Re: Need to be a schema admin just to install management tools???

Tech-Archive recommends: Fix windows errors by optimizing your registry

The Exchange deployment is for externally facing customers in an external
forest in the DMZ, while the developers are in an internal forest that is
trusted by the domains in the external forest. The internal forest is using
Exchange 2003 currently. It seems that at minimum you have to have Exchange
2007 in the forest where you install the management tools. I suppose a
workaround is to move the developer's boxes and join them to the external
forest, but this is not something we like to do. I'm now pursuing the
approach of yesteryear though: set AD properties directly, as ADSI /
DirectoryEntry doesn't have any "artificial" requirement imposed on
development environment (e.g., it's possible to write ADSI / DirectoryEntry
code on a standalone workstation).

"Michael Dragone" <newsgroup@xxxxxxxxxxxxxx> wrote in message
news:OqQcCTiKJHA.5232@xxxxxxxxxxxxxxxxxxxxxxx
This doesn't seem right to me - I recall installing the 32-bit version of
the management tools on a Windows Server 2003 box with an account that
wasn't in either Enterprise Admins or Schema Admins.

How have you deployed your actual Exchange 2007 server(s)?

"Steve Schuler" <sjschu@xxxxxxxxxx> wrote in message
news:eQeuH$ZKJHA.4940@xxxxxxxxxxxxxxxxxxxxxxx
Hello all - I'm just getting into this, and hopefully this is just a
newbie question.

We are going to do some custom Exchange 2007 provisioning and our intent
is to wrap calls to the management tools PSCmdlets in our own C# class.
So my first thought is I need to get the Exchange Management Tools
installed. This is 32 bit development on a XP SP2. I tried the
instructions here http://support.microsoft.com/default.aspx/kb/555841,
but when we get to the Readiness Checks we get the following

Summary: 2 item(s). 1 succeeded, 1 failed.

Elapsed time: 00:01:53





Management Tools Prerequisites

Completed



Elapsed Time: 00:00:08





Organization Prerequisites

Failed



Error:

The Active Directory Schema must be modified and this user account has
insufficient permissions. It must be a member of both the 'Schema Admins'
and 'Enterprise Admins' groups.

Recommended Action:
http://go.microsoft.com/fwlink/?linkid=30939&l=en&v=ExBPA.3&id=2fafe5d4-04e0-4c5a-a69f-7613d438131f



Error:

Global updates need to be made to Active Directory, and this user account
is not a member of the 'Enterprise Admins' group.

Recommended Action:
http://go.microsoft.com/fwlink/?linkid=30939&l=en&v=ExBPA.3&id=fb97f691-d7c3-40b6-8515-95fd489db46e



Error:

The local domain needs to be updated. You must be a member of the 'Domain
Admins' and 'Exchange Organization Administrators' group, or 'Enterprise
Admins' group to continue.

Recommended Action:
http://go.microsoft.com/fwlink/?linkid=30939&l=en&v=ExBPA.3&id=57887854-be52-43eb-9549-e854e4dbe33b



Error:

Setup needs to contact the Active Directory schema master but this
computer is not in the same Active Directory domain as the schema master
(DC=XXX,DC=XXXXXXX,DC=com).

Recommended Action:
http://go.microsoft.com/fwlink/?linkid=30939&l=en&v=ExBPA.3&id=2376fec1-b9ce-44db-beb6-cb9ac4788988



Error:

Setup encountered a problem while validating the state of Active
Directory: Exchange organization-level objects have not been created, and
setup cannot create them because the local computer is not in the same
domain and site as the schema master. Run setup with the /prepareAD
parameter on a computer in the domain XXX and site Puget-Sound, and wait
for replication to complete.



Warning:

The Active Directory schema will be upgraded if you continue. Verify that
the organization is ready for Exchange 2007 by running the Exchange 2007
Readiness Check, which is part of the Exchange Best Practices Analyzer.





Elapsed Time: 00:00:06



These purported requirements are untenable. What is the recommended
approach for developing custom code against the maangement PSCmdlets, and
what are the development environment requirements?



Thanks, Steve Schuler




.

Relevant Pages

  • Re: Need to be a schema admin just to install management tools???
    ... We are going to do some custom Exchange 2007 provisioning and our intent ... The Active Directory Schema must be modified and this user account has ... It must be a member of both the 'Schema Admins' ... Global updates need to be made to Active Directory, ...
    (microsoft.public.exchange.development)
  • Re: Process to replace 2000 DCs with 2003.
    ... This is preparing the Active Directory Schema for the ... This will also extend the Active Directory Schema, ... the stuff that Exchange needs. ... There should be no need to upgrade the WIN2000 Domain Controllers to ...
    (microsoft.public.windows.server.active_directory)
  • Re: Chnages to Company Structure - Need to Create New Domains/Subdomains could do with pointing
    ... I am not an Exchange expert but the Exchange store could manage multiple ... one Exchange forest per Active Directory forest. ... To clarify the companies in question will be entirely separate ... Is this doable by keeping one Active Directory Structure and being ...
    (microsoft.public.windows.server.active_directory)
  • Re: gracefully removing a child domain
    ... forest and using ADMT to transfer their accounts prior to cut over? ... Then with Exchange, you have to figure out what to do with the mailboxes. ... would be beneficial, of small, a migration would be easier to clean out the ... PPT Presentation - Active Directory Design and Deployment- Tales of the ...
    (microsoft.public.windows.server.active_directory)
  • Re: Multiple Exchange 2007 Orgs in One AD Forest?
    ... No you can't Forest can only have 1 Exchange org. ... "An Exchange organization can span only a single Active Directory ...
    (microsoft.public.exchange.admin)