XADM: Mailboxes Do Not Have Trust Level When Created in Active Directory (291944)



The information in this article applies to:

  • Microsoft Exchange 2000 Server

This article was previously published under Q291944

SYMPTOMS

This article applies to scenarios where you are running the Active Directory Connector (ADC) with a two-way connection agreement between Exchange 2000 and Microsoft Windows 2000, or a one-way connection agreement from Windows 2000 to Exchange 2000.

When you use Active Directory Users and Computers to create a mailbox, the Trust Level attribute is not set on the user in Active Directory. When the ADC replicates the mailbox from Active Directory to Microsoft Exchange Server 5.5, the Trust Level attribute is also not set on the object that is created by the ADC in the Exchange Server 5.5 directory.

This issue does not occur when you create an object using the Exchange Server 5.5 Administrator program. In this case, the Trust Level attribute is correctly set to the default value of 20.

CAUSE

In Active Directory, the Trust Level attribute is no longer used to control replication for Exchange 2000 objects.

RESOLUTION

To resolve this problem, obtain the latest service pack for Microsoft Exchange 2000 Server. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

301378 XGEN: How to Obtain the Latest Exchange 2000 Server Service Pack

The English version of this fix should have the following file attributes or later:

Component: ADC

File nameVersion
Adc.exe6.0.4418.73

STATUS

Microsoft has confirmed that this is a problem in Microsoft Exchange 2000 Server. This problem was first corrected in Microsoft Exchange 2000 Server Service Pack 1.

MORE INFORMATION

The Trust Level attribute, also called replicationSensitivity, is used in Exchange Server 5.5 by some mail connectors to determine which objects are permitted to replicate to the foreign system.

After you apply this fix, the ADC sets the Trust Level attribute to a default value of 20 on any new objects that it creates in the Exchange Server 5.5 directory. You can change this value by setting the following DWORD value in the registry:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSADC\Paramaters\Replication-Sensitivity

The value type is DWORD, and it can have value from 0 to 100.

Modification Type:MinorLast Reviewed:6/6/2003
Keywords:kbbug kbExchange2000preSP1fix kbfix KB291944