Hi I have been trying to fix a problem where Exchange 2007 would only communicate with a single DC, even though all of them are GC enabled. (4 total). I followed this article, Manually add permissions to the domain controller. Start the Active Directory Users and Computers snap-in. Right-click the Domain Controllers container, and then click Properties . Click the Group Policy tab, click Default Domain Controllers Policy in the Group Policy Object Links box, and then click Edit . Expand Computer Configuration , expand Windows Settings , expand Security Settings , expand Local Policies , and then click User Rights Assignment . In the right pane, double-click Manage auditing and security log , click Add , click Browse , and then add the Exchange Enterprise Servers group. In the Add user or group dialog box, click OK , and then click OK again. Exit the Group Policy snap-in, and then click OK in the Domain Controllers Properties dialog box. Note Sometimes, you may not be able to see the Exchange Enterprise Servers group when you click Browse in the Add user or group dialog box. If this occurs, add the Exchange Domain Servers group, and then run the setup /domainprep command again. This process makes the addition of the Exchange Enterprise Servers group by the setup /domainprep command persist across all domain controllers. Restart the Exchange services. Now, the single server that had the SACL flag as 1 is no longer, and the Exchange environment is down. There is this error in the log: The description for Event ID 2114 from source MSExchange ADAccess cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: MSEXCHANGEADTOPOLOGYSERVICE.EXE 1856 80040a02 DSC_E_NO_SUITABLE_CDC The handle is invalid Please help, in any way you can. Thanks

Hello,Try this 2 methods: 1. Goto Active directory on your DC and add your exchange server as a 'Computer' on the 'Domain Admins Group'.2. Try to enable IPV6 and reboot if it is disabledregards from www.windowsadmin.infoManuPhilip

Hi Mark, Firstly, for urgent issues, I recommended that you submit a new case to CSS team to get support directly. Regarding the issue, in addition to Philip, please also check the 2080 event on the server: Event ID 2080 from MSExchangeDSAccess http://support.microsoft.com/kb/316300/en-us Please also perform following steps to troubleshoot the issue: 1. Check if the "Exchange Servers" group has all the Exchange 2007 servers listed. It also needs to be there in the "Exchange Install Servers" group. 2. Run Policytest tool to test the issue. The policytest.exe utility produces a list of domain controllers and reports the presence or absence of the required privilege on these domain controllers. If the policytest.exe indicates that the required privileges are not present, do the following: A. Open the Default Domain Controllers Security Settings snap-in on the domain controller specified in the event description. B. In the console tree, under Security Settings, expand Local Policies, and then click User Rights Assignments. C. In the results pane, double-click Manage auditing and security log. Verify that both the Exchange Servers group is listed. D. Make sure that the group permissions are inherited by the Microsoft Exchange computer account. ~~~~~~~~~~~~~~~~ Mike Shen TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.com ~~~~~~~~~~~~~~~~

Hi Mark, Any updates regarding the issue?Thanks,Mike