Hello, Prepare of Active Directory for Exchange 2007 fails - Prepare /AD was running from the Top Domain (abc.xyz) successfully with an account that is member in the Enterprise Admin Group and Schema Admins Group. /PrepareAllDomains should run on same system, logged on to the Domain where ran Prepare /AD, using the same account. The following error is displayed. [2011-03-10 15:09:50] [2] Used domain controller DCComputername.abc.xyz to read object CN=Exchange Servers,OU=Microsoft Exchange Security Groups,DC=abc,DC=xyz [2011-03-10 15:09:50] [2] Used domain controller DCComputername.abc.xyz to read object CN=Exchange Servers,OU=Microsoft Exchange Security Groups,DC=abc,DC=xyz [2011-03-10 15:09:50] [2] [ERROR] Active Directory operation failed on DCComputername.abc.xyz. This error is not retriable. Additional information: The specified user does not exist. Active directory response: 00000525: NameErr: DSID-031A0F80, problem 2001 (NO_OBJECT), data 0, best match of: '' [2011-03-10 15:09:51] [2] [ERROR] The object does not exist. Verification steps after running /PrepareAllDomains . http://technet.microsoft.com/en-us/library/bb125224%28EXCHG.80%29.aspx were done: 1. To verify that this step completed successfully, confirm the following: · You have a new global group in the Microsoft Exchange System Objects container called Exchange Install Domain Servers. Using ADUC toi connect to each domian it is showing that for all domains the Global Group is created. 1.Checked if replication is disabled, not disabled. This command is run repadmin /showreps --> Replication is runinng. 4. setup /prepalldomain is NOT running on a Domain Controller because then it is required to install additinional software, whixh should not be on the DC: -Dotnet Framework 2.0 sp1 http://www.microsoft.com/downloads/en/confirmation.aspx?FamilyId=79BC3B77-E02C-4AD3-AACF-A7633F706BA5&displaylang=en -Windows Powershell http://www.microsoft.com/downloads/en/details.aspx?FamilyId=10EE29AF-7C3A-4057-8367-C9C1DAB6E2BF&displaylang=en -Windows Installer http://www.microsoft.com/downloads/en/details.aspx?familyid=5a58b56f-60b6-4412-95b9-54d056d6f9f4&displaylang=en Also installing above requires rebooting.... It was already verified following: To verify PrepareAD completed successfully, make sure that there is a new organizational unit (OU) in the root domain called Microsoft Exchange Security Groups. This OU should contain the following new Exchange Universal Security Groups: * Exchange Organization Administrators * Exchange Recipient Administrators * Exchange View-Only Administrators * Exchange Servers * ExchangeLegacyInterop To verify PrepareAD completed successfully * have a new global group in the Microsoft Exchange System Objects container called Exchange Install Domain Servers * The Exchange 2007 Domain Servers group is a member of the Exchange Servers USG in the root domain. * On each domain controller in a domain in which you will install Exchange 2007, the Exchange Servers USG has permissions on the Domain Controller Security Policy\Local Policies\User Rights Assignment\Manage Auditing and Security Log policy Root DC is a GC server, this was also checked. How we can proceed? thanks, KatrinKatrin

Hi, Try to check if the outbound replication is disabled in the schema master? Execute again the prepare alldomains. Hope that work!!Best Regards Don't forget to mark it as answer if it helps

Hi, outbound replication on Schema master is NOT disabled. But still failing. thanks - KatrinKatrin

If the error message keeps popping up, the issue can occur by Active Directory replication. I suggest you run replmon.exe tool to monitor the replication between the domain with the root domain. If there is any problem, please post it here for research. For more information about the tool, please refer to the link below: http://technet.microsoft.com/en-us/library/cc772954(WS.10).aspx Thanks. Novak Wu TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.com Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi, How is thing going on? If there is any problem, please feel free to let me know. Regards, Novak Wu TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.com Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi, unfoirtunatelly we have a delay in preparation, therefore we can close the thread Katrin