Microsoft KB Archive/827619

= A Connection Agreement does not replicate data from Exchange 2000 Server to Exchange Server 5.5 =

Article ID: 827619

Article Last Modified on 2/1/2007

-

APPLIES TO


 * Microsoft Exchange Server 5.5 Standard Edition
 * Microsoft Exchange 2000 Server Standard Edition

-





SYMPTOMS
When you replicate data between a computer that is running Microsoft Exchange 2000 Server and a computer that is running Microsoft Exchange Server 5.5 by using an Active Directory Connector (ADC) Connection Agreement, you experience the following symptoms:
 * Replication works from the Exchange 5.5 computer to the Exchange 2000 computer.
 * Replication does not work from the Exchange 2000 computer to the Exchange 5.5 computer.

No events are logged in the application event log.



CAUSE
This behavior occurs if the organizational unit or the objects that are contained in the organizational unit are Microsoft Active Directory directory service objects that contain an explicit Deny access control entry (ACE). By default, Active Directory objects that contain an explicit Deny access control entry are not replicated to the Exchange directory because Deny permissions are not represented for objects in the Exchange directory.



WORKAROUND
To work around this behavior, configure the ADC Connection Agreement to replicate Active Directory objects that contain an explicit Deny access control entry to the Exchange directory. To do so, follow these steps:
 * 1) Click Start, point to Programs, point to Administrative Tools, and then click Active Directory Connector.
 * 2) In the right pane, double-click the Connection Agreement that you want to configure.
 * 3) Click the From Windows tab, and then click to select the Replicate secured Active Directory objects to the Exchange Directory check box.

