Time taken for AD changes to take effect in Exchange
Hi I understand that Exchange uses both DSAccess cache (refresh time - 5mins) and IS Store cache (refresh time - 2 hours). So, for example, if we changed the mailbox policy on a user's mailbox, it could take up to 2 hours for this change to take effect? I was wondering what changes would be reflected in DS Access, and what in the IS Store? Does anyone know about the following? i) Adding Send on Behalf rights to a mailboxii) Adding Send As rights to a mailboxiii) Increasing mailbox size limit iv) Moving mailbox to a different store/serverv) Giving Full Mailbox access Thanks in advance
September 2nd, 2009 9:15pm

The 2 hour limit can be adjusted:http://technet.microsoft.com/en-us/library/bb684892.aspx"Mailbox Size Limits Are Not Enforced in a Reasonable Period of Time"or by restarting the IS. :)In my experience, 1, 2 and 3 are affected by that cache time.4 is generally the time it takes to reconcile rules which you can see in the event logs on the destination server. Anywhere from 5-20 minutes before users can logon to the moved mailbox. (It seems to have gotten better in 2007)5 is generally pretty quick in my experience.
Free Windows Admin Tool Kit Click here and download it now
September 3rd, 2009 1:20am

Per my knowledge, I depends on DSAccess cache, II depends on IS cache, and III depends on both. And about the IV and V, I agree with Andy
September 4th, 2009 8:23am

Thanks guys.Regarding 'Send on behalf' and 'Send As' - isn't Send As an AD permission and Send on Behalf an Exchange one (i.e Send As is set via Security tab in ADUC, wheras Send on Behalf is set on Exchange General tab)?Also- I have heard that if someone has reached their mailbox quota limit, it is faster to increase it by moving the mailbox to another mailbox store where a higher policy limit is set , rather than actually increased the quota limit via ADUC. I thought this was due to the first option being reflected in the DSAccess Cache and the second in IS cache?Or is DSAccess cache used by Exchange for GAL type lookups only?Thanks again
Free Windows Admin Tool Kit Click here and download it now
September 6th, 2009 8:48pm

On Sun, 6-Sep-09 17:48:06 GMT, Pancamo wrote:>Thanks guys.Regarding 'Send on behalf' and 'Send As' - isn't Send As an AD permission and Send on Behalf an Exchange one (i.e Send As is set via Security tab in ADUC, wheras Send on Behalf is set on Exchange General tab)?That's correct.limit via ADUC. That would depend on the size of the mailbox and the refresh time forthe stores DS cache. On average, the wait time's going to be about onehour. It might be as short as a minute, or as long as two hours withthe default refresh time.>I thought this was due to the first option being reflected in the DSAccess Cache and the second in IS cache?Or is DSAccess cache used by Exchange for GAL type lookups only?Thanks again ---Rich MatheisenMCSE+I, Exchange MVP--- Rich Matheisen MCSE+I, Exchange MVP
September 6th, 2009 11:47pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics