Directory and Resource Administrator reports an over-license situation for Exchange mailboxes but no (NETIQKB12826)

fact
Directory and Resource Administrator 6.40

symptom
Directory and Resource Administrator reports an over-license situation for Exchange mailboxes but not for user accounts.

symptom
Tasks that involve modifying Exchange mailboxes generate an error that the number Exchange mailboxes licensed for management has been exceeded. 

cause
This issue is a result of denying access to the Service account for an OU.  Some of the user accounts with Exchange 2000 mailboxes reside in this OU to which the Directory and Resource Administrator (DRA) access account for that domain has been denied access.   DRA is not using the accounts provider to determine the number of mailboxes in the domain.  Instead it goes directly to Active Directory to count them and thus can see mailboxes whose user accounts it cannot see.

fix
This issue is corrected in Directory and Resource Administrator (DRA) version 6.6 and later.  DRA now utilizes the Accounts provider to determine the number of mailbox enabled user accounts and count them toward licensing.  Upgrade to the latest version of DRA to resolve this issue.

Formerly known as NETIQKB12826