Global updates required

[This topic is intended to address a specific issue called out by the Exchange Server Analyzer Tool. You should apply it only to systems that have had the Exchange Server Analyzer Tool run against them and are experiencing that specific issue. The Exchange Server Analyzer Tool, available as a free download, remotely collects configuration data from each server in the topology and automatically analyzes the data. The resulting report details important configuration issues, potential problems, and nondefault product settings. By following these recommendations, you can achieve better performance, scalability, reliability, and uptime. For more information about the tool or to download the latest versions, see "Microsoft Exchange Analyzers" at]  

Topic Last Modified: 2006-09-19

Microsoft® Exchange Server 2007 setup cannot continue because the logged on user does not have the account permissions that are required to make Global updates to the Active Directory® directory service.

Microsoft Exchange setup requires that the user who is logged on when Exchange 2007 is installed has Enterprise Administrator administrative credentials.

As part of the installation process, Exchange 2007 setup may have to do the following:

  • Create or modify Exchange organization objects in the Active Directory directory service

  • Prepare all domains in the Active Directory forest for Exchange 2007.

  • Prepare the existing Exchange 2000 Server and Exchange Server 2003 domains for Exchange 2007.

To resolve this issue, grant the logged on user Enterprise Administrator permissions, or log on with an account that has those permissions and rerun Exchange 2007 setup.

For more information about Active Directory permissions needed with Exchange, see "Working with Active Directory Permissions in Exchange Server" (