A migrated account does not appear in the target Global Address List (GAL). (NETIQKB43117)

fact
Microsoft Exchange 2000 Server

fact
Microsoft Exchange Server 2003

fact
Exchange Migrator 2.3

symptom
A migrated account does not appear in the target Global Address List (GAL).

symptom
ERROR: The service could not update the entry CN=username,CN=Users,DC=domain,DC=com because inheritable permissions are not propagated to this object.

cause

If the Allow inheritable permissions from parent to propagate to this object property on the Security tab of the user's Properties window is not selected, this error can occur.

Windows writes the error in the Application Log on the Recipient Update Service (RUS) server or on the Active Directory Domain Controller with which the RUS communicates.

fix

To resolve this issue:

1. Run Active Directory Users and Computers (ADUC).
2. In the left pane, expand the container or OU that contains the affected user account.
3. In the right pane, select the affected user account.
4. On the Action menu, click Properties.
5. On the Security tab, select Allow inheritable permissions from parent to propagate to this object.
6. Click OK.
7. Repeat Steps 2 through 6 for each affected user.
8. Close ADUC.

note

For more information regarding this issue, refer to the following Microsoft KB article:

Missing permissions cause the Recipient Update Service not to process accounts in Exchange 2000 Server and Exchange Server 2003
http://support.microsoft.com/default.aspx?scid=kb;en-us;254030

Formerly known as NETIQKB43117