V5 Frequently Asked Questions
Search:     Advanced search
Browse by category:

KB143: SMR plugin: Exmerge is unsuccessful and generates error 8007203a

Views: 4418
Votes: 0
Posted: 04 May, 2007
by: Marais D.
Updated: 23 Jun, 2008
by: Marais D.
Note that this comes from a Microsoft article 323546: support.microsoft.com/kb/323546


When you try to export mailboxes to, or import mailboxes from, a personal folder (.pst) file by using the Microsoft Exchange Mailbox Merge program (Exmerge.exe), the operation may be unsuccessful, and the following error is logged in the Exmerge.log file:
[15:52:43] Error 8007203a opening an LDAP connection. ('LDAP://ServerName:389/rootDSE') (CADRoutines::GetNamingContextData)

Additionally, after you configure the user account under which you run the Exchange Mailbox Merge program by setting the Receive As and Send As security permissions to Allow for the mailbox store, these settings may revert to Deny permissions settings.


If the Allow permissions that you set in the Exchange System Manager unexpectedly change to Deny permissions, user account settings in Active Directory may be propagating and changing the settings that you made in Exchange System Manager.

To troubleshoot this issue, use the ADSI Edit utility to verify the correct settings for the mailbox object. To do this, follow these steps.

Warning If you use the ADSI Edit snap-in, the LDP utility, or any other LDAP version 3 client, and you incorrectly modify the attributes of Active Directory objects, you can cause serious problems. These problems may require you to reinstall Microsoft Windows 2000 Server, Microsoft Windows Server 2003, Microsoft Exchange 2000 Server, Microsoft Exchange Server 2003, or both Windows and Exchange. Microsoft cannot guarantee that problems that occur if you incorrectly modify Active Directory object attributes can be solved. Modify these attributes at your own risk.
1. Log on to the domain controller as Administrator.
2. Start the ADSI Edit utility. To do this, follow these steps:
a. Install the Windows 2000 Support Tools. For more information, click the following article number to view the article in the Microsoft Knowledge Base:
246926 (http://support.microsoft.com/kb/246926/) Folder listing of the Support Tools included in Windows 2000
b. Register the Adsiedit.dll file by using Regsvr32. To do this, follow these steps:
1. Click Start, and then click Run.
2. In the Open box, type the following line, and then click OK:
regsvr32 "drive:\Program Files\Support Tools\adsiedit.dll"
c. Open a new Microsoft Management Console (MMC), and then add the ADSI Edit snap-in.
3. In the console root, right-click ADSI Edit, and then click Connect to.
4. In the Connection dialog box, click Configuration Container in the Naming Context list, and then click OK.
5. Expand ADSI Edit, expand Configuration Container [server.domain.com], and then expand CN=Configuration,DC=domain,DC=com.
6. Expand CN=Services, expand CN=Microsoft Exchange, expand CN=First Organization, expand CN=Administrative Groups, expand CN=First Administrative Group (where First Administrative Group is the administrative group that you want), expand CN=Servers, CN=ServerName (where ServerName is the name of your server), expand CN=Information Store, and then click CN=First Storage Group.
7. In the right pane, right-click CN=PrivateStoreName, where PrivateStoreName is the name of the private store that you want (for example, CN=Mailbox Store (ServerName)), and then click Properties.
8. Click the Security tab, and then review the permissions for the administrative account under which you want to run the Mailbox Merge program, including all groups that the administrative account is a member of. Make sure that the Send As and Receive As permissions are set to Allow.

Note Explicit Allow permissions override inherited Deny permissions. If the setting is not available (dimmed), the permission is inherited. When you set permissions for Send As and Receive As on the mailbox store, make sure that the Allow permissions are explicit for the user you are running Exmerge with and for each group that the user is a member of. If you still receive errors messages when you try to run Exmerge, follow the steps in the following Microsoft Knowledge Base article:
273642 (http://support.microsoft.com/kb/273642/) ExMerge does not work unless you have Receive As and Send As permissions on the store
9. When you have completed the process of changing permissions, click OK, and then quit the ADSI Edit snap-in.
Others in this Category
document KB007 - Exchange Plug-in permissions error
document KB008 - Restoring Exchange
document KB026: SMR Error
document KB038: Groupwise error "Data set is currently in use and cannot be accessed"
document KB043: Email notification problem
document KB087: Single Mailbox Recovery (SMR) Exmerge notes
document KB094: Exchange 2003 - SMR unable to display user list
document KB097: Script plug-in: Scripts "hang"
document KB099: Information store backup failed: No database files found in descriptor file
document KB107: Multiple Storage Groups with multiple mailbox stores restore failure
document KB108: Exchange Circular Logging error
document KB110: SQL Data Dump Error: Incorrectly Formatted
document KB119: GroupWise plug-in: Cannot see postoffice when using TSAFSGW
document KB120: Lotus Domino: Error in log - "Backup terminated due to timeout"
document KB121: GroupWise WebAccess locks dataset
document KB124: System State plug-in failure on 64-bit Windows (Server Edition v4.x)
document KB128: Configuring SQL 2005 Express for SQL plugin
document KB154: What is the V5.0 VSS database plugin and how does it work?
document KB157: SQL 2005 backup: Operating system error5(access is denied) or Unable to export database
document KB171: VSS plugin and Exchange restores - what you need to know
document KB176: Restoring Exchange to a Recovery Storage Group
document KB188: Cache update problem with Exchange 2007 and Exchange plugin
document KB194: SMR gives 'Invoke of: GetObject' error during backup after upgrade to v5
document KB197: Email Notification fails to send test message with v5 SE.
document KB199: VSS Restores always overwrites original data
document KB205: Oracle Full Media Recovery (user manual update)
document KB208: SIMS/FMS plug-in information and downloads
document KB212: Failed to load plugin Sharepoint Plugin
document KB213: Sharepoint - doing a full restore (Disaster Recovery)
document KB229: Client GUI does not want to open with Notes/Domino plugin
document KB236: SQL backup fails with warning "A parallel operation cannot be started from a DAC connection."
document KB237: How to recover a single Exchange 2007 mailbox using Recovery Storage Group
document KB238: VSS plugin does not pickup up Exchange on SBS 2003
document KB251: String index error when trying to run SMR
document KB267: Backing Up a MySQL Database using Attix5 Backup Professional SE and scripting
document KB269: How to restore SQL database files with a .DAT extension