HelloWe have 3 domains in our organisation - us.company.com, uk.company.com, canada.company.comOne Exchange 2003 SP2org, but the three Admin groups/routing groups to reflect the domain structure.Exchange admins in UK and Canada only have rights over their own Admin groups, US has full Exchange organisation rights.We have already completed the AD preps necessary for Exchange 2007, and are looking to implement the first Exchange 2007 servers in UK and Canada (CAS servers).What accounts would we need to install these servers? Can the Exchange admins in UK and Canada install new Exchange 2007 servers with their existing admin accounts that give them permission on their own Admin groups only? I understand the Exchange 2007 Admin permissions are different from 2003 and do not revolve around Admin groups.Any help appreciated!Cheers

http://technet.microsoft.com/en-us/library/bb123694.aspxIf you are installing the first Exchange2007 server in the organization, the account you use must have membership in the Enterprise Administrators group. If you have already prepared the schema and are not installing the first Exchange2007 server in the organization, the account you use must be delegated the Exchange Organization Administrator role. For more information about permissions, delegating roles, and the rights that are required to administer Exchange Server 2007, see Permission Considerations.http://technet.microsoft.com/en-us/library/bb201741.aspxHow to Provision Exchange 2007 Server and Delegate Setup

HiThanks... "If you are installing the first Exchange2007 server in the organization, the account you use must have membership in the Enterprise Administrators group. If you have already prepared the schema and are not installing the first Exchange2007 server in the organization, the account you use must be delegated the Exchange Organization Administrator role."Hmmm, so how about if there is an Exchange 2003 org already in place (as described above) and the AD prep has already been done for the schema/all domains? Does the account that installs the first Exchange 2007 server need to be Enterprise Admin, or is this not necessary? And does the account need to be an Exchange Org/Exchange Full Administrator?Cheers!

Do you have an empty forest root at company.com?Installing Exchange 2007 SP1 at the Forest root run "setup /preparead" This will prepare the schema and the exchange lagacy permissions.With the same account that is enterprise admin and exch org admins run "setup /preparealldomains" This will configure all domains in the child domains for Exchange 2007.I would deploy Exchange in your environment first for the Hub/CAS to get the org setup, you will need to have the org admin.For the other environments you could use a /newprovisedserver command for the sub admins to deploy the exchange server in that domain without needing the org admin permissions. YOu will need to make then server admins then to do this however.Otherwise you will need full org admin rights to do it.BP

Hi BPThanks for answering./prepareAD and /preparealldomains have already been run. Ok - so the first CAS *has* to be an org admin? We cannot use the/newprovisedserver command for this?And you are saying once that first CAS is in, we can then subsquently use/newprovisedserver command? Do you have a link to this command since I can't find anything about it on the internet?Cheers

Not neccessairly. I would have it though b/c when you deploy the first Hub Transport server it will establish a RC between 07 and 03.The other thign is the new Exchange SErvers will need to be added to the exchange servers secusrity group in the empty forest root. So you could deploy the RC manually, and use the newprovisionedserver option to deploy the other servers.Does that make sense?BP