The Update-Recipient command does not update specified domain controller parameters when you use Identity Lifecycle Manager (ILM) 2007 to migrate mail users to mailbox users in Exchange Server 2007 Service Pack 1

Consider the following scenario. In a Microsoft Exchange Server 2007 Service Pack 1 (SP1) environment, you use Microsoft Identity Lifecycle Manager (ILM) 2007 to migrate mail users to mailbox users. To do this, the Update-Recipient command is used to add Microsoft Exchange Server 2007 attributes for the recipient objects that are created by the global address list (GAL) Synchronization management agent in ILM 2007. However, in this scenario, you receive the following error message in a multiple domain controller (DC) topology:

When ILM 2007 converts a mail user to a mailbox user, it removes the targetAddress attribute,sets the homeMDB attribute, and then calls the Update-Recipient command. The problem is that the Update-Recipient command uses a configuration DC first. This contains the unmodified mail user information. The Update-Recipient command should use the specified DC. This contains the updated information. In this situation, the Update-Recipient command succeeds without errors. However, the target object is not updated because the target object is in an inconsistent state. Therefore, successive tasks fail and the error that is mentioned in the "Symptoms" section is returned.

To resolve this problem, install Exchange 2007 Service Pack 2 (SP2). To obtain Exchange 2007 SP2, visit the following Microsoft Download Center Web site:

Configuration domain controllers: Exchange Server 2007 SP1 can read from multiple domain controllers. To avoid conflicts when you apply configuration changes to Active Directory, Exchange Server 2007 SP1 writes its configuration information to a single domain controller. This is known as a configuration DC. When you select a configuration DC from the list of working domain controllers, the DSAccess component gives preference to a DC over a global catalog server.

Mail user: A mail-enabled Active Directory user who represents a user outside the Exchange organization. Each mail user has an external e-mail address. A mail user resembles a mail contact, except that a mail user has Active Directory logon credentials and can access resources.

Mailbox user: A mail-enabled Active Directory user object that has mailbox attributes.

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.