Exchange domain servers group not found

[This topic is intended to address a specific issue called out by the Exchange Server Analyzer Tool. You should apply it only to systems that have had the Exchange Server Analyzer Tool run against them and are experiencing that specific issue. The Exchange Server Analyzer Tool, available as a free download, remotely collects configuration data from each server in the topology and automatically analyzes the data. The resulting report details important configuration issues, potential problems, and nondefault product settings. By following these recommendations, you can achieve better performance, scalability, reliability, and uptime. For more information about the tool or to download the latest versions, see "Microsoft Exchange Analyzers" at]  

Topic Last Modified: 2005-11-17

The Microsoft® Exchange Server Analyzer Tool queries the Active Directory® directory service to determine the value for the ntSecurityDescriptor attribute of the Microsoft Exchange System Objects object to determine which version of DomainPrep has been run in the domain.

There are two valid integers:

  • For Exchange 2000 Server, the ntSecurityDescriptor value is 4406.

  • For Exchange Server 2003, the ntSecurityDescriptor value is 6936.

If it is determined that either of the above versions of DomainPrep were used, the Exchange Server Analyzer queries Active Directory to determine the value of the objectGuid attribute of the Microsoft Exchange System Objects object to determine whether the Exchange Domain Servers group exists. If the Exchange Server Analyzer determines that this group does not exist, an error is displayed.

To resolve this error, run the final release version of Exchange 2000 Server DomainPrep or Exchange Server 2003 DomainPrep. The account you use to run DomainPrep must be a member of the Domain Admins security group in the local domain and a local computer administrator.

You must run DomainPrep in the following domains:

  • The root domain.

  • All domains that will contain Exchange 2000 Server or Exchange Server 2003 computers.

  • All domains that will contain Exchange 2000 Server or Exchange Server 2003 mailbox-enabled objects (such as users and groups), even if no Exchange servers will be installed in these domains.

  • All domains that will contain global catalog servers that Exchange directory access components may potentially use.

  • All domains that will contain Exchange 2000 Server or Exchange Server 2003 users and groups that you will use to manage your Exchange organization.

To run DomainPrep

  1. Insert the Exchange CD in your CD drive. You can run DomainPrep on any computer in the domain.

  2. At a command prompt, type <drive>:\setup\i386\setup /DomainPrep, where <drive> is your CD drive.

  3. On the Welcome to the Microsoft Exchange Installation Wizard page, click Next.

  4. On the License Agreement page, read the agreement. If you agree to the terms, click I agree, and then click Next.

  5. On the Product Identification page, type your 25-digit product key, and then click Next.

  6. On the Component Selection page, ensure that Action is set to DomainPrep. If not, click the drop-down arrow, and then click DomainPrep. Click Next.

  7. On the Completing the Microsoft Exchange Wizard page, click Finish.

For more information about running Exchange Server 2003 DomainPrep, see the Exchange 2003 Server Deployment Guide (

For more information about running Exchange 2000 Server DomainPrep, see "Microsoft Exchange 2000 Server Installation and Setup" (