Article ID: 2909303 - View products that this article applies to.
Assume that you add a user principal name (UPN) suffix by using Active Directory Domains and Trusts on a domain controller that is running Microsoft Windows Server 2012 R2 in a Microsoft Exchange Server 2013 environment. When you check the UPN by using Exchange Admin Center (EAC) or by running the Get-UserPrincipalNamesSuffix cmdlet in Exchange Management Shell (EMS), the added UPN suffix is not displayed.
This issue occurs because the Exchange Trusted Subsystem security group does not have permissions to read the "CN=Partitions,CN=Configuration,DC=YourDomain,DC=YourRootDomain" entry.
To work around this issue, follow these steps to add the Read permission to the Exchange Trusted Subsystem security group:
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
For more information about how to add UPN suffixes by using Active Directory Domains and Trusts, go to the following Microsoft website:
How to add UPN suffixesFor more information about the Get-UserPrincipalNamesSuffix cmdlet, go to the following Microsoft website:
General information about the Get-UserPrincipalNamesSuffix cmdletFor more information about the ADSI Edit tool, go to the following Microsoft website:
Article ID: 2909303 - Last Review: November 22, 2013 - Revision: 1.0