XADM: ADC Cannot Replicate MsexchmasteraccountSID and Generates Event ID 8281 (297356)



The information in this article applies to:

  • Microsoft Exchange 2000 Server

This article was previously published under Q297356

SYMPTOMS

During Active Directory Connector (ADC) replication, the following warning may be logged in the application event log:
Event Type: Warning
Event Source: MSADC
Event Category: Replication
Event ID: 8281
Description:
ADC could not replicate the msExchMasterAccountSid to
CN=Brad H1,CN=Users,DC=NT4DOM1,DC=RCPDOM,DC=extest,DC=microsoft,DC=com
because this sid is already on the object
CN=t-bradh1,CN=Users,DC=NT4DOM1,DC=RCPDOM,DC=extest,DC=microsoft,DC=com. (Connection Agreement 'CDC-SITE1' #1444)

CAUSE

This behavior may occur if all of the following conditions are true:
  • The end point of the ADC Connection Agreement is not a global catalog server.

    -and-
  • The mailbox that you are replicating already has an existing Active Directory account.

    -and-
  • The mailbox's display name is different from the Active Directory account name.
The ADC renames the user object on the domain controller to the Microsoft Exchange Server 5.5 display name. However, when the uniqueness check for the master account SID is performed against the global catalog server, the name change has not been replicated to the global catalog server. An object with a different distinguished name is found with the same master account security identifier (SID), and therefore the warning is logged.

RESOLUTION

You can safely ignore this warning while you make sure that the two objects listed in the warning are the same object.

WORKAROUND

To work around this issue, modify the ADC Connection Agreement to point to the global catalog server.

MORE INFORMATION

For additional information about a similar issue, click the article number below to view the article in the Microsoft Knowledge Base:

309243 XADM: NTDSnoMatch Causes Active Directory Connector Event 8281 with Duplicate Security ID


Modification Type:MinorLast Reviewed:4/25/2005
Keywords:kberrmsg kbprb KB297356