LDAP error message is logged after you install Exchange in multiple domains

If Microsoft Exchange is installed in multiple domains that contain global catalog servers, and those global catalog servers are used to resolve Exchange queries, the following error messages may be logged in the Exchange server Application event log and Directory Service log.

The following error message may be logged in the Application event log: The following error message may be logged in the Directory Service log: Note On domain controllers, you may also see event error messages that are similar to the following:

By design, the Recipient Update Service tries to contact a global catalog server in each of the other domains after you install Exchange Server. The Recipient Update Service must add the Exchange Domain Servers group in the remote domains to the Exchange Enterprise Servers group in the local domain. If the Recipient Update Service is running on Exchange Server 2003, the Recipient Update Service also adds the Exchange Domain Servers group in the remote domains to the Pre-Windows 2000 Compatible Access Builtin group in the local domain.

If event 8270 references a GUID in the Description field, the group membership of the Exchange Enterprise Servers group has not been modified.

To work around this behavior, use the Active Directory Users and Computers Microsoft Management Console (MMC) snap-in to manually modify the group membership of the Exchange Enterprise Servers group:

1. Start the Active Directory Users and Computers MMC snap-in.
2. In the Users container, locate and then open the properties of the Exchange Enterprise Servers group.
3. Click the Members tab, and then click Add.
4. In the Look in list, click the remote domain.
5. In the remote domain, locate the Exchange Domain Servers group, click Add, and then click OK.
6. If the membership of the Exchange Enterprise Servers group displays the Exchange Domain Servers group from the remote domain, click OK to close the dialog box.

If event 8270 references <SID=0102000000000005200000002A020000> in the Description field, the group membership of the Pre-Windows 2000 Compatible Access Builtin group has not been modified.

To work around this behavior, use the Active Directory Users and Computers Microsoft Management Console (MMC) snap-in to manually modify the group membership of the Pre-Windows 2000 Compatible Access Builtin group:

1. Start the Active Directory Users and Computers MMC snap-in.
2. In the Builtin container, locate and then open the properties of the Pre-Windows 2000 Compatible Access group.
3. Click the Members tab, and then click Add.
4. In the Look in list, click the remote domain.
5. In the remote domain, locate the Exchange Domain Servers group, click Add, and then click OK.
6. If the membership of the Pre-Windows 2000 Compatible Access Builtin group displays the Exchange Domain Servers group from the remote domain, click OK to close the dialog box.

This behavior is by design.