Domain admin group membership: To create an AD user as the AD agent service account, you must be a member of the domain admin group.   

Local administrator privileges: If you’re using an existing user account to run as the service account, you only need local administrator privileges.   

Windows Server version: An Active Directory environment running Windows Server 2003 or later with the latest updates installed.   

Windows admin account: A Windows admin account with the “Log on as a service” permission enabled.   

Change monitoring and recovery: A system that monitors changes made in Active Directory and can quickly fix any errors.   

Exchange Server preparation: Before installing Exchange Server, you need to prepare your Active Directory forest and its domains.