I have 3x win2k3 SP 2 DC's and 2x 2008 SP2 DCs. 2 Sites. Site A has 2 Exchange 2007 servers running on Server 2008. Site B has an Exchange 2003 server running on Server 2003. All servers are fully patched and updated. I am trying to promote a 2008R2 DC. It will not promote, I get the following error. 12/30/2010 12:15:56 [INFO] EVENTLOG (Error): NTDS Replication / Replication : 1084Internal event: Active Directory Domain Services could not update the following object with changes received from the following source directory service. This is because an error occurred during the application of the changes to Active Directory Domain Services on the directory service. Object: CN=PF,CN=PF,CN=InformationStore,CN=KPMPEXCH01,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=Kleiner Perkins Caufield and Byers,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=kpcb,DC=com Object GUID:c842ac58-0b72-41e3-a63a-0c740c04a394 Source directory service: KPMPDC01.kpcb.com When I look on an existing DC, I get the following error: Internal error: The security descriptor propagation task encountered an error while processing the following object. The propagation of security descriptors may not be possible until the problem is corrected. Additional Data CN=PF,CN=PF,CN=InformationStore,CN=KPMPEXCH01,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=Kleiner Perkins Caufield and Byers,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=kpcb,DC=com Error value: -1026 JET_errRecordTooBig, Record larger than maximum size Internal ID:20903d5 This leads me to the KB: http://support.microsoft.com/kb/914036 I created an LDIF dump file to find the attribute values: I have 1225 Proxy addresses on the public folder. Uploaded on the SkyDrive Link below for your viewing pleasure. http://cid-ca7e8015c6eb699c.skydrive.live.com/redir.aspx?resid=CA7E8015C6EB699C!125 So I need to remove all the proxy addresses, and verify that the RUS is applied properly. My question at this time is 1) What is the best way to do this in a co-existance scenario? 2) My Recipiant policy is currently very simple, but some users do have a different primary proxy address, what can I do to verify these changes are not lost. 3) How do I ensure that the 1225 improper proxy addresses are removed from the PF tree? Thanks for your help

I have 3x win2k3 SP 2 DC's and 2x 2008 SP2 DCs. 2 Sites. Site A has 2 Exchange 2007 servers running on Server 2008. Site B has an Exchange 2003 server running on Server 2003. All servers are fully patched and updated. I am trying to promote a 2008R2 DC. It will not promote, I get the following error. 12/30/2010 12:15:56 [INFO] EVENTLOG (Error): NTDS Replication / Replication : 1084Internal event: Active Directory Domain Services could not update the following object with changes received from the following source directory service. This is because an error occurred during the application of the changes to Active Directory Domain Services on the directory service. Object: CN=PF,CN=PF,CN=InformationStore,CN=KPMPEXCH01,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=Kleiner Perkins Caufield and Byers,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=kpcb,DC=com Object GUID:c842ac58-0b72-41e3-a63a-0c740c04a394 Source directory service: KPMPDC01.kpcb.com When I look on an existing DC, I get the following error: Internal error: The security descriptor propagation task encountered an error while processing the following object. The propagation of security descriptors may not be possible until the problem is corrected. Additional Data CN=PF,CN=PF,CN=InformationStore,CN=KPMPEXCH01,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=Kleiner Perkins Caufield and Byers,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=kpcb,DC=com Error value: -1026 JET_errRecordTooBig, Record larger than maximum size Internal ID:20903d5 This leads me to the KB: http://support.microsoft.com/kb/914036 I created an LDIF dump file to find the attribute values: I have 1225 Proxy addresses on the public folder. Uploaded on the SkyDrive Link below for your viewing pleasure. http://cid-ca7e8015c6eb699c.skydrive.live.com/redir.aspx?resid=CA7E8015C6EB699C!125 So I need to remove all the proxy addresses, and verify that the RUS is applied properly. My question at this time is 1) What is the best way to do this in a co-existance scenario? 2) My Recipiant policy is currently very simple, but some users do have a different primary proxy address, what can I do to verify these changes are not lost. 3) How do I ensure that the 1225 improper proxy addresses are removed from the PF tree? Thanks for your help I'd mail-disable the public folder and then find the object that represents those e-mail addresses in the Microsoft Exchange System Objects container and nuke it. Then run the Exchange Best Practices Analyzer. I'll bet you have a problem with the GatewayProxy (http://support.microsoft.com/kb/821743) that needs to be cleared. Once you do that, and the AD replication has removed the MESO object from the other DCs in the domain, mail-enable the public folder again and assign the necessary SMTP addresses to it.--- Rich Matheisen MCSE+I, Exchange MVP

Hi returnoftheyeti, Above gave some good suggestion, any update for your issue? Regards! GavinPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.