Hi All, OK so far (customer transitioning from E2K3 to E2K7). 1st CAS role installed, trying in install separate server with HT and Mailbox role. Schema etc extended. User logged in, to install, is member of customers E2K3 Exchange Primary Admins group and installed CAS role fine. The customer is quite rightly strict giving users rights. This user cannot install the Mailbox or HT roles. I understand the user only needs to be member of the E2K7 "Enterprise Organisation Administrators" or " Enterprise Administrators" group to install the Mailbox and HT roles ? The problem is when we use the user above (who is not a member of the AD Enterprise Admins group it attempts to do something to the AD root and fails the install with the error "You must be a member of the Exchange Organisation Administrators or Enterprise Administrators group to continue" The customer wants to know what the Mailbox / HT install is going to do to the root of the domain... and doesn't want to give the install user Enterprise Admin rights.. ! Any ideas appreciated. Cheers, LM

Best bet would be to provision the server and delegate the rights.Check this article: How to Provision Exchange 2007 Server and Delegate Setuphttp://technet.microsoft.com/en-us/library/bb201741.aspxSF - MCITP:EMA, MCTS: MOSS 2007, OCS 2007, Exchange 2007

Scott, Thanks. I understand how that negates some of the rights issues. The customer will change the rights i.e. assign Enterprise Admin rights, as was necessary with the Schema Updates, but would like to know what the Mailbox role install does to the root AD. The CAS role had no such issues. Cheers, LM

The first Hub Transport server installed into an existing Exchange 2003 organisation needs to create a two-way Routing Group Connector between 2003 and 2007. As part of that process, you will (in setup) nominate the Exchange 2003 server that you wish to function as the target bridgehead server for this RGC. The Exchange 2007 setup process will need to add the nominated Exchange 2003 server into the ExchangeLegacyInterop group that is found in the root domain.Neil Hobson, Exchange MVP

Neil, Thanks. Cheers, LM