Forum Discussion
Exchange CU14 changes in AD
Hi all, We see that Microsoft has released its latest CU that is CU14, our Org s getting updated from CU13 to CU14, the prereq here is, we will have to run the PrepareAD in order to proceed with the...
AnnTaeYoun
From what i understand, when we install Exchange, the first thing what Exchange does is it will create a list of containers and objects in AD, that got us thinking about the below listed questions:
What all AD Objects, groups, containers will be touched/modified which needs Enterprise Admin Rights beyond the "FullAccess" rights which we already have on the Exchange Org container
We noticed that the Setup file was trying to access "Audit Security Privilege" on the Domain Controllers, why and what changes it's trying to make in CU14
Any other changes, where /PrepareAD will touch the objects out of the Exchange Org container, if yes please share those, and what changes/modifications it's going to make to them and why
To add, this CU is doing some global updates which will require an Enterprise Admin account, we saw some Audit Security Policy logs in our DCs and hence this is touching something outside the Exchange container of which the Exchange accounts do not have permissions to do the job.