I have been having some strange issues with exchange 07, like storage groups not showing up when i select the DC that has exchange 03 installed on it and permissions errors when i view the administrators list. So, I went and ran the ExBPA, when i point it to our main DC everything runs fine, however when I point it to our second DC(running exchange 03) it says it cannot find any administrative groups. So, I was wondering if the PrepareLegacyExchangePermissions actions didnt get run during setup. I brought up a console window and ran it... and it gave me a error saying "You do not have permissions to read the security descriptor on CN=MainStreetChecks,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=msc,DC=msft." What could the problem be? I have done a line by line compare on the permissions in ADSI edit between the two DC's and they look the same. I am logging into the exchange 07 box as the main admin account, so I should have rights to everything.