Hello, I am currently testing an upgrade/migration from Exchange 2000 sp3 to Exchange 2007 sp1. The installation has gone fairly well, however during the testing of OWA, I receive the following error when I attempt to access the address book using either the To:.. or Cc:.. buttons (this error happens with both migrated users, and with users which are newly created on the 2K7 server): "Outlook Web Access was unable to access the Active Directory resource. This may be because the Active Directory object does not exist or the object has become corrupted, or because you do not have sufficient access rights for the object." I have done some research and found some posts indicating that the msExchQueryBaseDN object needed to be populated with (for example) CN=domain,CN=com, and if I input that info, I can see the address book correctly. My questions are:1. does the msExchQueryBaseDN need to be populated in this way, and if so, any ideas as to why is was not by default? 2. if it does need to be populated, is there some way to do it that will be 'persistent' for future accounts when they are created? I don't want to have to remember to do this manually every time. Thanks in advance. Chris