Damm you Sacl right ;-)

This is just for me ;-) to remind me AGAIN about these errors: 

Event Type: Error
Event Source: MSExchange ADAccess
Event Category: Topology
Event ID: 2114
Description:
Process MSEXCHANGEADTOPOLOGYSERVICE.EXE (PID=2908). Topology discovery failed, error 0x80040a02 (DSC_E_NO_SUITABLE_CDC). Look up the Lightweight Directory Access Protocol (LDAP) error code specified in the event description. To do this, use Microsoft Knowledge Base article 218185, “Microsoft LDAP Error Codes.” Use the information in that article to learn more about the cause and resolution to this error. Use the Ping or PathPing command-line tools to test network connectivity to local domain controllers.

Event Type: Error
Event Source: MSExchange ADAccess
Event Category: General
Event ID: 2501
Description:
Process MSEXCHANGEADTOPOLOGY (PID=2908). The site monitor API was unable to verify the site name for this Exchange computer – Call=HrSearch Error code=80040a01. Make sure that Exchange server is correctly registered on the DNS server.

 Event Type: Warning
Event Source: MSExchange ADAccess
Event Category: General
Event ID: 2601
Description:
Process MSEXCHANGEADTOPOLOGY (PID=2908). When initializing a remote procedure call (RPC) to the Microsoft Exchange Active Directory Topology service, Exchange could not retrieve the SID for account – Error code=80040a01.
 The Microsoft Exchange Active Directory Topology service will continue starting with limited permissions.

Event Type: Information
Event Source: MSExchange ADAccess
Event Category: Topology
Event ID: 2080
Description:
Process MSEXCHANGEADTOPOLOGYSERVICE.EXE (PID=2908). Exchange Active Directory Provider has discovered the following servers with the following characteristics:
 (Server name | Roles | Enabled | Reachability | Synchronized | GC capable | PDC | SACL right | Critical Data | Netlogon | OS Version)
In-site:
ds1.server.local CDG 1 7 7 1 0 0 1 7 1
dc2.server.local CDG 1 7 7 1 0 0 1 7 1
 Out-of-site:

Fix … add the server to the Exchange Servers Group and reboot the server

Exchange 2007 Installation

So this was kinda enlightening … the AD boys have setup for forest for me and schema / domain prepped too.

But when I went to Install Exchange I kept getting:

setup /mode:install /role:mt,mb,ca,ht

Welcome to Microsoft Exchange Server 2007 Unattended Setup

Preparing Exchange Setup

The following server roles will be installed
    Management Tools
    Hub Transport Role
    Client Access Role
    Mailbox Role

Performing Microsoft Exchange Server Prerequisite Check

    Organization Checks              ……………………. FAILED
     The Active Directory Schema must be modified and this user account has insufficient permissions. It must be a member of both the ‘Schema Admins’ and ‘Enterprise Admins’ groups.

     Global updates need to be made to Active Directory, and this user account is not a member of the ‘Enterprise Admins’ group.

     The local domain needs to be updated. You must be a member of the ‘Domain Admins’ and ‘Exchange Organization Administrators’ group, or ‘Enterprise Admins’ group to continue.

    Hub Transport Role Checks        ……………………. COMPLETED
 Setup cannot detect an SMTP or Send connector with an address space of ‘*’. Mail flow to the Internet may not work properly.
    Client Access Role Checks        ……………………. COMPLETED
    Mailbox Role Checks              ……………………. COMPLETED

The Exchange Server Setup operation did not complete. For more information, visit http://support.microsoft.com and enter the Error ID.

Exchange Server setup encountered an error.
 

WTF, i checked permissions and tried a milion and one different things before the penny dropped.  yeah you got it, the AD boys had use Exchange 2007 RTM and not SP1 ! … Doh!

The tell tail sign was the objectVersion on the Organization container in the Active Directory Configuration partition, it was set to 10666. 

After an SP1 forest prep I was still getting this:


setup /mode:install /role:mt,ca,ht,mb

Welcome to Microsoft Exchange Server 2007 Unattended Setup

Preparing Exchange Setup

The following server roles will be installed
    Management Tools
    Hub Transport Role
    Client Access Role
    Mailbox Role

Performing Microsoft Exchange Server Prerequisite Check

    Organization Checks              ……………………. FAILED
     Global updates need to be made to Active Directory, and this user account is not a member of the ‘Enterprise Admins’ group.

     The local domain needs to be updated. You must be a member of the ‘Domain Admins’ and ‘Exchange Organization Administrators’ group, or ‘Enterprise Admins’group to continue.

    Hub Transport Role Checks        ……………………. COMPLETED
 Setup cannot detect an SMTP or Send connector with an address space of ‘*’. Mail flow to the Internet may not work properly.
    Client Access Role Checks        ……………………. COMPLETED
    Mailbox Role Checks              ……………………. COMPLETED

The Exchange Server Setup operation did not complete. For more information, visit http://support.microsoft.com and enter the Error ID.

Exchange Server setup encountered an error.

Intersting, the objectVersion didn’t change to 11221 until the domain prep was run?!

Check this out for info on the objectVersion