PSS ID Number: 297124
Article Last Modified on 6/5/2003
The information in this article applies to:
- Microsoft Exchange 2000 Server
This article was previously published under Q297124
SYMPTOMS
When you create a new mailbox-enabled user in Active Directory Users and Computers, you may notice that they are not being stamped by the Recipient Update Service.
If you use either the Update Now or the Rebuild option of the Recipient Update Service, the users are still not stamped with e-mail addresses from your Recipient Policy and no errors are logged.
CAUSE
One possible cause of this behavior is if the Recipient Update Service does not have appropriate rights to that mailbox or to the Organizational Unit (OU) in which this user account resides, which may occur if the Allow inheritable permissions from parent to propagate to this object check box is not selected.
RESOLUTION
To resolve this behavior, use either Active Directory Users and Computers or ADSI Edit to check the permissions:
In Active Directory Users and Computers
- In Active Directory Users and Computers, on the View menu, and then click Advanced Features.
- Right-click on the container or OU that contains the users that are not being stamped by the Recipient Update Service, and then click Properties.
- On the Security tab, verify that the Allow inheritable permissions from parent to propagate to this object check box is selected. This options adds Exchange Enterprise Servers to the list of accounts that have rights to that object.
- Verify that this box is selected at the container level, and also in the user properties. To check the properties of the individual users, right-click the user, click Properties, and click the Security tab.
In ADSI Edit
WARNING: If you use the ADSI Edit snap-in, the LDP utility, or any other LDAP version 3 client and incorrectly modify the attributes of Active Directory objects, you can cause serious problems that may require you to reinstall Microsoft Windows 2000 Server and/or Microsoft Exchange 2000 Server. Microsoft cannot guarantee that problems resulting from the incorrect modification of Active Directory object attributes can be solved. Modify these attributes at your own risk.
- Click Start, point to Programs, point to Windows 2000 Support Tools, and then click ADSI Edit.
- In ADSI Edit, expand the domain tree, and then expand the OU or container in which the user that is not getting stamped resides.
- Right-click the container or OU, and then click Properties.
- On the Security tab, verify that the Allow inheritable permissions from parent to propagate to this object check box is selected. This option adds Exchange Enterprise Servers to the list of accounts that have rights to that object.
- Verify that this box is selected on all of the individual users within that container. If Exchange Enterprise Servers does not have proper rights, the Recipient Update Service will not stamp the mailboxes. To check the properties of the individual users, right-click the user, click Properties, and then click the Security tab.
- Open Exchange System Manager (ESM), expand Recipients, and then click Recipient Update Service.
- Right-click the Recipient Update Service for the domain in which these users are located, and then click Update Now. The Recipient Update Service should now have sufficient rights to stamp these objects.
Additional query words: RUS
Keywords: kbprb KB297124
Technology: kbExchange2000Search kbExchange2000Serv kbExchange2000ServSearch kbExchangeSearch
