heyi m trying to install Hub transport role but i ll get this error:Summary: 1 item(s). 0 succeeded, 1 failed. Elapsed time: 00:01:18Hub Transport RoleFailedError:The process does not possess the 'SeSecurityPrivilege' privilege which is required for this operation.Warning:An unexpected error has occurred and a Watson dump is being generated: The process does not possess the 'SeSecurityPrivilege' privilege which is required for this operation.Elapsed Time: 00:01:18 after i fix my previouse problem for active directory prepration i ran setup and i installed all roles except hub transport and Unified messaging role. when i try to install unified messaging role i get the error below:Summary: 1 item(s). 0 succeeded, 1 failed. Elapsed time: 00:00:42Unified Messaging Role PrerequisitesFailedError:This computer requires Windows Media Encoder update http://go.microsoft.com/fwlink/?LinkId=67406.Recommended Action: http://go.microsoft.com/fwlink/?linkid=30939&l=en&v=ExBPA.3&id=f2222532-90be-4557-b394-e21c58f84f50Error:This computer requires Windows Media Audio Voice Codec update http://go.microsoft.com/fwlink/?LinkId=67407.Recommended Action: http://go.microsoft.com/fwlink/?linkid=30939&l=en&v=ExBPA.3&id=ec8e8d19-778d-44a2-a022-611550faa43bError:A Setup failure previously occurred while installing the HubTransport role. Either run Setup again for just this role, or remove the role using Control Panel.Elapsed Time: 00:00:42any idea?

Hi Mehdi, "Setup /p" grants the seSecurityPrivilege (Manage Auditing and Security Log) to the Exchange Servers group normally. Did you prepare your AD? If yes then try to give permission manually as per method 2 in below KB. http://support.microsoft.com/kb/925825

hey amit yup!i did that without Error i have installed all the roles except those two!setup.com /p is installed completely.i checked that exchange server is already added in Manage auditing and security log.im just facing many different Errors this is the latest , and i really need to recover it.

Hi, Removeitandaddit back manually as per method 2 in below KB. http://support.microsoft.com/kb/925825 Before that... I think you are running your environment on VMWare hence I would suggest you to disable TCP Chimney, TCPA & RSS features of Windows 2003 SP2 which are enabled by default. Follow below reference. Windows 2003 Scalable Networking pack and its possible effects on Exchange http://msexchangeteam.com/archive/2007/07/18/446400.aspx

Hi, Besides Amits input, you can run policytest.exe utility to troubleshoot this issue. The policytest.exe utility produces a list of domain controllers and reports the presence or absence of the required privilege on these domain controllers. Note: This utility is located in the \i386\Server\Setup\ServerRoles\Common folder on the Microsoft Exchange Server CD. If all the DCs have the right "Manage auditing and security log" set, then please follow the below steps: 1) I recommend you to remove the right "Manage auditing and security log" on the Default Domain Policy for the Exchange Enterprise Servers and Exchange Servers. 2) After that run gpupdate /force from a command prompt on the exchange server. 3) Please delete the watermark key in the registry under HKLM\Software\Microsoft\Exchange\V8.0\Hub for the HUB role 4) Please try to run setup.com /preparead If the policytest.exe indicates that the required privileges are not present, do the following: Open the Default Domain Controllers Security Settings snap-in on the domain controller specified in the event description. 1) In the console tree, under Security Settings, expand Local Policies, and then click User Rights Assignments. 2) In the results pane, double-click Manage auditing and security log. Verify that both the Exchange Servers group and the Exchange Enterprise Servers group are listed. 3) Make sure that the Exchange server is still a member of the Exchange Domain Servers group. Also, make sure that the Exchange Domain Servers group is a member of Exchange Enterprise Servers group. 4) Make sure that the group permissions are inherited by the Microsoft Exchange computer account. For Unified Messaging Server Roles, please refer to article below to install Unified Messaging Role Prerequisites. Deploy the Client Access Server and Unified Messaging Server Roles http://technet.microsoft.com/en-us/library/cc526576.aspx Hope it helps. Xiu

Hi Xui,huh! something strange!i can not see any group called Exchange Domain Servers and Exchange Enterprise Servers !!!!!!!!!!i checked Default Domain Controllers Security Settings and after removing watermark in registry and all those steps i added exchange servers group there.when i run the policytest.exe i ll get this error:Local domain is "domain.com" (DOMAIN)LookupAccountName returned error 1332Abnormal exit from PolicyTestand i ran setup.com /p and hub transport has failed :PS D:\> d:\Setup /PWelcome to Microsoft Exchange Server 2007 Unattended SetupPreparing Exchange SetupNo server roles will be installed Hub Transport RolePerforming Microsoft Exchange Server Prerequisite Check Organization Checks ......................... COMPLETEDConfiguring Microsoft Exchange Server Organization Preparation ......................... COMPLETED Hub Transport Server Role ......................... FAILED Attempted to perform an unauthorized operation.humm! what do you think?

Hi, 1. Please try to run RSOP.msc from Exchange Server to see whether it can retrieve result settings from DC. 2. Besides, please run NetDiag and DCDiag to check whether the network connection and dc connection is all right.(If any error occur, please post here.) You can run DCdiag /v from a command prompt to check it. Dcdiag Overview http://technet2.microsoft.com/WindowsServer/en/library/f7396ad6-0baa-4e66-8d18-17f83c5e4e6c1033.mspx?mfr=true Netdiag Overview http://technet2.microsoft.com/windowsserver/en/library/cf4926db-87ea-4f7a-9806-0b54e1c00a771033.mspx?mfr=true 3. After that remove the right "Manage auditing and security log" on the Default Domain Policy for the Exchange Enterprise Servers and Exchange Servers. 4. After that run gpupdate /force from a command prompt on the exchange server. 5. Please delete the watermark key in the registry under HKLM\Software\Microsoft\Exchange\V8.0\Hub for the HUB role 6. Please ensure the account that you used to install Exchange server has domain administrative privilege.(member of Exchange Organization admin group). 7. Please try to run setup.com /preparead Hope it helps. Xiu

Thanks for posting all the useful information. I am getting the same error so I figured it might be useful to reply in this thread given it is somewhat recent. My lab install is failing for the CAP role but only from one domain. We have two domains, one where Exchange 2003 is installed and the other one where we are going to put Exchange 2007. When I install the CAP role in the one domain withthe existing Exchange2003 serversit works fine, but when I try to do it in the other domain I get that SeSecurityPrivilege error. I tried deleting the watermark and resetting all the permissions like you mentioned and the policytest works withouta hitch. I compared the exchange groups and such in both domains and both are basically identical, so I am not sure where the permissions are failing. We need to get this to work in the other domain based on requirements we have for configuring the geographically dispersed cluster, and when we first built this in the other domain it worked fine. Thanks! David

Please follow the instructions as suggested by Xiu about 4 posts above mine (November 06, 2008 8:54 AM): The 2nd part of that solution suggested fixed my problem. I had spent 3 days in trying to fix it only to realise that the Exchange computer account was NOT part of the Exchange Domain Servers group. Once I plugged this in one of the Domain Controllers and waited for the replication to occur, restarted JUST the 'Microsoft Exchange Information Store' service in the exchange computer, it all worked!HTHKnoa IT