Recently had an upgrade done to move Exchange 2010 to 2013 and now email enabled security groups aren't getting email addresses. Nothing changed in the sync rule. I'm flowing out mailNickname without an issue. Wondering if the process for managing this in FIM has changed with Exchange 2013.  I'm not really finding anything on the internet that would suggest that, but thought I'd ask.

Do you have any error in GUI or Event Log?

Secondly:

Please check in AD MA if you have provisioning enabled (there is only 2010 in drop-down, so please use this one).

If so, please try the following approach:

1. Disable Exchange provisioning , run full sync

2. Re-enable provisioning and run full sync.

MA config is held in XML somewhere beneath GUI and disabling/re-enabling provisioning makes sure FIM rebuilds this XML to have proper settings.

What I know from my exchange guys is that within exchange more and more functionality only works if the group type is universal.

So if everything (like user exchange provisioning) is working fine, there schould be no problem with the MA, try to create the security group as a universal group.

I remember darkly I had a similar problem.

/Peter

It can also be about Exchange policies and so on, but the start point is to answer: does export works without errors/warnings? If there are any warnings/errors, what are they about?