Andrés Lozada

Exchange 2010 Mailbox Server Role Requirements Calculator Updated to Version 3.2

Hi , the Exchange product team release the new update for Exchange 2010 Mailbox Server Role Requirements Calculator

http://msexchangeteam.com/archive/2010/01/22/453859.aspx

For the explanation of different tabs and how the calculator works, go here. Yup, we updated that too!

to get the new calculator - go here.

Update Rollup 2 for Exchange Server 2007 Service Pack 2 (KB972076)

Overview

Update Rollup 2 for Exchange Server 2007 Service Pack 2 (SP2) resolves issues that were found in Exchange Server 2007 SP2 since the software was released. This update rollup is highly recommended for all Exchange Server 2007 SP2 customers.
For a list of changes that are included in this update rollup, see KB972076.
This update rollup does not apply to Exchange Server 2007 Release To Manufacturing (RTM) or Exchange Server 2007 Service Pack 1 (SP1). For a list of update rollups applicable to Exchange Server 2007 RTM or Exchange Server 2007 SP1, refer to the Knowledge Base article KB937052.
This is a cumulative update rollup and replaces the following:

KB971534 Update Rollup 1 for Exchange Server 2007 Service Pack 2 (KB971534)

Download

http://www.microsoft.com/downloads/details.aspx?FamilyID=fa83be11-9d5e-47bc-9a51-a10986f22928&displaylang=en

Description of Update Rollup 2 for Microsoft Exchange Server 2007 Service Pack 2

http://support.microsoft.com/?kbid=972076

Issues that the update rollup fixes
Update Rollup 2 for Exchange Server 2007 SP2 fixes the issues that are described in the following Microsoft Knowledge Base articles:

961525 (http://support.microsoft.com/kb/961525/ ) Exchange Server 2003 may generate duplicate journal reports in a mixed Exchange Server 2003 and Exchange Server 2007 environment

969230 (http://support.microsoft.com/kb/969230/ ) The "age limits" function of a public folder do not work as expected in an Exchange Server 2007 environment

969948 (http://support.microsoft.com/kb/969948/ ) A Computer that is running Microsoft Exchange Server 2007 that has the Client Access Server (CAS) role installed becomes slow when a user tries to open a folder that contains many items

970817 (http://support.microsoft.com/kb/970817/ ) An appointment is displayed incorrectly as an all-day event if you use a mobile device to synchronize the calendar in Exchange Server 2007

971177 (http://support.microsoft.com/kb/971177/ ) The Auto Attendant 'Business Hours' schedule is not updated in Exchange Server 2007 when the DST setting is changed

971349 (http://support.microsoft.com/kb/971349/ ) Exchange Server 2007 users intermittently cannot access an Exchange Server 2003 user's Free/Busy information in Office Outlook 2007

971889 (http://support.microsoft.com/kb/971889/ ) When Unified Messaging-enabled users call Outlook Voice Access on Exchange Server 2007 to play voice mails messages, there is a delay before the voice mail message is played

972705 (http://support.microsoft.com/kb/972705/ ) The Microsoft Exchange Server 2007 log or database experiences abnormal growth

972744 (http://support.microsoft.com/kb/972744/ ) When a user sends e-mail messages to a remote domain, some e-mail messages are queued on an Exchange Server 2007 Hub Transport server or Edge server

973165 (http://support.microsoft.com/kb/973165/ ) A return address is split into two separate and incomplete addresses when a recipient replies to a specific message in Exchange 2007

973486 (http://support.microsoft.com/kb/973486/ ) Some message parts are not readable when Exchange Server 2007 must convert the message part encoding from binary or from 8 bit to 7 bit

973969 (http://support.microsoft.com/kb/973969/ ) Incorrect exceptions are generated for a recurring iCalendar message when an Exchange Server 2007 server processes an SMTP message that contains the iCalendar message part

974155 (http://support.microsoft.com/kb/974155/ ) OWA does not highlight misspelled words in an Exchange Server 2007 CAS proxy environment

974161 (http://support.microsoft.com/kb/974161/ ) Some attendees cannot receive a meeting cancellation notification when the appointment recurrence pattern is changed by using EWS in Exchange Server 2007

974312 (http://support.microsoft.com/kb/974312/ ) Unread messages are marked as "read" when Exchange Server 2007 processes the EXAMINE command

974344 (http://support.microsoft.com/kb/974344/ ) You still receive an error message when you run the Test-OwaConnectivity command after you apply hotfix KB957485 in Exchange Server 2007

974401 (http://support.microsoft.com/kb/974401/ ) Store sessions are not released when you run the Add-PublicFolderClientPermission cmdlet or the Remove-PublicFolderClientPermission cmdlet in public folders on a computer that is running Exchange Server 2007

974450 (http://support.microsoft.com/kb/974450/ ) A new accepted domain that is added does not work in an Exchange Server 2007 organization

974679 (http://support.microsoft.com/kb/974679/ ) Returned folder names include a question mark when you check the folder names of an Exchange Server 2007 mailbox

974775 (http://support.microsoft.com/kb/974775/ ) The EdgeTransport.exe process crashes intermittently on an Exchange Server 2007 server

974843 (http://support.microsoft.com/kb/974843/ ) Exchange Server 2007 performance counter "Messages queued for submission" shows incorrect value

974897 (http://support.microsoft.com/kb/974897/ ) You receive an NDR you try to send messages through your Microsoft Exchange Server 2007 account

974946 (http://support.microsoft.com/kb/974946/ ) Exchange Server 2007 OWA users receive an error message when the users change the display line for the search results on the address books

974999 (http://support.microsoft.com/kb/974999/ ) The "Task Owner" field is not set when you create a task in Outlook Web Access

975050 (http://support.microsoft.com/kb/975050/ ) A call transfer fails by using key mapping in a mixed Exchange Server 2007 UM server and OCS 2007 environment

975165 (http://support.microsoft.com/kb/975165/ ) EWS proxying requests fail after you run Availability Service requests in a CAS to CAS proxying scenario in Exchange Server 2007

975213 (http://support.microsoft.com/kb/975213/ ) You cannot log on to your mailbox and you receive an error in an Exchange server 2003 and Exchange Server 2007 coexist environment

975255 (http://support.microsoft.com/kb/975255/ ) Event 2104 and event 2147 are continuously logged in an Exchange Server 2007 Cluster Continuous Replication (CCR) environment

975404 (http://support.microsoft.com/kb/975404/ ) An attachment of a meeting request cannot be opened when you use a CDO application to accept a meeting request in Exchange Server 2007

975844 (http://support.microsoft.com/kb/975844/ ) The misspelled word of a message loses its custom format when an Exchange Server 2007 user writes the message in OWA

975903 (http://support.microsoft.com/kb/975903/ ) The RemoveDelegate operation of EWS fails, and then a "500 internal server" error response and event ID 4999 are logged in an Exchange Server 2007 server

975916 (http://support.microsoft.com/kb/975916/ ) The custom form of a meeting request is removed in the recipients' calendar in an Exchange Server 2007 environment

975918 (http://support.microsoft.com/kb/975918/ ) When an IMAP4 client sends a FETCH (bodystructure) request to a server that is running the Exchange Server 2007 IMAP4 service, a corrupted response is sent as a reply

975946 (http://support.microsoft.com/kb/975946/ ) An S/MIME message is not verified and is rejected when BizTalk Server 2006 uses the Exchange Server 2007 version of ExSMime.dll to parse MIME messages

975990 (http://support.microsoft.com/kb/975990/ ) Messages that have duplicate message IDs are deleted when they are archived to an Exchange 2007 mailbox

976025 (http://support.microsoft.com/kb/976025/ ) The free/busy information of an Exchange Server 2007 user is not displayed

976106 (http://support.microsoft.com/kb/976106/ ) Microsoft Exchange Transport services crashes with StackOverflowException when Message Journaling is enabled on Exchange Server 2007

976107 (http://support.microsoft.com/kb/976107/ ) You receive the warning "Failed to update recipient" when you run the Update-addresslist cmdlet in Exchange Management Shell on Exchange Server 2007

976137 (http://support.microsoft.com/kb/976137/ ) Exchange Server 2007 Unified Messaging incorrectly plays a nonbusiness hours greeting when someone call during holiday

976195 (http://support.microsoft.com/kb/976195/ ) You cannot edit a transport rule if one or more of the recipient addresses are disabled or removed in an Exchange Server 2007 server

976653 (http://support.microsoft.com/kb/976653/ ) The Cluster Administrator shows that the mount operation fails and error 1003 is logged even though the database is mounted in an Exchange Server 2007 CCR or in a SCC environment

976787 (http://support.microsoft.com/kb/976787/ ) The Calendar Month View displays a numeric date and not an abbreviated month name when you set the Regional Settings to Japanese or to Korean in Outlook Web Access for Exchange Server 2007

976794 (http://support.microsoft.com/kb/976794/ ) When you edit an e-mail message in OWA, the font changes to the default Internet Explorer font

976946 (http://support.microsoft.com/kb/976946/ ) The message delivery time is incorrect when you send e-mail messages by using an IMAP4 client together with the APPEND command in Exchange Server 2007

977085 (http://support.microsoft.com/kb/977085/ ) An incorrect value for DumpsterMessagesDeleted is reported in an Exchange Server 2007 environment

977091 (http://support.microsoft.com/kb/977091/ ) The time for an updated meeting request is incorrectly shown in an exception instance of a recurring meeting request on an Exchange Server 2007 environment

977181 (http://support.microsoft.com/kb/977181/ ) The EXOLEDB component is not initialized successfully when you start Exchange Information Store Service on an Exchange Server 2007 server

977223 (http://support.microsoft.com/kb/977223/ ) A move operation on a folder fails when the "ptagProvisionedFid" attribute is invalid in an Exchange Server 2007 environment

977261 (http://support.microsoft.com/kb/977261/ ) One or more errors occur when you set the Message Access logging level to Expert in an Exchange Server 2007 SP2 server

977355 (http://support.microsoft.com/kb/977355/ ) Non-ASCII characters in a display name of a forwarded message are shown with "?" when the display name of a contact is in East Asia characters in an Exchange Server 2007 environment

977412 (http://support.microsoft.com/kb/977412/ ) Error message when you use the WebDAV protocol to connect to an Exchange Server 2007 server: "Error 1000"

977425 (http://support.microsoft.com/kb/977425/ ) The "Proxy server name" field is incorrectly shown in OWA in an Exchange Server 2007 CAS-to-CAS proxy environment

978593 (http://support.microsoft.com/kb/978593/ ) Windows Server 2008 VSS backup plug-in fails to backup Exchange 2007 Service Pack 2 databases that reside on a volume mount point

Microsoft Security Bulletin MS10-002 - Critical

http://www.microsoft.com/technet/security/bulletin/ms10-002.mspx

General Information

Executive Summary

This security update resolves seven privately reported vulnerabilities and one publicly disclosed vulnerability in Internet Explorer. The more severe vulnerabilities could allow remote code execution if a user views a specially crafted Web page using Internet Explorer. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

This security update is rated Critical for all supported releases of Internet Explorer: Internet Explorer 5.01, Internet Explorer 6, Internet Explorer 6 Service Pack 1, Internet Explorer 7, and Internet Explorer 8 (except Internet Explorer 6 for supported editions of Windows Server 2003). For Internet Explorer 6 for supported editions of Windows Server 2003 as listed, this update is rated Moderate. For more information, see the subsection, Affected and Non-Affected Software, in this section.

The security update addresses these vulnerabilities by modifying the way that Internet Explorer handles objects in memory, validates input parameters, and filters HTML attributes. For more information about the vulnerabilities, see the Frequently Asked Questions (FAQ) subsection under the next section, Vulnerability Information.

This security update also addresses the vulnerability first described in Microsoft Security Advisory 979352.

Recommendation. The majority of customers have automatic updating enabled and will not need to take any action because this security update will be downloaded and installed automatically. Customers who have not enabled automatic updating need to check for updates and install this update manually. For information about specific configuration options in automatic updating, see Microsoft Knowledge Base Article 294871.

For administrators and enterprise installations, or end users who want to install this security update manually, Microsoft recommends that customers apply the update immediately using update management software, or by checking for updates using the Microsoft Update service.

Get a Second Shot

Second Shot provides a free retake when you fail your first attempt at an IT Pro or Developer Microsoft Certification Exam, reducing concern and fear of not passing your exam.

Buy a Microsoft IT Professional, Developer, or Microsoft Dynamics certification exam and get a Free Retake if you fail your first try.
This promotion is valid from January 13, 2009 – June 30, 2010. Customers must register, obtain a voucher code, schedule, pay, and sit for both the first and (if necessary) second retake exams before June 30, 2010.
Eligible Exams: All 070 and 083 exams. Offer available worldwide.

Click here to get your Second Shot!

Why Certify?
Whether you are currently unemployed, looking for a promotion, or trying to become indispensible in your existing role, Microsoft Certifications can validate your training and knowledge for skills applicable for some of the top IT and Developer jobs in the industry.
To find out more, visit: www.microsoft.com/learning/en/us/offers/Career.aspx

Exchange 2010 Rollup1 - This process can take an extended period of time to complete

Description of Update Rollup 1 for Exchange Server 2010

http://support.microsoft.com/kb/976573

Download

http://www.microsoft.com/downloads/details.aspx?FamilyID=371add31-d7a0-4c8b-8325-a6fced2d05e6&displaylang=en

This process can take an extended period of time to complete, to fix this issue you have to change the process of Certificate Revocation Check or grant the access to the public CRL of Microsoft, you can do it in three diferents ways

The installation of Rollup 1 performs the process of Certificate Revocation Check, if the server does not have internet access to validate the CRL from Microsoft freezes and down the services in DISABLE mode

Workaround:

1. Enable Internet Access while the installation process

2. Disable Certificate Revocation Check Option

Turn off certificate revocation check in Internet Explorer

In Internet Explorer –> Tools –> Internet Options –> Advanced tab
In the Security section, uncheck or clear the box for two options mentioned below:

Check for publisher’s certificate revocation
Check for server certificate revocation

Turn off certificate revocation check in registry

In registry editor browse to the following key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing

Change Value “State” to 146944 Decimal or 0×00023e00 Hexadecimal

Either way, you should not leave these settings intact after installation of Rollup update. Do not forget to revert the changes. I don’t think you will ask me for steps to revert it if you used IE method. If you changed registry, I have listed details below.

Turn on certificate revocation check in registry

In registry editor browse to the following key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing

Change Value “State” to 146432 Decimal or 0×00023c00 Hexadecimal

3. Edit the configuration file on each services

<configuration>
<runtime>
<generatePublisherEvidence enabled="false"/>
</runtime>
</configuration>

http://andreslozada.blogspot.com/2009/03/after-you-install-microsoft-exchange.html

Installing Update Rollup 1 for Exchange 2010 on DAG Members

Hi , My friend Scott Schnoll has published this article with the steps required for the installation of Rollup 1 for Exchange Server 2010 on DAF Members

Installing Update Rollup 1 for Exchange 2010 on DAG Members

http://blogs.technet.com/scottschnoll/archive/2009/12/10/installing-update-rollup-1-for-exchange-2010-on-dag-members.aspx

Install a Update Rollup on a Database Availability Group Member

Suspend activation for the database copies on the server being updated

Run the following command in the Exchange Management Shell:

Get-MailboxDatabaseCopyStatus -Server <Server> | Suspend-MailboxDatabaseCopy -ActivationOnly -Confirm:$False -SuspendComment "Install update rollup for Exchange 2010"

Perform a server switchover on the server being updated

In the console tree, navigate to Server Configuration > Mailbox.
In the result pane, select the Mailbox server you want.
In the Actions pane, select Switchover Server.
In the Switchover server database copies dialog box, do one of the following:

Accept the default setting of Automatically choose a target server (in which case, the system automatically selects the best Mailbox server for each database being switched over), and then click OK.
Use the specified server as the target for switchover, click Browse to select a Mailbox server, and then click OK.

Install the update rollup

Close all Exchange management tools.
Right-click the update rollup file (.MSP file) you downloaded and select Apply.
On the Welcome page, click Next.
On the License Terms page, review the license terms, select I accept the License Terms, and then click Next.
On the Completion page, click Finish.

Resume activation for the databases on the updated server

Run the following command in the Exchange Management Shell:

Get-MailboxDatabaseCopyStatus -Server <Server> | Resume-MailboxDatabaseCopy

Perform database switchovers as needed

In the console tree, navigate to Organization Configuration > Mailbox.
In the result pane, click the Database Management tab, and then right-click the mailbox database whose copy you want to activate.
In the action pane, click Activate a Database Copy.
On the Activate a Database Copy page, click Browse to select the server you updated.
Select the desired setting for the automatic database mount dial setting on the selected server.
Click Move to activate the selected passive copy of the database to the updated server.
On the Completion page, review the following, and then click Finish to close the wizard.

Scott Schnoll´s Blog

http://blogs.technet.com/scottschnoll/default.aspx

BlackBerry Enterprise Server fully supported on Exchange 2010

http://msexchangeteam.com/archive/2009/12/09/453486.aspx

In order to enable full support, three updates are required:

Roll-Up 1 (RU1) for Exchange Server 2010
MAPI v6.5.8147
BlackBerry Enterprise Server 5.0.1 Maintenance Release 1 (MR1)

All three of these updates are available to customers of Exchange Server 2010 and BlackBerry Enterprise Server v.5.0 with Service Pack 1 at no cost. BlackBerry Enterprise Server v5.0 Service Pack 1 and Maintenance Release 1 can be found here: http://www.blackberry.com/support/downloads

Additional information on the solution requirements, preparing the BlackBerry environment for Microsoft Exchange Server2010, can be found on the BlackBerry site here.

http://na.blackberry.com/eng/services/server/exchange/2010support.jsp

Solution Requirements

BlackBerry Enterprise Server v5.0 with Service Pack 1 and Maintenance Release 1
- Download service packs and maintenance releases for BlackBerry Enterprise Server v5.0

Microsoft Exchange Server 2010 updated with Roll Up 1
- Learn more about Microsoft Exchange Server 2010

Microsoft MAPI/CDO Download Package
- Download v6.5.8146 or higher of the Microsoft Exchange Server MAPI Client and Collaboration Data Objects 1.2.1

Resources to Help You Prepare Your BlackBerry Environment for Microsoft Exchange 2010

View all documentation for BlackBerry Enterprise Server for Microsoft Exchange v5.0.1

Exchange Server 2010 Rollup 1 – Available!

Description of Update Rollup 1 for Exchange Server 2010

http://support.microsoft.com/kb/976573

Download

http://www.microsoft.com/downloads/details.aspx?FamilyID=371add31-d7a0-4c8b-8325-a6fced2d05e6&displaylang=en

Issues that the update rollup fixes

Update Rollup 1 for Exchange Server 2010 fixes the issues that are described in the following Microsoft Knowledge Base articles:

977439 (http://support.microsoft.com/kb/977439/ ) Exchange Server 2010 users cannot open certain attachments when they access their mailboxes by using Outlook Web App

977551 (http://support.microsoft.com/kb/977551/ ) Meeting requests that are sent to a room mailbox are not processed in Exchange Server 2010

977552 (http://support.microsoft.com/kb/977552/ ) Exchange RPC Client Access service crashes in the Handler.dll that is located on an Exchange 2010 Client Access service server

977553 (http://support.microsoft.com/kb/977553/ ) Exchange RPC Client Access service crashes in Parser.dll on the Exchange Server 2010 CAS server

977554 (http://support.microsoft.com/kb/977554/ ) The subject or body of a message that is hosted in an Exchange Server 2010 mailbox is not set as expected

977555 (http://support.microsoft.com/kb/977555/ ) The message body is inaccessible when the property conversion from PR_BODY_HTML to PR_BODY fails

977556 (http://support.microsoft.com/kb/977556/ ) The body text of an e-mail message is invisible after you create exceptions for a recurring appointment or for a recurring meeting by using a CDO application together with Exchange Server 2010

977557 (http://support.microsoft.com/kb/977557/ ) An E_FAIL error occurs when you create an exception to a meeting request by using a CDO application for a Microsoft Exchange Server 2010 mailbox

977558 (http://support.microsoft.com/kb/977558/ ) A folder name is not changed when you try to move and then rename the folder in an Exchange Server 2010 mailbox by using the CopyFolder method of the IMAPIFolder interface

977559 (http://support.microsoft.com/kb/977559/ ) The location of a meeting or an appointment is not updated on an Exchange Server 2010 mailbox

977560 (http://support.microsoft.com/kb/977560/ ) Update fails when you use a CDO application to update a recurrence task on Exchange Server 2010

977561 (http://support.microsoft.com/kb/977561/ ) VSS backup process stops responding when you try to perform a Volume Shadow Copy Service (VSS) backup for Exchange Server 2010 databases

Install Exchange Server 2010 RTM – Step by Step

Hi, i write this post with the step by step to install Exchange Server 2010 RTM

Install the Windows Server 2008 R2 operating system prerequisites

http://technet.microsoft.com/en-us/library/bb691354(EXCHG.140).aspx#WS08R2

On servers that will host the Hub Transport or Mailbox server role, install the Microsoft Filter Pack

http://www.microsoft.com/downloads/details.aspx?FamilyId=60C92A37-719C-4077-B5C6-CAC34F4227CC&displaylang=en

1. On the Start Menu, navigate to All Programs, then Accessories, then Windows PowerShell. Open an elevated Windows PowerShell console, and run the following command:

Import-Module ServerManager

2. Use the Add-WindowsFeature cmdlet to install the necessary operating system components:

For a server that will have the typical installation of Client Access, Hub Transport, and the Mailbox role:

Add-WindowsFeature NET-Framework,RSAT-ADDS,Web-Server,Web-Basic-Auth,Web-Windows-Auth,Web-Metabase,Web-Net-Ext,Web-Lgcy-Mgmt-Console,WAS-Process-Model,RSAT-Web-Server,Web-ISAPI-Ext,Web-Digest-Auth,Web-Dyn-Compression,NET-HTTP-Activation,RPC-Over-HTTP-Proxy –Restart

Restart

3. After the system has restarted, log on as an administrator, open an elevated Windows PowerShell console, and configure the Net.Tcp Port Sharing Service for Automatic startup by running the following command:

Set-Service NetTcpPortSharing -StartupType Automatic

Prepare Active Directory

http://technet.microsoft.com/en-us/library/bb125224(EXCHG.140).aspx

Prerequisites

Your domains and the domain controllers must meet the system requirements in the "Network and Directory Servers" section of Exchange 2010 System Requirements.
In each domain in which you will install Exchange 2010, you must have at least one domain controller running Windows Server 2003 Service Pack 1 (SP1).
If you are running the release to manufacturing (RTM) version of Exchange 2010 Setup.com, in each domain (including child domains) where you have the Exchange Enterprise Servers and Exchange Domains Servers security groups and therefore must run Setup /PrepareLegacyExchangePermissions, you must have at least one domain controller running Windows Server 2003 SP1 or a later version.
If you are deploying a new Exchange organization, and you are preparing your Active Directory schema and domains by using a computer running Windows Server 2008, you must first install the Active Directory management tools on the Windows Server 2008 computer prior to preparing the schema or domains. To do this, run the following command.

ServerManagerCmd -i RSAT-ADDS

The computers on which you will install Exchange 2010 must meet the system requirements. For details, see Exchange 2010 System Requirements.

Prepare Active Directory and domains

If you have any computers in your organization running Exchange 2003, open a Command Prompt window, and then run one of the following commands:
- To prepare legacy Exchange permissions in every domain in the forest that contains the Exchange Enterprise Servers and Exchange Domain Servers groups, run the following command.
  setup /PrepareLegacyExchangePermissions.or setup /pl
- To prepare legacy Exchange permissions in a specific domain, run the following command.
  setup /PrepareLegacyExchangePermissions: < FQDN of domain you want to prepare > or setup /pl:<FQDN of domain you want to prepare>

Note:

You can skip this step and prepare the legacy Exchange permissions as part of Step 2 or Step 3. The advantages of running each step separately are that you can run each step with an account that has the minimum permissions required for that step, and you can verify completion, success, and replication before continuing to the next step.

Note the following:
- To run this command to prepare every domain in the forest, you must be a member of the Enterprise Admins group. To run this command to prepare a specific domain, or if the forest has only one domain, you must be delegated the Exchange Organization Management role, and you must be a member of the Domain Admins group in the domain that you will prepare.
- If you don't specify a domain, the domain in which you run this command must be able to contact all domains in the forest. If the server can't contact a domain that must have legacy Exchange permissions prepared, it prepares the domains that it can contact, and then returns an error message that it was unable to contact some domains.
- You can run this command from any 64-bit Windows Server 2003 SP1 server in the forest.
- You must run this command on a computer in the same domain and in the same Active Directory site as the schema master. Setup will make all configuration changes to the schema master to avoid conflicts because of replication latency. For information on how to identify the schema master, see Identify the schema master. To change site membership for the schema master:

5. For information on how to transfer

o After you run this command, you must wait for the permissions to replicate across your Exchange organization before continuing to the next step. If the permissions haven't replicated, the Recipient Update Service on your Exchange Server 2003 computers could fail. The amount of time that replication takes depends on your Active Directory site topology.

Note:

To track the progress of Active Directory replication, you can use the Active Directory Replication Monitor tool (replmon.exe), which is installed as part of the Microsoft Windows Server 2003 Support Tools Setup. By default, it's located at "%programfiles%\support tools\." Add your domain controllers as monitored servers so that you can track the progress of replication throughout the domain.

For detailed information about the permissions set by this command, see Preparing Legacy Exchange Permissions.

From a Command Prompt window, run the following command.
setup /PrepareSchema or setup /ps

Note:

You can skip this step and prepare the schema as part of Step 3.

Important:

You must not run this command in a forest in which you don't plan to run setup /PrepareAD. If you do, the forest will be configured incorrectly, and you won't be able to read some attributes on user objects.

Note:

It isn't supported to use the LDIF Directory Exchange tool (LDIFDE) to manually import the Exchange 2010 schema changes. You must use Setup to update the schema.

This command performs the following tasks:

o Connects to the schema master and imports LDAP Data Interchange Format (LDIF) files to update the schema with Exchange 2010 specific attributes. The LDIF files are copied to the Temp directory, and then deleted after they are imported into the schema.

o If you haven't completed Step 1, setup /PrepareSchema will automatically perform the PrepareLegacyExchangePermissions step.

Note the following:

o If you want to verify the updates to the schema before the changes are replicated to other servers in the domain, you must disable outbound replication on the computer on which you run the command before you run it, and then enable outbound replication after you have verified that the import completed successfully.

o To run this command, you must be a member of the Schema Admins group and the Enterprise Admins group.

o You must run this command on a 64-bit computer in the same domain and in the same Active Directory site as the schema master.

o If you haven't completed Step 1, setup /PrepareSchema will automatically perform the PrepareLegacyExchangePermissions step. To complete the PrepareLegacyExchangePermissions step, the domain in which you run this command must be able to contact all domains in the forest. The advantages of running each step separately are that you can run each step with an account that has the minimum permissions required for that step, and you can verify completion, success, and replication before continuing to the next step.

o If you use the /DomainController parameter with this command, you must specify the domain controller that is the schema master.

o After you run this command, you should wait for the changes to replicate across your Exchange organization before continuing to the next step. The amount of time this takes is dependent upon your Active Directory site topology.

Note:

To track the progress of Active Directory replication, you can use the Active Directory Replication Monitor tool (replmon.exe), which is installed as part of the Windows Server 2003 Support Tools Setup. By default, it's located at "%programfiles%\support tools\." Add your domain controllers as monitored servers so that you can track the progress of replication throughout the domain.

For more information, see Exchange Server Changes to the Active Directory Schema.

From a Command Prompt window, run the following command.
setup /PrepareAD [/OrganizationName: <organization name> ] or setup /p [/on:<organization name>]
This command performs the following tasks:

o If the Microsoft Exchange container doesn't exist, this command creates it under CN=Services,CN=Configuration,DC=<root domain>.

o If no Exchange organization container exists under CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=<root domain >, you must specify an organization name by using the /OrganizationName parameter. The organization container will be created with the name that you specify.
The Exchange organization name can contain only the following characters:
A through Z
a through z
0 through 9
Space (not leading or trailing)
Hyphen or dash
The organization name can't contain more than 64 characters. The organization name can't be blank. If the organization name contains spaces, you must enclose the name in quotation marks.

o Verifies that the schema has been updated and that the organization is up to date by checking the objectVersion property in Active Directory. The objectVersion property is in the CN=<your organization>, CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=<domain> container. The objectVersion value for the RTM version of Exchange Server 2007 is 10666.

o If they don't exist, creates the following containers and objects under CN=<Organization Name>,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=<root domain>. These are required for Exchange 2010.
CN=Address Lists Container,CN=<Organization Name>,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=<root domain>
CN=Addressing,CN=<Organization Name>,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=<root domain>
CN=Administrative Groups,CN=<Organization Name>,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=<root domain>
CN=Client Access,CN=<Organization Name>,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=<root domain>
CN=Connections,CN=<Organization Name>,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=<root domain>
CN=ELC Folders Container,CN=<Organization Name>,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=<root domain>
CN=ELC Mailbox Policies,CN=<Organization Name>,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=<root domain>
CN=Global Settings,CN=<Organization Name>,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=<root domain>
CN=Mobile Mailbox Policies,CN=<Organization Name>,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=<root domain>
CN=Recipient Policies,CN=<Organization Name>,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=<root domain>
CN=System Policies,CN=<Organization Name>,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=<root domain>
CN=Transport Settings,CN=<Organization Name>,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=<root domain>
CN=UM AutoAttendant,CN=<Organization Name>,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=<root domain>
CN=UM DialPlan,CN=<Organization Name>,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=<root domain>
CN=UM IPGateway Container,CN=<Organization Name>,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=<root domain>
CN=UM Mailbox Policies,CN=<Organization Name>,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=<root domain>

o If it doesn't exist, creates the default Accepted Domains entry, based on the forest root namespace, under CN=Transport Settings,CN=<Organization Name>,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=<root domain>.

o Assigns specific permissions throughout the configuration partition.

o Imports the Rights.ldf file. This adds the extended rights required for Exchange to install into Active Directory.

o Creates the Microsoft Exchange Security Groups organizational unit (OU) in the root domain of the forest and assigns specific permissions on this OU.

o Creates the following universal security groups (USGs) within the Microsoft Exchange Security Groups OU:
Exchange Organization Administrators
Exchange Recipient Administrators
Exchange Servers
Exchange View-Only Administrators
Exchange Public Folder Administrators (New in Exchange Server 2007 Service Pack 1)
ExchangeLegacyInterop

o Adds the new USGs that are within the Microsoft Exchange Security Groups OU to the otherWellKnownObjects attribute stored on the CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=<root domain> container.

o Creates the Unified Messaging Voice Originator contact in the Microsoft Exchange System Objects container of the root domain.

o Prepares the local domain for Exchange 2010. For information about what tasks are completed to prepare a domain, see Step 4.

Note the following:

o To run this command, you must be a member of the Enterprise Admins group.

o The computer where you run this command must be able to contact all domains in the forest on port 389.

o You must run this command on a computer in the same domain and in the same Active Directory site as the schema master. Setup will make all configuration changes to the schema master to avoid conflicts because of replication latency.

o If you haven't completed Step 1, setup /PrepareAD will automatically perform the PrepareLegacyExchangePermissions step. To complete the PrepareLegacyExchangePermissions step, the domain in which you run this command must be able to contact all domains in the forest. If you are also a member of the Schema Admins group, and if you haven't completed Step 2, setup /PrepareAD will automatically perform the PrepareSchema step. The advantages of running each step separately are that you can run each step with an account that has the minimum permissions required for that step, and you can verify completion, success, and replication before continuing to the next step.

Note:

To track the progress of Active Directory replication, you can use the Active Directory Replication Monitor tool (replmon.exe), which is installed as part of the Windows Server 2003 Support Tools Setup. By default, it is located at "%programfiles%\support tools\." Add your domain controllers as monitored servers so that you can track the progress of replication throughout the domain.

o To verify that this step completed successfully, make sure that there is a new OU in the root domain called Microsoft Exchange Security Groups. This OU should contain the following new Exchange USGs:
Exchange Organization Administrators
Exchange Recipient Administrators
Exchange View-Only Administrators
Exchange Servers
Exchange Public Folder Administrators (new in Exchange 2007 SP 1)
ExchangeLegacyInterop

From a Command Prompt window, run one of the following commands:

o Run setup /PrepareDomain or setup /pd to prepare the local domain. Note that you don't need to run this in the domain where you ran Step 3. Running setup /PrepareAD prepares the local domain.

o Run setup /PrepareDomain:<FQDN of domain you want to prepare> to prepare a specific domain.

o Run setup /PrepareAllDomains or setup /pad to prepare all domains in your organization.

These commands perform the following tasks:

o Sets permissions on the domain container for the Exchange Servers, Exchange Organization Administrators, Authenticated Users, and Exchange Mailbox Administrators.

o If this is a new organization, creates the Microsoft Exchange System Objects container in the root domain partition in Active Directory and sets permissions on this container for the Exchange Servers, Exchange Organization Administrators, and Authenticated Users. This container is used to store public folder proxy objects and Exchange-related system objects, such as the mailbox database's mailbox.

o Sets the objectVersion property in the Microsoft Exchange System Objects container under DC=<root domain>. This objectVersion property contains the version of domain preparation. The version for Exchange 2007 RTM is 10628.

o Creates a new domain global group in the current domain called Exchange Install Domain Servers. The command places this group in the Microsoft Exchange System Objects container. It also adds the Exchange Install Domain Servers group to the Exchange Servers USG in the root domain.

Note:

The Exchange Install Domain Servers group is used if you install Exchange 2010 in a child domain that is an Active Directory site other than the root domain. The creation of this group allows you to avoid installation errors if group memberships haven't replicated to the child domain.

o Assigns permissions at the domain level for the Exchange Servers USG and the Exchange Recipient Administrators USG.

Note the following:

o For domains that are in an Active Directory site other than the root domain, /PrepareDomain might fail with the following messages:
"PrepareDomain for domain <YourDomain> has partially completed. Because of the Active Directory site configuration, you must wait at least 15 minutes for replication to occur, and run PrepareDomain for <YourDomain> again."
"Active Directory operation failed on <YourServer>. This error is not retriable. Additional information: The specified group type is invalid.
Active Directory response: 00002141: SvcErr: DSID-031A0FC0, problem 5003 (WILL_NOT_PERFORM), data 0
The server cannot handle directory requests."
If you see these messages, wait for or force Active Directory replication between this domain and the root domain, and then run /PrepareDomain again.

o To run setup /PrepareAllDomains, you must be a member of the Enterprise Admins group.

o To run setup /PrepareDomain, if the domain that you are preparing existed before you ran setup /PrepareAD, you must be a member of the Domain Admins group in the domain. If the domain that you are preparing was created after you ran setup /PrepareAD, you must be a member of the Exchange Organization Administrators group, and you must be a member of the Domain Admins group in the domain.

o You must run this command in every domain in which you will install Exchange 2007. You must also run this command in every domain that will contain mail-enabled users, even if the domain doesn't have Exchange 2007 installed.

To verify that this step completed successfully, confirm the following:

o You have a new global group in the Microsoft Exchange System Objects container called Exchange Install Domain Servers.

Note:

To view the Microsoft Exchange System Objects container in Active Directory Users and Computers, on the View menu, click Advanced Features.

o The Exchange Install Domain Servers group is a member of the Exchange Servers USG in the root domain.

o On each domain controller in a domain in which you will install Exchange 2010, the Exchange Servers USG has permissions on the Domain Controller Security Policy\Local Policies\User Rights Assignment\Manage Auditing and Security Log policy.