Directory Access Tab in Exchange doesn’t list all DC’s and GC's
Hi I have an exchange server 2003 with the latest patch and updates and recently set up a new domain controller (windows server 2003 r2 set up also a GC). I'm wonderring how to automatically List all the DC's on the Exchange Directory tab, currently it is only pointing to my old domain controller (windows server 2000). Any help would be appreciated.
August 14th, 2009 7:21am

Hope you have rebooted the DC/GC after full replication was completed, Exchange will identify new DC/GC once it is rebooted. If you still don't see, can you post the event log 2080 here to understand why it is not being detected by Exchange automatically? Amit Tank | MVP Exchange Server | MCITP: EMA | MCSA: M | http://ExchangeShare.WordPress.com
Free Windows Admin Tool Kit Click here and download it now
August 14th, 2009 11:03am

Hi, Thanks for the reply. I already rebooted the DC/GC server and still nothing happens. below are the event log 2080 results as requested. In-site: new domain1.domain.com CDG 7 7 1 0 0 1 7 1 Out-of-site: new domain2.domain.com CDG 7 7 1 0 0 1 7 1 new domain3.domain.com CDG 7 7 1 0 0 1 7 1 old domain1.domain.com CDG 7 7 1 0 1 1 7 1 I notice that my old GC/DC (old domain1.domain.com) is different. any Idea to resolve myproblem will be much appreciated.
August 14th, 2009 3:01pm

First thing, check managed auditing and security log as per below procedure and verify the groups. Open theDefault Domain Controllers Security Settingssnap-in on the domain controller specified in the event description. In the console tree, underSecurity Settings, expandLocal Policies, and then clickUser Rights Assignments. In the results pane, double-clickManage auditing and security log. Verify that both theExchange Serversgroup and theExchange Enterprise Serversgroup are listed. If first one doesn't solve the issue, verify that the Exchange server is still a member of the Exchange Domain Servers group. Also, make sure that the Exchange Domain Servers group is a member of Exchange Enterprise Servers group. If above two points doesn't solve issue then go for the procedure explained in below thread http://social.technet.microsoft.com/Forums/en-US/exchangesvrgeneral/thread/4cfab637-4d82-4c03-9362-5fa11777c70d/ Amit Tank | MVP Exchange Server | MCITP: EMA | MCSA: M | http://ExchangeShare.WordPress.com
Free Windows Admin Tool Kit Click here and download it now
August 14th, 2009 3:24pm

I had to run the /domainprep on the new DC when i had this issue in order to show them up in DSACCESS tabVinod |CCNA|MCSE 2003 +Messaging|MCTS|ITIL V3|
August 14th, 2009 6:57pm

I had to run the /domainprep on the new DC when i had this issue in order to show them up in DSACCESS tab Vinod |CCNA|MCSE 2003 +Messaging|MCTS|ITIL V3| That verifies internally same and corrects if required... :)Amit Tank | MVP Exchange Server | MCITP: EMA | MCSA: M | http://ExchangeShare.WordPress.com
Free Windows Admin Tool Kit Click here and download it now
August 14th, 2009 7:06pm

LOL... thanks for the info man.Vinod |CCNA|MCSE 2003 +Messaging|MCTS|ITIL V3|
August 14th, 2009 7:27pm

Thanks vinod and amit.. I will do that however do I need to restart the exchange server after the /domainprep on the new DC to show up on the access tab.
Free Windows Admin Tool Kit Click here and download it now
August 15th, 2009 8:26am

Restart the SA once so that the DSACCESS module can load and catch up the information about new DCVinod |CCNA|MCSE 2003 +Messaging|MCTS|ITIL V3|
August 15th, 2009 8:44am

Thanks , I will check on that. I was hoping that I couldn't restart the Exchange Server for it is currently working on live environment.
Free Windows Admin Tool Kit Click here and download it now
August 15th, 2009 11:56am

If you dont want to restart exchange services that is fine. because DSACCESS updates every 15 min or so i dont remember the exact figure and can pull the information from AD. Once you run the /domainprep then make sure you replicate the information between your DC's and GC's using DSSITE.MSC snapin. Vinod |CCNA|MCSE 2003 +Messaging|MCTS|ITIL V3|
August 15th, 2009 12:02pm

Thanks , I will check on that. I was hoping that I couldn't restart the Exchange Server for it is currently working on live environment. First, I would suggest you to check for Manage auditing and security log and proper group membership I explained earlier and wait for 15 mins to refresh ADAccess. If it doesn't help then only go for DomainPrep...Amit Tank | MVP Exchange Server | MCITP: EMA | MCSA: M | http://ExchangeShare.WordPress.com
Free Windows Admin Tool Kit Click here and download it now
August 15th, 2009 12:19pm

Thanks Amit However, I cannot locate the Default Domain Controllers Security Settings snap-in as I cannot follow the procedure below. First thing, check managed auditing and security log as per below procedure and verify the groups. Open theDefault Domain Controllers Security Settings snap-in on the domain controller specified in the event description. In the console tree, underSecurity Settings , expandLocal Policies , and then clickUser Rights Assignments . In the results pane, double-clickManage auditing and security log . Verify that both theExchange Servers group and theExchange Enterprise Servers group are listed. If first one doesn't solve the issue, verify that the Exchange server is still a member of the Exchange Domain Servers group. Also, make sure that the Exchange Domain Servers group is a member of Exchange Enterprise Servers group. Thank you very much for your immediate response.
August 15th, 2009 12:38pm

You can find it on any of the DC. Preferably on old DC.Amit Tank | MVP Exchange Server | MCITP: EMA | MCSA: M | http://ExchangeShare.WordPress.com
Free Windows Admin Tool Kit Click here and download it now
August 15th, 2009 12:47pm

Hi,You cantype RSOP.msc from a command prompt on DC to open Resultant Set of Policy to check if Exchange Servers/Exchange Enterprise Servergruop has been added.If not,then you can open ADUC and then right click on the DC name and select properties ->Group Policy-Edit.There we can find Default Domain Policy and Default Domain Controller Policy.Also please check if which policy has been linked to domain.Besides,I recommned you to use GPMC to edit domian policy.Group Policy Management Console with Service Pack 1http://www.microsoft.com/DOWNLOADS/details.aspx?FamilyID=0a6d4c24-8cbd-4b35-9272-dd3cbfc81887&displaylang=enEvent ID 2080 from MSExchangeDSAccesshttp://support.microsoft.com/kb/316300Regards,Xiu
August 17th, 2009 9:47am

Hi, Thank you all for the replies you've been very helpfull guys, After running the /domainprep my new GC/DC is now showing up in DSACCESS tab after 15 minutes, I can now add my other GC/DC withour any downtime. I wonder why my old GC/DC (windows server 2000) didn't anymore show up after the /domainprep in the new GC/DC(windows server 2003 r2). Cheers, Gerald
Free Windows Admin Tool Kit Click here and download it now
August 17th, 2009 10:41am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics