XADM: An Address List Filtering String That Contains a Specific Pattern Causes High CPU Use in the System Attendant

Article translations Article translations
Article ID: 305081 - View products that this article applies to.
This article was previously published under Q305081
This article has been archived. It is offered "as is" and will no longer be updated.
Expand all | Collapse all


The system attendant service (Mad.exe) may cause high CPU use if the address list filtering string's pattern is similar to following nested Lightweight Directory Access Protocol (LDAP) filter format:
(&(&(&(&(...)))) or (|(|(|(|(..))))


This problem can occur because this address list filtering pattern causes the Recipient Update Service to go into an exponential memory and CPU cycle while the Recipient Update Service parses the text filters into an internal data structure.


To resolve this problem, obtain the latest service pack for Microsoft Exchange 2000 Server. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:
301378 XGEN: How to Obtain the Latest Exchange 2000 Server Service Pack
The English version of this fix should have the following file attributes or later:

Component: System attendant

Collapse this tableExpand this table
File nameVersion
Abv_dg.dll 6.0.4720.34

NOTE: Because of file dependencies, this update requires Microsoft Exchange 2000 Server Service Pack 1.


Microsoft has confirmed that this is a problem in Microsoft Exchange 2000 Server. This problem was first corrected in Microsoft Exchange 2000 Server Service Pack 2.


Article ID: 305081 - Last Review: October 24, 2013 - Revision: 1.3
  • Microsoft Exchange 2000 Server Standard Edition
kbnosurvey kbarchive kbbug kbexchange2000presp2fix kbexchange2000sp2fix kbfix KB305081

Give Feedback


Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com