:00 AM] [2] Launching sub-task '$error.Clear(); $RoleSetupLoggingPath = "C:\ExchangeSetupLogs"'.[9/4/2009 8:39:00 AM] [1] Executing '$RoleFqdnOrName = "KI1A64BIT2008.KIComputing.local"', handleError = False[9/4/2009 8:39:00 AM] [2] Launching sub-task '$error.Clear(); $RoleFqdnOrName = "KI1A64BIT2008.KIComputing.local"'.[9/4/2009 8:39:00 AM] [1] Executing '$RoleTargetVersion = "8.1.240.6"', handleError = False[9/4/2009 8:39:00 AM] [2] Launching sub-task '$error.Clear(); $RoleTargetVersion = "8.1.240.6"'.[9/4/2009 8:39:00 AM] [1] Executing '$RoleUpdatesDir = "D:\Updates"', handleError = False[9/4/2009 8:39:00 AM] [2] Launching sub-task '$error.Clear(); $RoleUpdatesDir = "D:\Updates"'.[9/4/2009 8:39:00 AM] [1] Executing '$RoleRoleName = "BridgeheadRole"', handleError = False[9/4/2009 8:39:00 AM] [2] Launching sub-task '$error.Clear(); $RoleRoleName = "BridgeheadRole"'.[9/4/2009 8:39:00 AM] [1] Executing '$RoleDomainController = "KI1A64BIT2008.KIComputing.local"', handleError = False[9/4/2009 8:39:00 AM] [2] Launching sub-task '$error.Clear(); $RoleDomainController = "KI1A64BIT2008.KIComputing.local"'.[9/4/2009 8:39:00 AM] [1] Executing '$RoleProductPlatform = "amd64"', handleError = False[9/4/2009 8:39:00 AM] [2] Launching sub-task '$error.Clear(); $RoleProductPlatform = "amd64"'.[9/4/2009 8:39:00 AM] [1] Executing '$RoleLoggedOnUser = "KICOMPUTING\Administrator"', handleError = False[9/4/2009 8:39:00 AM] [2] Launching sub-task '$error.Clear(); $RoleLoggedOnUser = "KICOMPUTING\Administrator"'.[9/4/2009 8:39:00 AM] [1] Executing '$RoleLoggingPath = "C:\Program Files\Microsoft\Exchange Server\Logging"', handleError = False[9/4/2009 8:39:00 AM] [2] Launching sub-task '$error.Clear(); $RoleLoggingPath = "C:\Program Files\Microsoft\Exchange Server\Logging"'.[9/4/2009 8:39:00 AM] [1] Setup failed previously while performing the action Install. Looking for the failed task with ID dce673be.[9/4/2009 8:39:00 AM] [1] Found 143 tasks to execute[9/4/2009 8:39:00 AM] [1] Processing component 'All Roles Common First' (Creating the Exchange server configuration in the Active Directory).[9/4/2009 8:39:00 AM] [1] Executing 'Set-LocalPermissions', handleError = False[9/4/2009 8:39:00 AM] [2] Launching sub-task '$error.Clear(); Set-LocalPermissions'.[9/4/2009 8:39:00 AM] [2] Beginning processing.[9/4/2009 8:39:00 AM] [2] [ERROR] Unexpected Error[9/4/2009 8:39:00 AM] [2] [ERROR] The process does not possess the 'SeSecurityPrivilege' privilege which is required for this operation.[9/4/2009 8:39:00 AM] [2] Ending processing.[9/4/2009 8:39:00 AM] [1] The following 1 error(s) occurred during task execution:[9/4/2009 8:39:00 AM] [1] 0. ErrorRecord: The process does not possess the 'SeSecurityPrivilege' privilege which is required for this operation.[9/4/2009 8:39:00 AM] [1] 0. ErrorRecord: System.Security.AccessControl.PrivilegeNotHeldException: The process does not possess the 'SeSecurityPrivilege' privilege which is required for this operation. at System.Security.AccessControl.Win32.SetSecurityInfo(ResourceType type, String name, SafeHandle handle, SecurityInfos securityInformation, SecurityIdentifier owner, SecurityIdentifier group, GenericAcl sacl, GenericAcl dacl) at System.Security.AccessControl.NativeObjectSecurity.Persist(String name, SafeHandle handle, AccessControlSections includeSections, Object exceptionContext) at System.Security.AccessControl.NativeObjectSecurity.Persist(String name, AccessControlSections includeSections, Object exceptionContext) at System.Security.AccessControl.FileSystemSecurity.Persist(String fullPath) at Microsoft.Exchange.Management.Deployment.SetLocalPermissions.SetDirectorySecurity(String path, DirectorySecurity directorySecurity) at Microsoft.Exchange.Management.Deployment.SetLocalPermissions.ChangePermissions[TTarget,TSecurity,TAccessRule,TRights](XmlNode targetNode, Dictionary`2 rightsDictionary, GetTarget`1 getTarget, GetOrginalPermissionsOnTarget`2 getOrginalPermissionsOnTarget, SetPermissionsOnTarget`2 setPermissionsOnTarget, CreateAccessRule`2 createAccessRule, AddAccessRule`2 addAccessRule, RemoveAccessRuleAll`1 removeAccessRuleAll) at Microsoft.Exchange.Management.Deployment.SetLocalPermissions.SetPermissionsOnCurrentLevel[TTarget,TSecurity,TAccessRule,TRights](XmlNode permissionSetNode, String targetType, Dictionary`2 rightsDictionary, GetTarget`1 getTarget, GetOrginalPermissionsOnTarget`2 getOrginalPermissionsOnTarget, SetPermissionsOnTarget`2 setPermissionsOnTarget, CreateAccessRule`2 createAccessRule, AddAccessRule`2 addAccessRule, RemoveAccessRuleAll`1 removeAccessRuleAll) at Microsoft.Exchange.Management.Deployment.SetLocalPermissions.SetPermissionsOnCurrentLevel(XmlNode permissionSetNode) at Microsoft.Exchange.Management.Deployment.SetLocalPermissions.InternalProcessRecord()[9/4/2009 8:39:00 AM] [1] [ERROR] The process does not possess the 'SeSecurityPrivilege' privilege which is required for this operation.[9/4/2009 8:39:00 AM] [1] Setup is halting task execution because of one or more errors in a critical task.[9/4/2009 8:39:00 AM] [1] Finished executing component tasks.[9/4/2009 8:39:00 AM] [1] Ending processing.[9/4/2009 8:39:39 AM] [0] End of Setup[9/4/2009 8:39:39 AM] [0] **********************************************David Kellett

Through blessings from the Lord I decided to start all over again. To get past this I had to re-install my Server, a Windows Server 2008 64bit from scratch. Then I followed the article found here: http://technet.microsoft.com/en-us/library/bb691354.aspx. Then I installed my exchange server. So far no errors and all appears to be working fine.Thank you,DaveDavid Kellett