Microsoft KB Archive/297850

= XADM: ADC Does Not Populate msExchMasterAccountSID Attribute When It Matches a Cloned, Disabled Account =

Article ID: 297850

Article Last Modified on 2/20/2007

-

APPLIES TO


 * Microsoft Exchange 2000 Server Standard Edition

-



This article was previously published under Q297850



SYMPTOMS
If you use the Active Directory Connector (ADC) to populate the mail attributes of an existing, disabled Active Directory account, the ADC does not populate the msExchMasterAccountSID attribute. When the account is later enabled and used by an Exchange 2000 user, the user may be unable to access parts of the public folder hierarchy in Microsoft Exchange Server 5.5.

This problem could typically occur in an environment where Microsoft Windows NT 4.0 accounts are moved to Active Directory as disabled accounts (using a tool such as ADMT, or one written using the Windows ClonePrincipal function), and the migration of Exchange Server users is performed later.



RESOLUTION
To resolve this problem, obtain the latest service pack for Microsoft Exchange 2000 Server. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

301378 XGEN: How to Obtain the Latest Exchange 2000 Server Service Pack

The English version of this fix should have the following file attributes or later:

Component: Directory (ADC)



STATUS
Microsoft has confirmed that this is a problem in Microsoft Exchange 2000 Server. This problem was first corrected in Microsoft Exchange 2000 Server Service Pack 2.

Additional query words: msExchMasterAccountSID adc pf

Keywords: kbbug kbexchange2000presp1fix kbfix kbqfe KB297850

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.