How To Troubleshoot Issues with the Active Directory Connector Tools That Are Included with Exchange Server Deployment Tools and ADC Tools

This article discusses how to troubleshoot issues that may occur when you use certain Microsoft Active Directory Connector tools in the Exchange Server Deployment Tools, and when you use ADC Tools. ADC Tools is included with Active Directory Connector (ADC). You can use Exchange Server Deployment Tools and ADC Tools to help you successfully deploy Microsoft Exchange Server 2003 to your organization. The prerequisites for Exchange Server 2003 Setup require that you run Exchange Server Deployment Tools before you deploy Exchange Server 2003.

Overview of the Exchange Server Deployment Tools

Exchange Server Deployment Tools provide recommended steps, diagnostic tools, and Setup links to help you successfully install Exchange Server 2003 in your organization. The deployment tools include steps that lead you through the deployment process based on your environment. You can use Exchange Server Deployment Tools to help you perform the following deployment operations:

• Install the first Exchange Server 2003 computer to a new or to an existing organization.
• Install Exchange Server 2003 to additional computers in your organization.
• Install Exchange 2003 to an existing Microsoft Exchange Server 5.5 organization.
• Install Exchange 2003 to a mixed-mode Microsoft Exchange 2000 Server and Exchange Server 5.5 organization.
• Upgrade an Exchange 2000 server running in native mode to Exchange Server 2003.

To start Exchange Server Deployment tools, do any of the following:

• In the root folder of the Exchange Server 2003 CD, double-click Setup.exe, and then click Exchange Deployment Tools under Deployment.
• In the Support\Exdeploy folder on the Exchange Server 2003 CD, double-click Exdeploy.hta.
• Download the latest version of Exchange Server Deployment tools. To do so, visit the following Microsoft Web site:
  http://www.microsoft.com/downloads/details.aspx?familyid=271E51FD-FE7D-42AD-B621-45F974ED34C0

You can run the deployment tools directly from the Exdeploy.hta file or individually from the command line.

Overview of ADC Tools

ADC Tools in Active Directory Connector helps you to correct resource mailbox issues, to create connection agreements, and to verify replication between the Exchange 5.5 directory and the Active Directory directory service. ADC Tools is designed for coexistence with Exchange 5.5 in your organization.

To start ADC Tools, open Active Directory Connector Services, and then click ADC Tools.

ADC Tools includes the following tools and wizards:

• Step 1: Tool Settings
• Step 2: Data Collection
• Step 3: Resource Mailbox Wizard
• Step 4: Connection Agreement Wizard

Important When you run ADC Tools in a mixed environment with Exchange 5.5 on Microsoft Windows NT Server 4.0 domain and Exchange 2003 in a Microsoft Windows Server 2003 domain, the following permissions are required to run the ADC Tools:

• The two domains must have a bidirectional working trust.
• The user who is logged on to the computer where you run the ADC Tools must have Service Account Admin rights on the Exchange 5.5 site.

Log Files

The deployment tools generate log files in the ExDeploy Logs folder. You can also specify a different location for the log files when you run the tools. The primary log file is the Exchange Deployment Tools Log (ExDeploy.log). This file is updated with tool output information every time that you run a deployment tool. Many of the individual deployment tools generate additional log files that contain detailed information about the output that results from that particular tool.

For example, if you run ADCObjectCheck Tool from ADC Tools, output is written to the folder that you specify. If you run ADCObjectCheck Tool from the command line, the output is written to the ExDeploy.log file and the Adcobjectcheck.log file. These log files are either in the ExDeploy folder or in the folder that you specify when you run the tool.

The log files contain output and include error and warning messages that are generated when you run the tool. Use the information that is contained in the log files to help troubleshoot any issues that might occur. For more information about the log files that are generated by the deployment tools, see the Exdeploy.chm file that is located in the Support\ExDeploy folder of the Exchange 2003 CD.

If a tool stops responding when you run it, press CTRL+BREAK, and then run the exdeploy /t:ToolName command at the command prompt. Every time that you run the exdeploy command, an entry is written to the Exdeploy.log and to the Exdeploy-progress.log files.

Troubleshoot ADCConfigCheck

The ADCConfigCheck deployment tool (Check Exchange 5.5 Directory Configuration) makes sure that Exchange 5.5 directory configuration objects are replicated correctly from the Exchange 5.5 directory to Active Directory. The tool searches Active Directory by using the ADCglobalNames attribute of the Exchange 5.5 object, and it lists any Exchange 5.5 configuration objects that are missing from Active Directory.

If you receive errors when you run ADCConfigCheck, make sure that the Configuration Connection Agreement (config_CA) is replicating. By default, its endpoints are the Site Replication Service and a global catalog server. Make sure that the fully qualified domain names (FQDN) of these servers are registered correctly in DNS. Because the Kerberos functionality of ADC requires DNS resolution, DNS name resolution must be working correctly. To verify that config_CA is replicating:

1. Start Exchange System Manager.
2. Right-click the server that is running Site Replication Service, and then click Properties.
3. Click the Details tab.
4. In the Administrative note box, type test, and then click OK.
5. Open Active Directory Connector Services, right-click config_CA, and then click Replicate now.
6. Start Microsoft Exchange 5.5 Administrator, and then connect to the server that is running Site Replication Service.
7. Right-click the server that is running Site Replication Service, and then click Properties.
8. Click the Details tab.
9. Verify that the "test" entry that you typed in step 4 appears in the Administrative note box.
   
   If this entry does not appear in the Administrative note box, check the event logs in Windows Event Viewer for events that contain error information that is related to config_CA or that is related to protocol errors (event 8026).

Troubleshoot XML Output Files That Are Created by ADC Tools

When you run the Data Collection tool in ADC Tools, the output is not appended to data in any existing XML files that are generated by the previous times that you used the tool. Instead, older XML files are renamed with a timestamp and a .bak extension and are replaced by newer XML files. You can open and view the XML files in Microsoft Internet Explorer (if an XML parser is installed), or you can open and view the XML files in Notepad.

Note When the tool displays a summary that lists the XML files, make a note of any errors that occur in the import process, and then investigate the files where the errors (if any) occur.

Troubleshoot the Verify Operation in ADC Tools

You can click Verify after you use the following components of ADC Tools to verify that directory synchronization is successful:

• Step 3: Resource Mailbox Wizard
• Step 4: Connection Agreement Wizard

You may receive error messages that are returned from the Verify operation if any of the following conditions are true:

• Replication of objects in Active Directory is not yet complete.
• Some Connection Agreements were not selected.
• The credentials that you entered in the Connection Agreement wizard do not have sufficient permissions to the appropriate folders.

To troubleshoot this behavior, do any one of the following, depending on your situation:

• Make sure that directory synchronization is complete and that all objects are replicated in Active Directory. The time that this takes can be up to several days, depending on the size of the forest and the site link schedule. When directory synchronization is complete, click Verify.
• Check the Application event log for events where the Source entry is MSADC. By viewing the events, you can determine the Connection Agreements that are configured with incorrect credentials.

If ADC Tools does not start correctly when you run it, you may want to turn on ADC Tools debug logging. To do so:

1. Quit Active Directory Connector Services (if it is running).
2. On the server running ADC Tools, click Start, right-click My Computer, and then click Manage.
3. Click the Advanced tab, and then click Environment Variables.
4. Under System variables, click New.
5. In the Variable Name box, type DebugADCTools.
6. In the Variable Value box, type 1, and then click OK.
7. Click OK, and then click OK.

For more information about Exchange Server Deployment Tools, see the Exdeploy.chm file that is located in the Support\ExDeploy folder of the Exchange 2003 CD. For more information about ADC Tools, open Active Directory Connector Services, right-click ADC Tools, and then click Help.