DPS Service fails to start: Error 5: Access is Denied

I am in hell with a migration from SBS 2003 to SBS 2011.  The SBS Setup fails at Exchange Mailbox Role.  I have tried reinstalling 4 times now.  The 2011 Migration tool completes successfuly.  What appears to be the problem is that built-in service accounts do not have the correct permissions to system folders and registry keys for them to start.  Sometimes the service has the wrong account associated with it.  what I have been doing for some days now is going though all the failed services (est: around 20) and fixing the permissions on these.  I am however struggling with the last 2 - error s as below:

Diagnostic Policy Service: Error 5: Access is Denied.
Windows Internal Database (Microsoft##SSEE): Error Code 3417

I have fixed the Event Log, DHCP Server Service,  RDP, UPnP, SSDP Discovery, Many Exchange Services, BITS etc by searching the web, and also looking at other SBS 2011 installs I have completed and mirroring the permissions.  These last two I am stuck at however.  If anyone has any ideas please help.

I have followed the guides furtherly and had prepared the existing domain well.  Everything from the client side is still working well on the old Windows 2003 Servers (3 DC's and 2 Exchange - all 2003) however I can't believe so many services have failed because built-in accounts cannot access the resources they are there to service.  Everything in AD tests fine!