Performing a Mailbox copy of a 2000 mailbox results in the clone account mailbox having the template (NETIQKB36592)

fact
Directory and Resource Administrator 6.50

fact
Directory and Resource Administrator 6.60

fact
Directory and Resource Administrator 7.x

symptom
Performing a Mailbox copy of a 2000 mailbox results in the clone account mailbox having the template mailbox permissions.

cause
The mailboxcopy operation is cloning the msExchMailboxSecurityDescriptor property of the template account mailbox.

fix

In Directory and Resource Administrator (DRA) versions 6.6, 7.0 and 7.0 SP1, you can use a CloneExceptions key to prevent cloning the msExchMailboxSecurityDescriptor when cloning a mailbox.  

The following KB details how to set the CloneExceptions list.  Add the value msExchMailboxSecurityDescriptor to the CloneExceptions list:

NETIQKB3604 - "How do I specify which properties to exclude during clone operations?"

This issue is resolved in Directory and Resource Administrator (DRA) 7.5 and later. The msExchMailboxSecurityDescriptor is no longer cloned when a MailboxCopy is performed. Upgrade to the latest version of DRA to resolve this problem.

Formerly known as NETIQKB36592