What permissions are required to install Exchange 2000 Server service packs?
For Exchange 2000 Service Pack 2 (SP2) and SP1, Microsoft Exchange Administrator rights are sufficient. Beginning with SP3, though, you can install service packs only with an account that has Exchange Full Administrator rights on the Exchange organization or on the administrative group (AG) that contains the target server. The reason for the permissions change is that Microsoft made an SP3 security change that limits access to Microsoft IIS's metabase; installing the changed code requires Full Administrator privileges. Some exceptions exist. If you're installing SP3 on a machine running only Exchange System Manager (ESM), you need local administrative rights. On a clustered installation, you need Exchange Full Administrator rights on the Exchange organization. If you're putting SP3 on a Key Management Server (KMS) machine, you need Exchange Full Administrator and Enterprise Administrator rights.
