ForestPrep question

I know this is a basic question, but what are the minimum group memberships to run ForestPrep? TechNet insists you need Enterprise Admin, Schema Admin, Domain Admin and Local Admin rights to run it. Transcender says you dont need the Domain Admin rights, same thing on msexchange.org. Who's right? ForestPrep shouldnt require Domain Admin permissions as it is run at the forest root domain level. Someone please clarify this too.

Find more posts tagged with

Comments

royal

You only need Enterprise Admin and Schema Admin if you're specifically delegating just the ForestPrep.

HeroPsycho

If I had time, I'd lab it out to be sure, but I'm pretty sure you need domain admin rights as well. Multiple Microsoft resources say you need domain admin rights to do this.

Installing New Exchange 2003 Servers
How to Run Exchange Server 2003 ForestPrep
Upgrading from Exchange 2000 Server to Exchange Server 2003

royal

Ya, what I said is more of what I'm trying to remember reading in the past. I've always had Enterprise, Schema, and Domain rights when doing ForestPrep. But according to what you found, you do need Domain Administrators. I'd also have to lab it out to be absolutely certain because I believe I've read only Enterprise and Schema Admin in the past.

For example, look at:
http://www.msexchange.org/tutorials/Forestprep-Domainprep-Explained.html

You only need Enterprise Admin, Schema Admin, and Local Admin. No Domain Admin Listed.

rjbarlow

Domain Admins is required for who executes Domainprep in a domain; I am sure because I tried this in a lab few days ago.

Essendon

Yeah DomainPrep needs Domain Admin rights in a domain. But it's ForestPrep thats giving some grief. Some sources (TechNet for example) say you need Domain Admin rights to run ForestPrep while others (Transcender) say you dont need Domain Admin rights. I'll lab it on my test rig at work on Tuesday (long weekend for us here

)