Hi All, I am trying to install Exchange Server 2007 in an existing exchange server 2003 organization but I keep getting error saying: "Active Directory failed on GMTS04.gmtnigeria.com This error is not retriable. Additional information: Access is denied. Active directory response: 00000005: SecErr: DSID-03151E04, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0 The user has insufficient access rights." Please note that I'm using the domain administrator account. Any help would be appreciated. Thanks in advance.IT administrator

Hi, You need to be schema admin and enterprise admin for the first steps to complete (prepare schema and preparead) Leif

I am using the overall administrator account and i just checked that it is also a member of both schema admins and enterpirse admins.IT administrator

Are you running in the same AD site as the Schema Master? Sukh

hi, Which step do you get the error? Please try the below solution,see if it can help you to fix your issue. Resolution ========= 1. Open adsiedit.msc 2. Expand configuration patition and go to: CN=All Address Lists, CN=Address Lists Container, CN= Exchange Org name, CN=Microsoft Exchange, CN=Services, CN=Configuration, DC=domain, DC=com 3. Right click "All Address Lists" and then click on properties and click on Security Tab 4. Click on Advanced button and verify that Authenticated users group/Everyone group, do not have deny set for the following permssions; a. Delete b. Create All Child Object c. Create Address List Objects 5. If the Authenticated users group or everyone group have deny permissions set, remove the deny and click on Ok and close the permission and adsiedit window 6. Run setup /preapread and it should complete successfully hope can help you thanks,CastinLu TechNet Community Support

hi, Which step do you get the error? Please try the below solution,see if it can help you to fix your issue. Resolution ========= 1. Open adsiedit.msc 2. Expand configuration patition and go to: CN=All Address Lists, CN=Address Lists Container, CN= Exchange Org name, CN=Microsoft Exchange, CN=Services, CN=Configuration, DC=domain, DC=com 3. Right click "All Address Lists" and then click on properties and click on Security Tab 4. Click on Advanced button and verify that Authenticated users group/Everyone group, do not have deny set for the following permssions; a. Delete b. Create All Child Object c. Create Address List Objects 5. If the Authenticated users group or everyone group have deny permissions set, remove the deny and click on Ok and close the permission and adsiedit window 6. Run setup /preapread and it should complete successfully hope can help you thanks, CastinLu TechNet Community Support I wanted to try this but i cannot see all of these entries when I look at adsiedit. I only see "CN=Microsoft Exchange System Objects" with a lot os entries under it. Let me also point out that i had attempted to install Exchange 2010 in this organisation but stop when i got the warning that i will not be able to add 2003 or 2007 servers. Could this have changed anything?Head, Network Security and Infrastructure

hi, Can you check your setup log? The default location is:C:/ExchangeSetUpLogs Also check your app log, see if you can find more information about your issue. thanks CastinLu TechNet Community Support