I have successfully installed Exchangee 2007 Edge Transport Role on server 2008 but the following error is being generated during the new subscription cmdlet: New-EdgeSubscription : The task couldn't add the certificate to the ADAM directory service store. Error: Access is denied..At line:1 char:20+ new-edgesubscription <<<<

Dear customer: To proper assist you to troubleshoot the problem, please help collect the following information: 1. Which command did you perform before you encounter the error, please post the entirely command that you have run in the forum. 2. On the Edge transport server, open EMS, run the following command and send the txt file to v-rocwan@microsoft.com for analyze. get-exchangecertificate | fl * >c:\certificate.txt 3. On the Edge transport server, open Event Viewer, save the application log as txt file and send it to me. 4. Please also collect an ExBPA report of the Edge server by using Exchange Best Practice Analyzer tool in Exchange Management Console > Toolbox, to run a health check. Export the report to an .XML file, compress into a .zip file and send to me. Note: I need the XML format file as this is the only format I can use to get a full view of the report directly. Thanks for your time and cooperation. Please feel free to contact me if theres anything unclear. Im glad to be of assistance. Rock Wang - MSFT

1.) The full command I entered in EMS was: New-EdgeSubscription -file "C:\EdgeSubscriptionExport.xml" 2.) Theresult of"get-exchangecertificate | fl * >c:\certificate.txt" file is blank. 3.) I have mailed you the APP logs as a .txt file 4.) I have mailed you theEXBPA output in xml format (zipped). Thank you for your assistance.

Dear customer: From your Exbpa log, I found the following waring: The 'Host' (A) record for server edgeservername.domain.local cannot be retrieved from DNS server '216.199.108.216'. This can cause message routing delays and other service failures. Verify that the DNS server is online and that the 'Host' record is present. To proper assist you to troubleshoot the problem, please help collect the following information: 1. On the Edge transport server, run the following command and send the txt file to me. get-exchangeserver | fl >c:\server.txt 2. Send the setup log file located at <systemdrive>\ExchangeSetupLogs\ExchangeSetup.log to me for analyze. 3. Open certificates tool via mmc, navigate to personal-certificates, click right pane, and send the screenshot of it to me. 4. Right click my computer, select properties, click computer name, click change and then click more, and send the screenshot of it to me. 5. The Edge Transport servers and the Hub Transport servers must be able to use DNS host resolution to locate each other. On the Hub server, ping the FQDN of Edge, and on Edge server, ping the FQDN of Hub, send the result to me. 6. On the Hub server, run the following command, and send the result to me. telnet FQDN of Edge 25 telnet FQDN of Edge 50636 Thanks for your time and cooperation. Rock Wang - MSFT

Rock, I have corrected the external DNS Reference and resubmitted the EXBPA results to your email along with the other files you requested. Thank you for your assistance. Regards, Ken

Dear customer: From the screenshot in the Server Name Screenshot.docx, I found the following information: Full computer name: servername.domain.local Domain: domain.local You should install Edge transport server on a standalone server that is not part of domain. Please refer to the following steps to fix the issue. 1. Uninstall Edge transport server from add/remove program. 2. Disjoin the Edge transport server from the AD and restart the server. 3. Configure a DNS Suffix for the Edge Transport Server Role. How to Configure a DNS Suffix for the Edge Transport Server Role http://technet.microsoft.com/en-us/library/bb123528(EXCHG.80).aspx 4. Install ADLDS on the server to provide Active Directory service. Exchange 2007 Service Pack 1 (SP1) supports deployment of server roles on a Windows Server 2008 computer. If the Edge Transport server is installed on Windows Server 2008, ADAM is replaced by Active Directory Lightweight Directory Services (AD LDS). Windows Server 2008 includes several features that have been enhanced or renamed. For information about the feature changes between Windows Server 2003 and Windows Server 2008, see Terminology Changes http://technet.microsoft.com/en-us/library/bb123550.aspx 5. Install Exchange 2007 SP1 Edge transport server on Windows server 2008 not Exchange 2007. Follow the instructions as in the following link but select Custom Exchange Server Installation to install edge transport server role Select Edge Transport Role to proceed http://technet.microsoft.com/en-us/library/bb123694.aspx 6. Run New-EdgeSubscription -file "C:\EdgeSubscriptionExport.xml", and check the effect. Hope it helps. If anything is unclear, please feel free to let me know. Rock Wang - MSFT

Hi, Just simply try to launch EMS with the Administrator privileges. In the Start menu, right-click on the Exchange Management Shell shortcut and select "Run as Administrator..." It should be working correctly by doing just this little thing! Don't forget that in Server 2008, you have an administrative separation and by default, EMS is not launched with administrative privileges! I hope it will help you!