I hope someone can help me, I've started a few threads but each time I find out abit more and have to start a new one. I have a parent domain with an exchange server, I also have a child domain with one DC. I want to be able to mail enable the child domain users and have their mailboxes held on the exchange server on the parent domain. I've run domain prep on the child domain and created an RUS on the parent. However, when I create a child user and add a mailbox the user does not get an smtp address or show up in the address lsit. I've checkd to see if the RUS is responding by checking the new users USNchanged number with ADSIedit. I can see in the exchange server logs that the change has been picked up. The exchange server log shows the following events : 8011 - searching child domain for changes 8012 - 1 change found 8175 - processing changes 8134 - queueing changes 8006 - open LDAP session to child DC port 389 8169 - retrieved all directory changes from child domain 8009 - binding to child DC as service account 8157 - waiting for next schedule 8163 - received next address list transaction 8129 - evaluating directory object (I can see the user name here in the AD path name) 8130 - Looks like it's added the user to the address list here Then there are lots more events where it lookslike it's creating the smtp and x400 addresses until I get..... 8022 - LDAP modify - access rights fail 8270 - LDAP modify address book - access rights fail 8168 - Could not modify Childdomain\user So it looks like it's a permissions thing but I've spent so long messing around with this I think all my permissions are in a mess now. Can anyone tell me how my permissions should look especially for the exchange enterprise servers and exchange domain servers groups. Thanks very much for any help, Green

Hi, Which exchange version do you have??Ripu Daman Mina | MCSE 2003 & MCSA Messaging

Hi, It's exchange enterprise server sp1