-
Title
Directory synchronization is failing to mailbox-enable target objects in Exchange 2007 target org -
Description
Directory synchronization is failing to mailbox-enable objects. The following errors are reported in DSA log:
9/8/2008 8:46:49 AM (GMT-05:00) Common AcAdSwitches Can not find mail recipient policy!
9/8/2008 8:46:49 AM (GMT-05:00) Common AcAdSwitches Error 0xe1000005. Internal DSA error
9/8/2008 8:46:49 AM (GMT-05:00) COM AcAdSwitches Mailbox enabled objects -
Cause
This behavior is due to the new design of DSA supporting Exchange 2007 environments with no RUS (Recipient Update Service). During mailbox enabling of AD objects and writing Exchange attributes DSA needs to enumerate all recipient policies in Exchange organization and determine what objects they apply to. This information can be obtained by looking at the LDAP query value kept inside "purportedSearch" attribute of all recipient policies instances stored under CN=Recipient Policies,CN=<EXCHANGE ORG NAME>,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=<DOMAIN NAME>,DC=<NAME>.
-
Resolution
1. None of the target Exchange org recipient policies applied to the migrated object. Once filter on the policy was modified everything started to work fine.2. "mailNickname" attribute is skipped during directory synchronization. In this case none of Exchange 2007 Email policies would apply to such objects. Please ensure that "mailNickname" attribute is populated on the target objects. This can be achieved in a number of ways, for example using VB Script, ADModify etc.