Insufficient Permissions to Run /PrepareDomain

[This topic is intended to address a specific issue called out by the Exchange Server Analyzer Tool. You should apply it only to systems that have had the Exchange Server Analyzer Tool run against them and are experiencing that specific issue. The Exchange Server Analyzer Tool, available as a free download, remotely collects configuration data from each server in the topology and automatically analyzes the data. The resulting report details important configuration issues, potential problems, and nondefault product settings. By following these recommendations, you can achieve better performance, scalability, reliability, and uptime. For more information about the tool or to download the latest versions, see "Microsoft Exchange Analyzers" at]  

Topic Last Modified: 2008-10-09

Microsoft Exchange Server 2007 setup cannot continue because the attempt to run the /PrepareDomain process failed. The logged on user has insufficient permissions to perform the /PrepareDomain process.

Exchange 2007 setup requires that the user who is logged on when running the /PrepareDomain process be a member of the Domain Admins group for the domain to be prepared, and a member of the Enterprise Admins group.

To resolve this issue, grant the logged-on user Domain Admins group permissions for the domain being prepared and enroll them in the Enterprise Admins groups, or log on with an account that has those permissions and rerun Exchange 2007 setup.

For more information about Active Directory permissions that are needed with Microsoft Exchange, see "Working with Active Directory Permissions in Exchange Server" (