Exchange Server 2007 Service Pack 1 servers continue to contact a domain controller even after you exclude it by using the Set-ExchangeServer command

In an Exchange Server 2007 Service Pack 1 (SP1) environment, you exclude a domain controller by using the StaticExcludedDomainControllers option for the Set-ExchangeServer command. However, Exchange Server 2007 SP1 servers still try to connect the domain controller by using Lightweight Directory Access Protocol (LDAP) and Local Security Authentication Server (LSASS) calls.

Note The StaticExcludedDomainControllers option is used to exclude a list of domain controllers that the server uses.

This problem occurs because Exchange Server 2007 SP1 only excludes the domain controller from the list for the configuration domain controller role but not for the global catalog role. Therefore, the domain controller is still involved in global catalog-related communications.

To resolve this problem, install Update Rollup 9 for Exchange 2007 Service Pack 1.
For more information about Update Rollup 9 for Exchange Server 2007 Service Pack 1, see the following Exchange Help topic: For more information about how to obtain the latest Exchange service pack or update rollup, see the following Exchange Help topic:

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

For more information about the Set-ExchangeServer command, visit the following Microsoft Web site:

http://technet.microsoft.com/en-us/library/bb123716.aspx