Unanswered Impossible to install Exchange 2010 SP1

  • Monday, September 06, 2010 11:11 AM
     
     
    Hello

    I'm stuck with this error concerning permissions on deleted objects.

    Here is the log



    [09/06/2010 11:02:53.0356] [1] [ERROR] The following error was generated when "$error.Clear();
              if ($RolePrepareAllDomains)
              {
                  initialize-DomainPermissions -AllDomains:$true -CreateTenantRoot:($RoleIsDatacenter -or $RoleIsPartnerHosted);
              }
              elseif ($RoleDomain -ne $null)
              {
                  initialize-DomainPermissions -Domain $RoleDomain -CreateTenantRoot:($RoleIsDatacenter -or $RoleIsPartnerHosted);
              }
              else
              {
                  initialize-DomainPermissions -CreateTenantRoot:($RoleIsDatacenter -or $RoleIsPartnerHosted);
              }
            " was run: "You don't have permissions to read the security descriptor on CN=Deleted Objects,DC=XXX,DC=XXX,DC=XXX.".
    [09/06/2010 11:02:53.0356] [1] [ERROR] You don't have permissions to read the security descriptor on CN=Deleted Objects,DC=XXX,DC=XXX,DC=XXX.
    [09/06/2010 11:02:53.0356] [1] [ERROR-REFERENCE] Id=DomainGlobalConfig___27a706ffe123425f9ee60cb02b930e81 Component=EXCHANGE14:\Current\Release\Shared\Datacenter\Setup
    [09/06/2010 11:02:53.0357] [1] Setup is stopping now because of one or more critical errors.
    [09/06/2010 11:02:53.0357] [1] Finished executing component tasks.
    [09/06/2010 11:02:53.0446] [1] Ending processing Install-ExchangeOrganization

All Replies

  • Monday, September 06, 2010 3:42 PM
     
     

    Hi,

    did you delete a Exchange Server manualy in Active Directory? (ADSI Edit)

    Then I think you have to call MS to correct multible objects and pointer in the Active Directory.

    Regards Andy

  • Monday, September 06, 2010 8:24 PM
     
     
    No never Thank you anyway
  • Thursday, September 09, 2010 10:30 AM
     
     

    Hi Stanthewi,

    Which account do you use to deploy the exchange 2010, does it has full permission?
    Per your information, I would suggest that:
    1. Firstly you could remove the exchange 2010 manually, if it is a test scenario.
    2. And then add "CN=Deleted Objects,DC=xxx,DC=xxx" in LDP and assigned Builtin\Administrators the "Read Permission" on the CN=Deleted Objects container.
    Please follow it, and make a test.

    Regards!
    Gavin