Microsoft KB Archive/281607

= You May Be Unable to Log on to Exchange =

PSS ID Number: 281607

Article Last Modified on 10/9/2003

-

The information in this article applies to:


 * Microsoft Exchange Server 2003 Enterprise Edition
 * Microsoft Exchange Server 2003 Standard Edition
 * Microsoft Exchange 2000 Server
 * Microsoft Windows Small Business Server 2003, Premium Edition
 * Microsoft Windows Small Business Server 2003, Standard Edition

-



This article was previously published under Q281607



SYMPTOMS
You may be unable to log on to an Exchange server, and the following event may be logged in the Application log:

Event Type: Error

Event Source: MSExchangeIS

Event Category: General

Event ID: 9562

Date: May 12, 2000

Time: 5:12:20 P.M.

Description:

Failed to read attribute msExchUserAccountControl from Active Directory for /o= /ou=First Administrative Group/cn=Recipients/cn=.

For more information, click http://www.microsoft.com/contentredirect.asp.



CAUSE
This behavior can occur because the MSEXCHUserAccountControl attribute is not set, or it is set to the incorrect value.



RESOLUTION
To resolve this problem, rebuild the Recipient Update Service:
 * 1) Open the Exchange System Manager, and then expand Recipients.
 * 2) Click Recipient Update Service.
 * 3) In the right pane, right-click the Recipient Update Service for the domain that has the problem.
 * 4) On the drop-down menu, click Rebuild.
 * 5) Right-click the Recipient Update Service for the problem domain, and then click Update Now.

This procedure can start the process to reapply all of the mail attributes on the directory objects in the domain. This process may take several hours as it depends upon the size of the domain.

This process can reset the MSEXCHUserAccountControl attribute. When the process is finished, you can log on to Exchange 2000. However, if you cannot log on to Exchange 2000, you must troubleshoot the Recipient Update Service.

You can verify if the msExchangeUserAccountControl attribute is set properly by using the ADSI Edit utility:
 * 1) ADSI Edit is included in Windows 2000 Support Tools (on the Windows 2000 CD-ROM).WARNING: If you use the ADSI Edit snap-in, the LDP utility, or any other LDAP version 3 client, and you incorrectly modify the attributes of Active Directory objects, you can cause serious problems. These problems may require you to reinstall Microsoft Windows 2000 Server, Microsoft Exchange 2000 Server, or both. Microsoft cannot guarantee that problems that occur if you incorrectly modify Active Directory object attributes can be solved. Modify these attributes at your own risk.


 * 1) Set up the support tools with the Setup.exe program located in the \Suppport\Tools\Setup.exe folder.
 * 2) When you have installed the support tools, click Start, point to Programs, point to Windows 2000 Support Tools, click Tools, and then click ADSI Edit.
 * 3) When ADSI Edit starts, locate and expand the domain network computer (NC).
 * 4) Locate the domain that has the problem (for example, DC= ,DC=COM).
 * 5) Locate the Users container, and then click Properties for the user that has been experiencing the problem.
 * 6) Click Both in the Select which properties to view section, and then click MSExchangeUserAccountControl in the Select a property to view section.

If you still experience the problem, you must troubleshoot the Recipient Update Service to find out why its value remains &quot;not set&quot;.



MORE INFORMATION
For additional information about the function of the Recipient Update Service, click the article numbers below to view the articles in the Microsoft Knowledge Base:

253838 XADM: How the Recipient Update Service Applies System Policies

253828 XADM: How the Recipient Update Service Populates Address Lists

For additional information, click the article number below to view the article in the Microsoft Knowledge Base:

274119 Event ID 9562 Is Logged When You Try to Move a Mailbox

Additional query words: exch2kp2w XADM

Keywords: kbprb KB281607

Technology: kbExchange2000Search kbExchange2000Serv kbExchange2000ServSearch kbExchangeSearch kbExchangeServ2003Ent kbExchangeServ2003Search kbExchangeServ2003St kbSBServ2003Pre kbSBServ2003Search kbSBServ2003St kbSBServSearch

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© 2004 Microsoft Corporation. All rights reserved.