Hi, In our environment we have a root domain, with 2 child domains (domain1 and domain2 for this example), we have recently migrated from exchange 2003 to exchange 2007 which is installed on domain1. Now when I installed I ran the prerequisite commands on the root domain controller as an enterprise admin and installed, but since then I have noticed that the new exchange groups do not have permissions to any object in domain2. Now I'm guessing that for whatever reason that when setup.com /PrepareLegacyExchangePermissions run on the root domain dc, it didn't update the permissions on center2. What I want to know is if its safe to run it now just on the domain2 dc to update the permissions on that domain. It won't change anything other than to update the permissions on the objects there will it? All our public folders are now running only on exchange 2007 in domain1 so I'm just being a bit cautious in case anything can go wrong...

You have to run /PrepareLegacyExchangePermissions and /PrepareDomain also on the domain2, if this domain also contains mailboxes. This should be no big deal, only a couple of permissions will be set. Even it should fail, the normal operation of the domain2 should not be affected.

Hi, You could run setup /PrepareLegacyExchangePermissions: < FQDN of domain you want to prepare > or setup /pl:<FQDN of domain you want to prepare> for the domain2. It will be OK to run it just for domain2. I don’t know how you prepare the legacy permission before, if you do not specify a domain, the domain in which you run this command must be able to contact all domains in the forest. If the server cannot contact a domain that must have legacy Exchange permissions prepared, it prepares the domains that it can contact and then returns an error message that it was unable to contact some domains. For more information: http://technet.microsoft.com/en-us/library/bb125224(EXCHG.80).aspx Thanks, Elvis

Hi, How things are going? Any update on the issue? Thanks, Elvis