Symptoms
When a user who is a member of a role group (defined as a custom management scope so that it contains mailboxes across domains) tries to view detail properties of mailboxes in a child domain, they receive the following error message:
HTTP 500 due to ADReferralException
Note When an administrator tries to view detail properties of mailboxes in root or child domains, they do not receive an error message.
Cause
This issue occurs because the Active Directory object is not correctly retrieved.
Resolution
Exchange Server 2016
To resolve this issue, install Cumulative Update 10 for Exchange Server 2016 or a later cumulative update for Exchange Server 2016.
Exchange Server 2013
To resolve this issue, install Cumulative Update 21 for Exchange Server 2013 or a later cumulative update for Exchange Server 2013.
Status
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
References
Learn about the terminology that Microsoft uses to describe software updates.