Legacy Exchange Settings Being Changed

[mbartels]

We have had our AD/OD integration in place for about a month and for the most part, all is working fine. There is one problem. There are some values in the AD that are being changed. Our PC consultant and Microsoft think the values are coming from the Mac server (this has only been happening since integration). Here are the entries that are getting changed in AD:

/o=MESSMER HIGH SCHOOL/ou=MESSMER/cn=Configuration/cn=Connections/cn=SMTP (MCSDC01)/cn={EFCCF810-5DD7-4501-B7E8-B0FCE438D105}
becomes
/o=First Organization/ou=First Administrative Group/cn=Configuration/cn=Connections/cn=SMTP (MCSDC01)/cn={EFCCF810-5DD7-4501-B7E8-B0FCE438D105}

The changes are taking place in the following area:
cn=Configuration,cn=Services,cn=Microsoft Exchange,cn=MESSMER HIGH SCHOOL,cn=Connections
in the following entries:
CN=SMTP (MCSDC01-{EEF3A19C-CFCE-43D7-BE3B-137251D2873F})
CN=SMTP (MCSDC01-{EFCCF810-5DD7-4501-B7E8-B0FCE438D105})

The value being affected is the LegacyExchangeDN, and the value is being changed from the first (correct) entry above to the second (incorrect) entry listed next. ‘First Organization’ and ‘First Administrative Group’ are the default names in Exchange, but you are using a different organization and group name, namely ‘MESSMER HIGH SCHOOL’ and ‘MESSMER’, respectively.

Is it possible that these changes are being made by the Mac server’s LDAP connection when it talks to the AD? If so, how can I fix it? This seems to take down our e-mail server about every two weeks. Thanks for the help.

Mike

[Anonymous]

We are using the LDAP and AD plug-ins on the Mac server. I did hear from someone on another post that if the account used to bind to the AD had write access, this could happen. Our PC tech used the AD admin account when helping set this up. He did have reservations about it but the Apple tech on site said that it would not be a problem. What permissions should this account have? If we create a specific user for binding, what do we need to do to give them binding permissions? A general user does not have permission to bind to the AD. Once this is done and I unbind and re-bind the server, do I also have to do this to the workstations?

[Author]

Posts