You must have the following permissions to successfully run the Exchange Mail Flow Troubleshooter.

• Domain Administrator, or a member of the Builtin\Administrators group on the Active Directory server, for enumerating Active Directory information and calling the Microsoft Windows Management Instrumentation (WMI) providers on domain controller and global catalog servers.
  
  
• Member of Local Administrators group on each Exchange server for calling the WMI providers and accessing the registry and metabase.
  
  
• Delegated at least Exchange View Only permissions on the Exchange organization.
  
  

If you log on to the computer where you will run the Exchange Mail Flow Troubleshooter with an account that does not have sufficient permissions, you must set the credentials for the accounts you will use on the Enter Server and User Information page in the tool. Click Show advanced logon options to expand the options. You can enter only one account. Therefore, make sure that account has all the required permissions.

Concepts