This is a known product bug in Exchange Server 2010. When multiple Client Access Server (CAS) servers use multiple domain controllers, a CNF object may be created as a duplicate of an existing device. This issue occurs during replication of Active Directory objects between multiple domain controllers.
Warning Using ADSI Edit incorrectly can cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that problems that result from the incorrect use of ADSI Edit can be resolved. Use ADSI Edit at your own risk.
- Search Active Directory Domain Services (AD DS) for the duplicate deviceID. To do this, follow these steps:
- On a server that has AD DS installed, start ADSI Edit. To do this, click Start, click Run, type adsiedit.msc, and then click OK.
- If ADSI Edit is not connected to a domain controller, right-click ADSI Edit in the console tree, click Connect To, and then enter the server name under Computer.
- In the ADSI Edit console tree, click Default naming context.
- On the Action pane on the right side, click More Actions, click New, and then click Query.
- Type a name for the query, click Browse under Root of Search, and then select the top-level domain.
- Customize your query condition to pull up the affected user object.
Note Any devices that have duplicate deviceIDs will be listed in the query results. The results are listed under Default naming context in the ADSI Edit console tree.
- Expand the search results, and then click the object.
- In the middle pane, you'll see the ActiveSync device. Right-click the device, and then select Delete in the drop-down list.
Article ID: 2897719 - Last Review: Oct 10, 2013 - Revision: 1