Clone Exceptions does not work with 'Office' or 'physicalDeliveryOfficeName'. (NETIQKB43668)

  • 7743668
  • 02-Feb-2007
  • 21-Jun-2007


Directory and Resource Administrator 6.x

Directory and Resource Administrator 7.x

CloneExceptions does not work with 'Office' or 'physicalDeliveryOfficeName'.


The 'Schema.mdb' file that is contained in the Software Development Kit (SDK) for Directory and Resource Administrator (DRA), lists the property name for the 'Office' to be 'physicalDeliveryOfficeName'.  Using this value with the CloneExceptions key in the registry does not keep the Office value from being copied from the source to the target user account.

There are actually two properties that map to the Office field, physicalDeliveryOfficeName (AD property) and OfficeLocations (ADSI property).  When the UserCopy operation fetches the properties from the source user, it fetches both of these properties.

The workaround is to add both physicalDeliveryOfficeName and OfficeLocations to the clone exceptions list.


Certain properties from the source/template user account can be configured to be ignored and not copied during a user clone operation.  See this article for more information:

NETIQKB3604 - "Can the properties cloned during any clone operations be customized?"

Additional Information

Formerly known as NETIQKB43668