Installing Exchange2K7 in existing Exchange2003 organization, trying to do a Transition, but it fails in "Setup.com /PrepareAD" command
Hello!I found a wall I cant get through... In our company we have Domain Controller, Active Directory(and other roles) and Exchange Server 2003 in the same Windows Server 2003 Ent Ed x86 box. Now we want to do an Exchange Transition to Exch2K7; We have a new Windows 2008 Std Ed x64 box up and running (PCname=CorpMail), with all the prerequisites ready. So, Following "How to Install Exchange 2007 in an Existing Exchange Server 2003 Organization" (http://technet.microsoft.com/en-us/library/bb124350.aspx). In my new Win2008 box I have downloaded theExchange 2007 + SP1 .iso image, and in my current DC &Exchange 2003 server, I downloaded the Evaluation version for 2003 x86 (since I just can't execute the x64 installer in this machine), but when I tried to run the "Setup.com /PrepareAD" command in my DC, it continuously gives me the following error: B:\Exchange2007-Evaluation_Setup>Setup.com /PrepareAD Welcome to Microsoft Exchange Server 2007 Unattended Setup Preparing Exchange Setup No server roles will be installed Performing Microsoft Exchange Server Prerequisite Check Organization Checks ......................... FAILED The Active Directory schema will be upgraded if you continue. Verify that the organization is ready for Exchange 2007 by running the Exchange 2007 Readiness Check, which is part of the Exchange Best Practices Analyzer. A previous version of Exchange Server is already installed on this computer . Run Exchange 2007 Setup from a different computer or remove the previous version of Exchange Server. The Exchange Server setup operation did not complete. Visit http://support.microsoft.com and enter the Error ID to find more information. Exchange Server setup encountered an error. B:\Exchange2007-Evaluation_Setup> Now, I also did run the command in my New server (win2008), and the output is this: F:\>Setup.com /PrepareAD Welcome to Microsoft Exchange Server 2007 Unattended Setup Preparing Exchange Setup No server roles will be installed Performing Microsoft Exchange Server Prerequisite Check Organization Checks ......................... COMPLETED The Active Directory schema will be upgraded if you continue. Verify that the organization is ready for Exchange 2007 by running the Exchange 2007 Readiness Check, which is part of the Exchange Best Practices Analyzer. Configuring Microsoft Exchange Server Organization Preparation ......................... FAILED An error occurred when executing 'ldifde.exe' to import schema file 'F:\Setup\ServerRoles\Common\Setup\Data\PostExchange2003_schema7.ldf'. Error code: 5. More details can be found in the error file 'C:\Users\Administrator.SOLNETCR\AppData\Local\Temp\2\ldif.err'. The Exchange Server Setup operation did not complete. For more information, visit http://support.microsoft.com and enter the Error ID. Exchange Server setup encountered an error. F:\> The log file ldif.err contents are: Entry DN: CN=Locale-ID,CN=Schema,CN=Configuration,DC=solnetcr,DC=com Add error on entry starting on line 155: Insufficient Rights The server side error is: 0x2098 Insufficient access rights to perform the operation. The extended server error is: 00002098: SecErr: DSID-03150A45, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0 An error has occurred in the program I finally I did run the same command in another Win2003 server, which does not have any roles like Active Directory or Exchange and the output is the same that CorpMail (win2008 box) and also generates and ldif.err file same as above About the account Im using well is the Administrator account, and I checked already, Administrator is member of: -Domain Admins-Enterprise Admins-Schema Admins Among a few others! ;o) So Insufficient Access Rights? Hmmm Is anyone out there ever found something similar to this? What Im missing here? T.I.A! Best Regards from Costa Rica!AlexC2
September 1st, 2009 1:58pm

Alex,If running it from the Windows 2008 machine try this:Setup.com /PrepareAD /domaincontroller:windows2003serverRegards,Johanblog: www.johanveldhuis.nl
Free Windows Admin Tool Kit Click here and download it now
September 1st, 2009 2:26pm

Per my knowledge, the issue can cause by incorrect permission/SID. However, in order to locate the object that has the wrong settings in the AD, it would require collecting the MPS Report and dumping the domain partition with Ldifde tool, which is beyond what we can do in the forum as the nature of forum support. I'd like to recommend you to contact Microsoft Customer Support Service (CSS) for assistance so that this problem can be resolved efficiently. Herere the phone lists [US, outside of US]
September 2nd, 2009 2:32am

"Entry DN: CN=Locale-ID,CN=Schema,CN=Configuration,DC=solnetcr,DC=com Add error on entry starting on line 155: Insufficient Rights Theserver side error is: 0x2098 Insufficient access rights to perform the operation. The extended server error is: 00002098: SecErr: DSID-03150A45, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0 An error has occurred in the program" I am going to chime in on this because I ran into the same problem and this will be for future reference. Even though I was logging into the new server with the right account, I had a different set of credentials stored in the Credential Manager however for connection to the existing 2003 server and that is what caused my INSUFF_ACCESS_RIGHTS error during the 2007 setup. As soon as I changed the credentials in the credential manager I was good to go.
Free Windows Admin Tool Kit Click here and download it now
February 26th, 2012 12:02pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics