Microsoft KB Archive/296112

= XADM: Cannot Use Organizational Unit or Location of an Account for Recipient Policy =

PSS ID Number: 296112

Article Last Modified on 7/11/2003

-

The information in this article applies to:


 * Microsoft Exchange 2000 Server

-



This article was previously published under Q296112



SYMPTOMS
If you try to configure a recipient policy using an Organizational Unit (OU) as part of the filter, the recipient policy is not applied to any of the users in that OU.

Using only the OU as a filter on a recipient policy results in the creation of the following filter rule for that recipient policy:

(&(ou>=&quot;&quot;)(name=myOU))

This filter locates a particular OU (or multiple OUs, depending on the filter that was created) but it does not locate objects that are contained within these OUs. In addition, there is no way to create an LDAP filter based on the OU to which that user account belongs. While the distinguishedName or canonicalName attributes do include the OU in which an account is contained, any LDP queries that are performed with these two attributes does not succeed. For example:

canonicalName=myDomain.com/MyOU/*)

and

(distinguishedName=*,OU=MyOU,DC=myDomain,DC=com)



RESOLUTION
To resolve this behavior, you can use the Logon Name attribute of users to enforce Recipient Policies as an alternative to the use of an OU. For more information about how to perform these steps, refer to the following Microsoft Web site, in the ASP deployment guide:

http://www.microsoft.com/serviceproviders/whitepapers/exchange_2000_ASP_deploykit.asp



MORE INFORMATION
For additional information, click the article numbers below to view the articles in the Microsoft Knowledge Base:

249299 XADM: How to Configure Recipient Policies in Exchange 2000

253838 XADM: How the Recipient Update Service Applies System Policies

285792 XADM: Error Message When You Change Recipient Policy

270111 XADM: Unable to Create Recipient Policy Based on X500 Distinguished Name

Keywords: kbprb KB296112

Technology: kbExchange2000Search kbExchange2000Serv kbExchange2000ServSearch kbExchangeSearch

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© 2004 Microsoft Corporation. All rights reserved.