We have an environment with Exchange 2007 SP1 running on Windows Server 2008. We have a mixture of both Windows Server 2003/2008 dcs. We just noticed that none of the newly promoted Server 2008 DCs are being used by the Exchange servers. DSAccess reports the SACL right as 0. We tried running preparedomains from one of the 2008 dcs. It completed but the effect is that we were now able to use only that particular Server 2008 dc with exchange. The change didn't replicate to the other dcs, though replication seems to be working just fine. We tried running preparedomains from an ordinary server 2003 box. It completed successfully but still no dice. My questions are, why did the newly promoted not inherit the right permissions for exchange. How can we fix this for the future?Micah

Have yourebooted the new DCs yet?

Thanks for your response.If you mean, have the dcs been rebooted since being promoted, yes. If you mean since running preparedomains again, at least one has been rebooted.Micah

Can you verify the "Manage auditing and security log" settings as per below similar thread? http://social.technet.microsoft.com/Forums/en-US/exchangesvradmin/thread/045d5973-c445-4ebb-a274-0d3dc5b4c320 Amit Tank | MVP Exchange Server | MCITP: EMA | MCSA: M | http://ExchangeShare.WordPress.com

Yes the Manage auditing and security log settings are correct. It is strange that if we run preparedomains from a new dc, only that dc is affected. We tried this on several others and they appeared once we ran it from that particular dc.Micah

Just a wild guess Please run below command to see if StaticDomainController was ever used. Get-ExchangeServer -identity E2K7-1.contoso.com -status | fl Name, StaticExcludedDomainControllers If you want to remove the changes that you have made, and revert to the default behavior of Exchange, type the following command at the Exchange Management Shell prompt, and then press ENTER: Set-ExchangeServer -identity E2K7-1.contoso.com -StaticExcludedDomainControllers:$null Refer Below http://support.microsoft.com/kb/298879 Vinod |CCNA|MCSE 2003 +Messaging|MCTS|ITIL V3|

No entries show up in the StaticExcludedDomainControllers field. I thought that it might be worth noting that there are also some legacy Exchange 2003 SP2 systems running in the environment as well and these too are unable to see the 2008 domain controllers.I ended up running preparedomains from each 2008 dc and then they were able to show up. I shouldn't have to do things that way but unfortunately that is what happened. We are deploying another one this Friday and I assume it will have the same problem. Also, the 2003 servers still can't see the 2008 dcs.Micah