Microsoft KB Archive/823781

= You receive the &quot;Exported-change-not-reimported&quot; error message when you configure a newly created user as a disabled user in Microsoft Identity Integration Server 2003 =

Article ID: 823781

Article Last Modified on 3/24/2004

-

APPLIES TO


 * Microsoft Identity Integration Server 2003 Enterprise Edition
 * Identity Integration Feature Pack for Microsoft Windows Server Active Directory

-





SYMPTOMS
When you export a new user account to the Active Directory directory service by using the Active Directory Management Agent (ADMA), and then you import changes to the Microsoft Identity Integration Server 2003 metaverse, you may receive the following status information:

Completed-warnings

Additionally, information that is similar to the following appears:



CAUSE
This issue may occur when you configure a newly created user as a disabled user by setting the constant value 514 in the userAccountControl attribute of the user account. This issue occurs because the user account object is waiting for confirmation that the constant value was set correctly in Active Directory. The object expects to import the same value that the object sent to Active Directory. However, because the value that is returned is 546 instead of 514, you receive the &quot;Exported-change-not-reimported&quot; error message.



MORE INFORMATION
The userAccountControl attribute is a special attribute. Active Directory assigns certain default values to this attribute when a new user is created. The values that are assigned depend on the user configuration that is created. By default, Active Directory disables a new user account unless a password is set for that account. In the scenario that is described in the &quot;Symptoms&quot; section of this article, you create a typical user account by assigning the following constant value to the userAccountControl attribute of that user account:

If you set this account to be a disabled user account, Active Directory automatically adds the &quot;No password is required&quot; ADS_PASSWD_NOTREQD constant to the userAccountControl attribute of this user account. The resultant value is 546 decimal, as illustrated by the entries in the following table:

To avoid this issue, Microsoft recommends that you set the constant value to 546 instead of to 514 for a disabled account. Both values disable the user account. If you use the 546 value, you do not receive the &quot;Exported-change-not-reimported&quot; error message because the imported value and the exported value match.

