Setup: Exchange 2007 SP1 on a single Windows server 2003 SP2 . Domain controller is saturn.falmouth.local A problem has recently arisen whereby I am unable to create a new distribution list from either the Exchange management console or mangement shell. The system was working perfectly until about a few weeks ago. The error message when trying to create a universal distribution list called 'Extended Services' is as follows: Extended ServicesFailed Error:Active Directory operation failed on saturn.falmouth.local. This error is not retriable. Additional information: An attempt was made to modify an object to include an attribute that is not legal for its class.Active directory response: 0000207D: UpdErr: DSID-03150F9C, problem 6002 (OBJ_CLASS_VIOLATION), data 0 An object class violation occurred. Exchange Management Shell command attempted:new-DistributionGroup -Name 'Extended Services' -Type 'Distribution' -OrganizationalUnit 'falmouth.local/Users' -SamAccountName 'Extended Services' -Alias 'ExtendedServices' Any help or advice in solving this problem would be most appreciated. Gerry Curtis

First, I'd run the ExBpa and see if there are any problems reported. Sounds like schema might have changed.

Roman Rozinov wrote: First, I'd run the ExBpa and see if there are any problems reported. Sounds like schema might have changed. I've just run EXBpa and only a few trivial things - nothing related to the problem. I would like to correct or repair the schema but short of re-installing Exchange (too drastic!) I don't know where to start.

Hi Gerry, Its worth to try by running setup /prepareshema and /preparead in yourexisting setup.If schema is corrupted or any attribute is missing then these will correct the problem. How to Prepare Active Directory and Domains http://technet.microsoft.com/en-us/library/bb125224(EXCHG.80).aspx

Do you have any connectors or third party applications i.e. fax running on or connected to Exchange?

Hello, Bhargav. I have similar problem, and our Exchange server has connectors that connected to email copy machine. Is there any problem if Exchange has connectors or third party applications?

Yes. From documented cases I have seen such behavior when applying updates or Service Packs. I suspect it may be the same problem. It may not be possible in production environment but if you can, try removing the connector and see if the problem goes away!

Thank you for your reply. As you mensioned, It's production environment, so removing the connectoris almostimpossible. Few months ago, I've asked to Local Microsoft Premier Technical Support Service with similar case. This is the reply from MS. [Title] [E2K7] Failure Creating Distribution Group With Error Message [Summary] Error: Active Directory operation failed on saturn.falmouth.local. This error is not retriable. Additional information: An attempt was made to modify an object to include an attribute that is not legal for its class. Active directory response: 0000207D: UpdErr: DSID-03150F9C, problem 6002 (OBJ_CLASS_VIOLATION), data 0 An object class violation occurred. Exchange Management Shell command attempted: new-DistributionGroup -Name 'adf' -Type 'Distribution' -OrganizationalUnit '***.co.**/Users' -SamAccountName 'adf' -Alias 'adf' [Cause] Schema Extension about Group Classmight not be completed normally. [Reslove] Extend Schema with the following procedure In the Exchange Management Shell, go to Setup\Data Folder of Installation CD then run commands below. dir schema* | foreach {ldifde -i -f $_.name -c "<SchemaContainerDN>" "cn=schema,cn=configuration,dc=sunxxx,dc=co,dc=kr" -s schemamaster.domain.com} ** Designate Schema Master Server of Domain instead of schemamaster.domain.com My mother language isn't English. so translation might be poor. ^^ If there is another solution, sharing might be apliciated. Have a nice day. Shin.

Did you extend the schema as requested by PSS? Did it resolve ths issue?

Yes, I was. In this case, I'll try it today evening. I'll tell you about the result.

Are you sure it is safe to runprepare schema againover an existing install of Exchange 2007 ? Has anyone actually tried this? I would hate to crash exchange. Gerry

Yes Gerry, it doesnt harm anything to your existing Exchange servers. I did it many times when we have any schema/ad related problems. You can see the tasks performed by prepareschema/preparead in below article. When you run this command it verifies Exchange schema & settings and anything is missing/corrupt then it will be fixed. How to Prepare Active Directory and Domains http://technet.microsoft.com/en-us/library/bb125224(EXCHG.80).aspx Bhargav/Moderators, Above article says It is not supported to use LDIFDE to manually import the Exchange 2007 schema changes. You must use Setup to update the schema. so if Microsoft says to do so with LDIFDE and we get some problem at later point of time, will it be supported if we log a call with PSS?

Amit, I am not clear on your question. Can you please elaborate on scenarion you described "if Micrisoft says...." Thanks, Bhargav

Sure Bhargav. Lets say we imported the schema with LDIFDE as per instruction from Microsoft PSS case (like Shin get reply from MS PSS), everything is stable and working fine. Now some point of time, we will get other issue which will also lead to Exchange schema corruption. Will it be supported in Microsoft PSS case? The reason behind my doubt is, the article says manual import with LDIFDE is not supported. Thanks,

I would probably guess that the support for ldifde is per PSS case only. If Microsoft controls the context of the situation, then they often will use seeminly non-supported (lower level thatn usual) tasks and if something goes awry, then they will fix it. That has been my experience in the past.

Amit Tank wrote: Yes Gerry, it doesnt harm anything to your existing Exchange servers. I did it many times when we have any schema/ad related problems. You can see the tasks performed by prepareschema/preparead in below article. When you run this command it verifies Exchange schema & settings and anything is missing/corrupt then it will be fixed. How to Prepare Active Directory and Domains http://technet.microsoft.com/en-us/library/bb125224(EXCHG.80).aspx /quote Thanks Amit. I ran PrepareSchema and PrepareAD as you suggested. The progress dots and messages all came up correctly and the final messages said it was successful. Unfortunately the problem still remains. I am still unable to create distribution groups! Gerry

Yes, if PSS instructed you to use LDIFDE, they will support issues that is a direct result of using LDIFDE method. It is important to understand this is case by case and PSS will determine when it is necessary and unavoidable to use LDIFDE method and without PSS instructing you to do so, you should not use that method.

All right, itsunderstandable Thanks for the explanationBhargavbhai

You're welcome.

Hi Gerry, Did you wait sometime for the replication after running prepareschema and preparead? If that doesnt resolve the issue then I think you would require logging a call with PSS.

Wow, There's a lot of opinions. I'll tell about my result. I've experienced three times this case. I used schema extension with LDIFDE, then problem was solved. Everytime I use, it was different site and also production environment. After re-extension, everything is stable and working fine. I hope this could be a reference. Have a nice day.

Amit Tank wrote: Hi Gerry, Did you wait sometime for the replication after running prepareschema and preparead? If that doesnt resolve the issue then I think you would require logging a call with PSS. Hi Amit, - I retried creating a distribution group the next day and also after forcing replication. Still the same error. On a UK High School budget we cannot afford to subscribe to MS PSS support........... Gerry

I finally took the risk and ran this ldifde script. (see Shin's posting) After a few tweaks to get it going properly it WORKED!!! This has now cured my problem. Thanks to Shin , Amit and the rest of you guys who have given help and support. From a very grateful Gerry