XADM: Mailboxes Do Not Replicate with ADC Warning 8275 (293474)



The information in this article applies to:

  • Microsoft Exchange 2000 Server

This article was previously published under Q293474

SYMPTOMS

When you attempt to replicate mailboxes to Active Directory, the following Active Directory Connector (ADC) event is logged:

Event Type: Warning
Event Source: MSADC
Event Category: Replication
Event ID: 8275
Description:
ADC could not replicate "DN of Exchange Server 5.5 mailbox" to "DN of target object to be created" because the target object is not writable.(Connection Agreement #####)

CAUSE

This issue can occur if the Exchange Server 5.5 mailbox's primary Microsoft Windows NT account is in the forest but it is not in the domain that the ADC connection agreement is running in. One of the 'Mailbox to Account' mapping schemes used is the NT-SID. The ADC does a global catalog lookup and finds that the security identifier (SID) value exists in another domain, but the ADC cannot write to it. The ADC then generates the error message described in the preceding section. The following scenario is an example of this behavior:

There are two domains in the same forest, Domain A and Domain B. Exchange Server 5.5 exists in Domain A, and all of the primary Windows NT accounts that Exchange Server 5.5 uses exist in Domain A. An ADC is configured to replicate the Exchange Server 5.5 mailbox information to Domain B. However, replication fails.

The ADC does a global catalog lookup for the SIDs of the Exchange Server 5.5 mailboxes and finds the user accounts in Domain A. The ADC then tries to link them, but fails because the domain controller in Domain B has no writable replicas of objects in Domain A.

RESOLUTION

To resolve this issue, put the primary Windows NT accounts for the mailboxes in the destination domain, or create an ADC Recipient_CA to the domain in which the accounts exist.

STATUS

This behavior is by design.

Modification Type:MinorLast Reviewed:4/25/2005
Keywords:kbprb KB293474