When you try to install Microsoft Office Live Communications Server 2003, Setup stops responding (hangs) when it tries to start the Live Communication Server service (Rtcsrv.exe). Additionally, the following event appears in the system log in Event Viewer:

Event Source: Service Control Manager
Event Category: None
Event ID: 7024
Date: date
Time: time
Type: Error
User: N/A
Computer: servername
Description: The Live Communications Server service terminated with service-specific error 3228565511 (0xC0700007)..

If you try to start the Live Communications Server service by using the Services tool, you receive the following error message:

This behavior may occur if the Live Communications Server service cannot use the Authenticated Users security group to access the System and Builtin containers. If you remove the Authenticated Users access control entries (ACEs) from the System and Builtin containers (for example, by running the Securead.vbs script file in your domain), Live Communications Server cannot start.

If you cannot restore the Authenticated Users security group with the correct ACEs to the System and Builtin containers, you can resolve this issue by assigning the RTCHSDomainServices group permissions to these containers. Because the Live Communications Server service is a member of the RTCHSDomainServices group and of the Authenticated Users group, when you assign permissions for the RTCHSDomainServices group to the System and Builtin containers, the Live Communications Server installation can complete successfully.

To assign the RTCHSDomainServices group permissions to the System and Builtin containers, follow these steps:

Note If the RTCHSDomainServices group does not appear in the domain, see the Live Communications Server Deployment Guide for more information about how to create this group.

1. Assign the RTCHSDomainServices group Read or, at the minimum, Read All Properties permissions to the System container. To do so, follow these steps:
   1. Start Active Directory Users and Computers. To do so, click Start, click Run, type dsa.msc in the Open box, and then click OK.
   2. On the View menu, click Advanced Features.
   3. Under your domain, right-click System, and then click Properties.
   4. Click the Security tab, and then click RTCHSDomainServices (Domain\RTCHSDomainServices).
      
      If this group does not appear, add it. To do so, click Add, type Domain\RTCHSDomainServices, click Check Names, and then click OK.
   5. Take any one of the following actions:
      • To assign Read permissions, click to select the Read check box in the Allow column.
      • To assign Read All Properties permissions, click Advanced, click RTCHSDomainServices, click Edit, click to select the Read All Properties check box in the Allow column, and then click OK two times.
   6. Click OK.
2. Assign the RTCHSDomainServices group Read or, at the minimum,, Read All Properties permissions to the Builtin container. To do so, follow these steps:
   1. In Active Directory Users and Computers, right-click Builtin, and then click Properties.
   2. Click the Security tab, and then click RTCHSDomainServices (Domain\RTCHSDomainServices).
      
      If this group does not appear, add it. To do so, click Add, type Domain\RTCHSDomainServices, click Check Names, and then click OK.
   3. Take any one of the following actions:
      • To assign Read permissions, click to select the Read check box in the Allow column.
      • To assign Read All Properties permissions, click Advanced, click RTCHSDomainServices, click Edit, click to select the Read All Properties check box in the Allow column, and then click OK two times.
   4. Click OK.
3. Install Live Communications Server 2003.