hello , i have server 2008 R2 as Domain controller and another one for HT and CAS roles and 3rd one for mail box server role , on the domain controller i created user name for example MB , in order when i login to to that server which the MailBox server role is installed use MB as a login name and a make MB a member of Domain admin , Enterprise admin , Schema Admi and Administrator as shown in this screen shot does it a correct way or i have to change it Regards

When it comes to do the high level exchange side of activities like installing or schema update etc this user "Mail Box" having those access seems alright. Please read this to be able to understand the Rights/Scope associated with each of these groups. http://technet.microsoft.com/en-us/library/cc756898(WS.10).aspxRegards, Pushkal MishrA

thanks for the reply but using this permission gave me this problem when i tried to install Filter pack on the Mailbox server screen shot and also same problem happen when im trying to run the power shell as administrator !

You need to give that account access permission to that paticular network share that you are trying to access. Also what is the error you're getting when trying to run powershell please.Regards, Pushkal MishrA

i cant understand what you mean ... could you explain what to do ? the error is here screen shot Regards

Go to the property of "Update" folder and add the account you're using to install & give it full permission and then try installing again. e.g. if you are logged in with an account like "Mail box" then right click to the property of "Update" folder---Hit Edit and then Add the same account and give it full access" Regards, Pushkal MishrA

also i can not run power shell as administrator ... any way i will use Administrator account for all server .. then i will not have problem , but i dont know its professional way or not

Hi, Is the filterpackX64 is a shared file in another machine or a local file? If it is a shared file in another machie, please check the shared permission of this file. After granting the permission to MB account, have you logged off and then logged in to apply the change? Please also make sure that the MB account is in the local administrators group. If the issue persists, I recommend you create a new account for testing.Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Thanks Gen Lin-MSFT

thanks for your reply what i understand from you is : 1- create another account on AD for the Mail box server , for example (MBAdmin) , and make this account member of Domain admin and Entrprise Admin . 2- then i log in to the MB server and make this account (MBadmin ) As a local admin . sound seem to be work for me i will try it and let you know about it

i tried it it doesnt work , when i went back to the local administrator , to check if i add the MBadmin correctly or not , i did'nt found it in the administrator group. when i tried to add it again , it told me this user already add !! any way i will use the AD administrator for all the server