msExchRequireAuthToSendTo

[Eugen]

GoodDay,
I am facing with a strange issue ref msExchRequireAuthToSendTo attribute. I
have no idea why and how can i fix it.
So, this is the situation:
--one DC and one Exchange Server.
--i ran ActiveDirectory Users&Computers(ADUC) to check security settings of
one user.
When i check Effective Permissions for one Domain Admin against that user on
DC I see checked ONLY Read msExchRequireAuthToSendTo, when i am doing same
thing on Exchange Server, I see also checked Write msExchRequireAuthToSendTo.
So, I am wondering why there is no consistency between ADUC on these two
servers....
Does anybody know why?
Thanks

[Rich Matheisen [MVP]]

Eugen <meu...@mymail.ro> wrote:

That's just a property in the AD. It's nothing to do with Exchange. If
you have inconsistent results between the two DCs than verify that
you've either waited long enough for the replication between the two
DCs to finish, or correct the replication problem between the two DCs.

--
Rich Matheisen
MCSE+I, Exchange MVP
MS Exchange FAQ at http://www.swinc.com/resource/exch_faq.htm
Don't send mail to this address mailto:h.p...@getronics.com
Or to these, either: mailto:h.p...@pinkroccade.com mailto:melvin.mcp...@getronics.com mailto:melvin.mcp...@pinkroccade.com

[Eugen]

Well, The idea is that i have this situation on all DCs and on all Exchange
servers. So there is nothing to do with replication, because even if i am
looking at one DC in central location or in any remote location DC, situation
is similar.
The problem started after i saw that an Exchange Admin is not able to set
Delivery Restrictions, because is getting a LDAP Error:
"
Facility: LDAP Provider
ID no: 8007005
Microsoft Active Directory - Exchange Extension
"
So, i checked if Exchange Admin has enough rights to do this and i saw that
inconsistency.
Many Thanks,

[Rich Matheisen [MVP]]

Eugen <meu...@mymail.ro> wrote:

>Well, The idea is that i have this situation on all DCs and on all Exchange
>servers.

You said you had ONE DC and ONE Exchange server. Has that changed?

>So there is nothing to do with replication, because even if i am
>looking at one DC in central location or in any remote location DC, situation
>is similar.

So, you run ADUC from different machines, logged in with the same
user-id, connect explicitly to the the identical DC every time, and
see different results? That's still not an Exchange problem, but it
sure is strange!

>The problem started after i saw that an Exchange Admin is not able to set
>Delivery Restrictions, because is getting a LDAP Error:
>"
>Facility: LDAP Provider
>ID no: 8007005
>Microsoft Active Directory - Exchange Extension
>"

That's a symptom, not the problem.

>So, i checked if Exchange Admin has enough rights to do this and i saw that
>inconsistency.

If you see different permissions on the same instance of an object
when viewed from different machines then it's time to engage PSS.