A Connection Agreement does not replicate data from Exchange 2000 Server to Exchange Server 5.5

When you replicate data between a computer that is running Microsoft Exchange 2000 Server and a computer that is running Microsoft Exchange Server 5.5 by using an Active Directory Connector (ADC) Connection Agreement, you experience the following symptoms:

• Replication works from the Exchange 5.5 computer to the Exchange 2000 computer.
• Replication does not work from the Exchange 2000 computer to the Exchange 5.5 computer.

No events are logged in the application event log.

This behavior occurs if the organizational unit or the objects that are contained in the organizational unit are Microsoft Active Directory directory service objects that contain an explicit Deny access control entry (ACE). By default, Active Directory objects that contain an explicit Deny access control entry are not replicated to the Exchange directory because Deny permissions are not represented for objects in the Exchange directory.

To work around this behavior, configure the ADC Connection Agreement to replicate Active Directory objects that contain an explicit Deny access control entry to the Exchange directory. To do so, follow these steps:

1. Click Start, point to Programs, point to Administrative Tools, and then click Active Directory Connector.
2. In the right pane, double-click the Connection Agreement that you want to configure.
3. Click the From Windows tab, and then click to select the Replicate secured Active Directory objects to the Exchange Directory check box.

For more information about how to replicate Active Directory objects that contain an explicit Deny access control entry (ACE) to the Exchange directory in Exchange 2000, see the "Replicate Secured Objects to the Exchange Directory" topic in Microsoft Exchange 2000 Server Help. To obtain the Exchange 2000 Help documentation, visit the following Microsoft Web site: