Hi there ! I ran into an error when installing exch2010sp1 (from the exch2010 dvd with included sp1): Setup.com /PrepareSchema Setup.com /PrepareAD /OrganizationName:our-orgname Setup.com /PrepareDomain ADSIEDIT checked and i saw the our-orgname Organization this steps were done back in April 2010 without errors. now (01.12.2010) i wanted to run the 2010sp1 setup (2010 dvd with included sp1) prereqs i took BEFORE running this task: 1) install hotfixes: Windows6.1-KB977020-v2-x64.msu ok Windows6.1-KB979744-x64.msu (KB979744 - LockConvoy On Windows Server 2003 Post KB 971988) ok Windows6.1-KB979099-x64.msu (Update for Rights Management Services Client for Windows Server 2008 R2 x64 Edition (KB979099) ok Windows6.1-KB982867-v2-x64.msu (not applicable) > nach netfw 3.5 sp1 installieren: see point 18) http://support.microsoft.com/kb/982867/en-us Windows6.1-KB983440-x64.msu (KB983440 - Win7 rollup package (PR for QFE 810219)) ok FilterPack64bit.exe ok 2) check powershell: ok ps prompt > help about_windows-powershell, check that you have version 2.0 (package included in w2k8r2) 3) select features > expand remote server administration tools > expand role administration tools > expand ad ds and lds tools > expand ad ds tools > selct ad ds snap-ins and command-line tools ok 4) select features > expand .NET Framework 3.5.1 features , selct .NET Framework 3.5.1 check box ok 5) expand wcf activation, select http activation + click add required role services ok 6) select rpc over http proxy check box + click add required role services ok 7) next > on web server iis page click next ok 8) on select role services page, under security, select the digest authentiaction check box ok 9) under performance select dynamic content compression check box ok 10) under iis6 mgmt compatibility, select iis6 mgmt console check box ok 11) next > install ok 12) close ok 13) start > administrative tools, click services ok 14) in services list, point to administrative tools + click services ok 15) in services list double-click net.tcp port sharing service ok 16) in net.tcp port sharing service > properties > startup type: automatic and apply ok 17) start, wait for service to start, ok, close service console ok 18) Windows6.1-KB982867-v2-x64.msu (not applicable) > after netfw 3.5 sp1 : ok http://support.microsoft.com/kb/982867/en-us 19) reboot server ok 20) install LanguagePackBundle.exe via setup.exe while installing exchange2010(sp1); point to this file (don't rename it !) option from setup.exe (exchange2010sp1-dvd) is step 3: choose exchange language option > install all languages from the language bundle and point to "LanguagePackBundle.exe" 21) run setup.exe with typical exchange server installation my installer-user was member of EnterpriseAdmins, SchemaAdmins and Organization Management (exchange) nslookup to my domain without errors; ping to DC without errors; correct DNS-settings; firewall disabled; checked "automatically install windows server roles and features required for exchange servers" 22) after all went through i received following error message: error: the following error was generated when "$error.Clear(); Set-LocalPermission" was run: " the process does not possess the 'SeSecurityPrivilege' privilege which is required for this operation > googled around and found out that it is an old SeSecurityPrivilege problem here: http://neilhobson.blogspot.com/2009/04/that-old-sesecurityprivilege-error.html from this blog: I ran the policytest.exe file that you can find in the \setup\serverroles\common folder from the Exchange 2007 source media. This program confirms whether the SeSecurityPrivilege right has been found on the domain controllers in the Active Directory site. This right is set on the Domain Controller Security Policy by the setup.com /PrepareDomain process. Specifically, the process grants the Manage Auditing and Security Log right. Policytest.exe confirmed that the right was present on all domain controllers. > remember above in my post that setup.com /PrePareDomain was done back in April/2010 ! > here is my result of the policytest.exe: This tool will check every domain controller in the local domain to see if the "Manage auditing and security logs" privilege granted to the "Exchange Enterprise Servers" group by DomainPrep has replicated to that DC. If the policy change has not yet replicated to all DCs, then you should avoid making policy changes on any DC that has not received those changes yet. You must have Domain Admin rights to run this tool successfully. If you see an error that says: !! LsaEnumerateAccountRights returned error 5 !! then you don't have permission to open the LSA on the given DC. =============================================== Local domain is "clgroup.local" (CLGROUP) LookupAccountName returned error 1332 Abnormal exit from PolicyTest > the consequence of that error is: 1) cannot initialize my EMC 2) all the roles (cas,hub,mbx) were cancelled > what am i supposed to do next ? 1) configure my default domain controllers policy (Manage Auditing and Security Log right...) or wait for ad sync ? 2) after that run setup.exe from dvd again ? > i believe i can assign the roles afterwards, but no idea how to get access to EMC console Hope someone has an idea, Vinc

Have you tried to download sp1 instead of using the sp1 from the media? I found issues with previous sp came with previous Exchange 2007.

not yet. supposed if it's integrated in a dvd it should work.... found something on EHLO: http://msexchangeteam.com/archive/2010/10/07/456538.aspx the update for the update ? don't know if i should manuall configure: "This tool will check every domain controller in the local domain to see if the "Manage auditing and security logs" privilege granted to the "Exchange Enterprise Servers" group by DomainPrep has replicated to that DC..." Vinc

Hi Vinc, Any update for your issue? I have follow the linke: http://technet.microsoft.com/en-us/library/bb629560.aspx Everything work well. If there are still has some issue, I would reupgrade it again, make a test. Regards! GavinPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi Vinc, Any update for your issue? I have follow the link: http://technet.microsoft.com/en-us/library/bb629560.aspx Everything work well. If there are still has some issue, I would reupgrade it again, make a test. Regards! Gavin Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.