GoodDay, I am facing with a strange issue ref msExchRequireAuthToSendTo attribute. I have no idea why and how can i fix it. So, this is the situation: --one DC and one Exchange Server. --i ran ActiveDirectory Users&Computers(ADUC) to check security settings of one user. When i check Effective Permissions for one Domain Admin against that user on DC I see checked ONLY Read msExchRequireAuthToSendTo, when i am doing same thing on Exchange Server, I see also checked Write msExchRequireAuthToSendTo. So, I am wondering why there is no consistency between ADUC on these two servers.... Does anybody know why? Thanks

Have you looked at this article? http://support.microsoft.com/kb/827616 Deli

Yup, this was the first KB which popped up firstly. And then i googled again and i got other blogs and articles, but no one of those articles helped me to understand why that attribute is not consistent in its rights(Read&Write). I mean, i cannot understand why that attribute isappearing with Write AND Readon an Exchange Server and with ONLY Read on a Domain Controller(desnt matter which DC or Exchange server i choose). I am wondering if there is any patch which was applied in the past on Exchange Servers and did this... thanks,

I have read somewhere that the Effective Permissions dialog not allways shows the correct result Is it only a display problem, I mean does it actually work as expected or are your really experiencing problems? Deli

Well, I started from another issue: when a certain Exchange Admin is trying to set Delivery Restrictions on user properties, that Admin is getting a LDAP Error, saying Access is denied. And that change didnot succeed. So i noticed that behaviour with msExchRequireAuthSendTo aatribute, Write and Read rights. Thanks,

Are you using Exchange 2003? Being an Exchange Admin does not mean that you have access in Active Directory to all objects Try to do the same configuration with a user that is both Exchange Admin and Domain Admin Deli

Well, i did this as well, and no luck, so far.

There must be something wrong with permsissions Do you have one Active Directory Forest How many domains do you have Where is your exchange server located Deli

I have one forest with Parent Domain and2 child domains. Exchange Servers are located in each of child domains. Accounts for Exchange Admins are defined in child domains.

Did you run setup /domainprep in each of the child domains when you installed Exchange? Deli