SYMPTOMS
If you try to install Exchange 2000 Server Service Pack 1 (SP1), you may receive the following error message:
You must be at least an Exchange Administrator at the Administrative Group level to run update. You must use an account that has been granted the Exchange Administrator role on the current administrative group, or a higher-level role, using the Exchange Administrative Delegation Wizard.
The Exchange 2000 Server Setup Progress.log file may also contain the following entries:
Prerequisites for Microsoft Exchange Forest Preparation failed: The component "Microsoft Exchange Forest Preparation" cannot be assigned the action "Update" because:
- You must be at least an Exchange Administrator at the Administrative Group level to run update. You must use an account that has been granted the Exchange Administrator role on the current administrative group, or a higher-level role, using the Exchange Administrative Delegation Wizard.
Prerequisites for Microsoft Exchange Domain Preparation failed: The component "Microsoft Exchange Forest Preparation" cannot be assigned the action "Update" because:
- You must be at least an Exchange Administrator at the Administrative Group level to run update. You must use an account that has been granted the Exchange Administrator role on the current administrative group, or a higher-level role, using the Exchange Administrative Delegation Wizard.
The last entry is:
CComBOIFacesFactory::QueryInterface (N:\admin\src\udog\BO\bofactory.cxx:54) Error code 0X80004002 (16386): No interface.
The Exchange 2000 Server Setup Progress.log file contains the following information:
Entering ScGetExistingOrgName
Leaving ScGetExistingOrgName
Found the organization " Organization Name"
Checking read permissions on the org: "/dc=com/dc=Organization/cn=Configuration/cn=Services/cn=Microsoft Exchange/cn=Organization Name, Inc./cn=Administrative Groups"
Checking write/security permissions on the org: "/dc=com/dc=Organization/cn=Configuration/cn=Services/cn=Microsoft Exchange/cn=Organization Name, Inc."
Looking for an existing server object
Found existing server object: "/dc=com/dc=Organization/cn=Configuration/cn=Services/cn=Microsoft Exchange/cn=Organization Name, Inc./cn=Administrative Groups/cn=First Administrative Group/cn=Servers/cn=SERVERNAME"
Checking permissions on the admin group: "/dc=com/dc=Organization/cn=Configuration/cn=Services/cn=Microsoft Exchange/cn=Organization Name, Inc. /cn=Administrative Groups/cn=First Administrative Group"
Final set of permissions: 0XF0C00000
CAUSE
This issue may occur if the organization name object in the Active Directory directory service contains characters that are not valid. This can occur if either of the following conditions is true:
- A Release Candidate or pre-release version of Microsoft Exchange 2000 Server was the first installation of Exchange 2000 in your production environment.
- The Exchange organization object was renamed in Active Directory after the Exchange 2000 Setup program or the /forestprep command was run.
Exchange 2000 does not support certain characters either in organization names or in administrative group names.
For additional information, click the following article number to view the article in the Microsoft Knowledge Base:
289671
Invalid character error occurs when you upgrade or join an Exchange Server 5.5 site
Characters that are not supported include:
- tilde (~)
- grave accent (`)
- exclamation point (!)
- at sign (@)
- number sign (#)
- dollar sign ($)
- percent (%)
- caret (^)
- ampersand (&)
- asterisk (*)
- parentheses (())
- underscore (_)
- plus sign (+)
- equal sign (=)
- braces ({})
- brackets ([])
- backslash (\)
- colon (:)
- semicolon (;)
- quotation marks (")
- single quotation marks (')
- angle brackets (< >)
- comma (,)
- period (.)
- question mark (?)
- slash mark (/)
The only acceptable characters are:
- Uppercase letters from A through Z
- Lowercase letters from a through z
- Numbers from 0 through 9
- Space ( )
- Hyphen (-)
RESOLUTION
If a Microsoft Exchange 2000 Server Release Candidate version was installed into your production environment, or if the Exchange organization object was renamed in Active Directory, you must uninstall all Exchange computers, delete the Exchange organization object in Active Directory, and then reinstall the release version of Exchange 2000 Server.
For additional information about how to delete the Exchange organization object from Active Directory, click the following article number to view the article in the Microsoft Knowledge Base:
273478
How to completely remove Exchange 2000 or Exchange 2003 from Active Directory
If Exchange Server 5.5 computers are still present in your organization, you may have to apply the changes that are described in the following Knowledge Base article before you reinstall Exchange 2000 Server:
289671 Invalid character error occurs when you upgrade or join an Exchange Server 5.5 site