Microsoft KB Archive/328675

= XADM: Recipient Update Service Does Not Stamp Users, and Event IDs 8270 and 8315 Are Logged =

PSS ID Number: 328675

Article Last Modified on 4/5/2004

-

The information in this article applies to:


 * Microsoft Exchange 2000 Enterprise Server
 * Microsoft Exchange 2000 Server

-



This article was previously published under Q328675



SYMPTOMS
When you mailbox-enable Microsoft Windows 2000 domain accounts in Exchange 2000 Server, the Recipient Update Service may not stamp some user accounts with the e-mail address, and the following events are logged in the Application log of the Windows NT Event Viewer:

Event Type: Error

Event Source: MSExchangeAL

Event Category: (5)

Event ID: 8270

Date:

Time:

User: N/A

Computer:

Description:

LDAP returned the error [32] Insufficient Rights when importing the transaction dn: GUID= changetype: Modify showInAddressBook:add:CN=All Users,CN=All Address Lists,CN=Address Lists Container,CN=ORG... : CN=Default Global Address List,CN=All Global Address Lists,CN=Address Lists Cont... mail:UserName@domain.com textEncodedORAddress:c=us;a= ;p=ORG;o=SITE;s=FirstName;g=LastName; proxyAddresses:SMTP:UserName@domain.com : X400:c=us;a= ;p=ORG;o=Site;s=FirstName;g=LastName; : smtp:username@domain.com msExchPoliciesIncluded:add:{xxxxxxxx-xxxx-xxxxxxxx-xxxxxxxx},{xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx} msExchUserAccountControl:0 msExchALObjectVersion:137 objectGUID:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx - DC=domain,DC=com

For more information, click http://www.microsoft.com/contentredirect.asp

Event Type: Warning

Event Source: MSExchangeAL

Event Category: (1)

Event ID: 8315

Date:

Time:

User: N/A

Computer:

Description:

The service could not update the entry 'CN=username,CN=Users,DC=domain,DC=com' because inheritable permissions are not propagated to this object. The inheritable permissions may be disabled because the object belongs to a Windows 2000 administrative group or the inheritable permissions were disabled explicitly by an administrator. DC=serverdc,DC=domain,DC=com

For more information, click http://www.microsoft.com/contentredirect.asp



CAUSE
This issue may occur if the Recipient Update Service is not assigned the correct permissions to access the mailbox. This may be true if the Allow inheritable permissions from parent to propagate to this object check box on the Security tab in the user's Properties dialog box is not selected.



RESOLUTION
To resolve this issue, modify the properties of each affected user account to allow inheritable permissions. To do this, follow these steps:
 * 1) Click Start, point to Programs, point to Microsoft Exchange, and then click Active Directory Users and Computers.
 * 2) In the console tree, click Users.
 * 3) Right-click the user account, and then click Properties.
 * 4) Click the Security tab, and then click Advanced.
 * 5) Click to select the Allow inheritable permissions from parent to propagate to this object check box.
 * 6) Click OK.



MORE INFORMATION
For additional information about how to troubleshoot a similar event ID 8315 issue, click the following article number to view the article in the Microsoft Knowledge Base:

261185 XADM: Errors logged when Recipient Update Service cannot update certain user objects in the directory

For additional information about how to mailbox-enable users, click the following article number to view the article in the Microsoft Knowledge Base:

259709 XADM: How to mailbox-enable users after installing Exchange 2000 Server in a Windows 2000-Based domain

Additional query words: RUS

Keywords: kberrmsg kbprb KB328675

Technology: kbExchange2000EntServ kbExchange2000Search kbExchange2000Serv kbExchange2000ServSearch kbExchangeSearch

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© 2004 Microsoft Corporation. All rights reserved.