Phase 4: Preparing the Active Directory
To prepare for the installation of Active Directory, run the setup/forestprep command and the setup/domainprep command, and then create public folder connection agreements. After these steps have completed, run the OrgPrepCheck group of tools before you install Exchange Server 2003. This group of tools validates schema extensions, domains, and security descriptors.
The OrgPrepCheck group of tools runs the following tools:
• PolCheck: The PolCheck tool checks that all domain controllers in the local domain have the Manage auditing and security logs right for the Exchange Enterprise Servers group, and then reports any domain controllers that do not have this right.
• OrgCheck: The OrgCheck tool validates the schema extensions that are created by the forestprep command. The OrgCheck tool makes sure that the correct domain groups exist, that they are populated, and that the correct security descriptors are assigned. The OrgCheck tool confirms the following:
    That the Exchange configuration container exists.
    That a global catalog server is available in a domain that the domainprep command has already been run on.
    That a global catalog server is available in the same site as the Exchange Server 2003 computer or in a site     directory that is adjacent to the Exchange Server 2003 site.
• Netdiag: The Netdiag tool checks the network for problems such as Domain Name System (DNS) configuration issues.
• PubFoldCheck: The PubFoldCheck tool uses the Exchange Server 5.5 Directory Service/Information Store consistency adjuster to make sure that the directory and the information store are synchronized. Inconsistencies between the directory and the information store may occur when there is an entry for a public folder in the directory database that does not have a corresponding entry in the information store, or vice versa. The PubFoldCheck tool also removes unknown user accounts from public folder access control lists (ACL) in Exchange Server 5.5, and it filters all inconsistencies that are more than one day old.
To run the OrgPrepCheck group of tools, your account must have domain administrator permissions and rights to view objects in Active Directory, and you must have Exchange Server 5.5 administrator permissions and rights to view objects in the Exchange directory.

<< back