3.1 Introduction

By now you are probably familiar with the basic operation of the Active Directory Connector. In short, it's a utility that uses CAs to define an instance of synchronization between the Exchange 5.5 Directory Service and the AD. At first glance, its granularity of operation seems limited. From the Exchange 5.5 Directory Service you select the contents of one or more recipient containers to be synchronized into a single Organizational Units in the AD. Similarly, from the AD, you select the contents of one or more Organizational Units to be synchronized into a single recipient container in the Exchange 5.5 Directory Service.

In general, if the source recipient container or Organizational Units contains only mailbox entries or user objects, you must synchronize all of those mailbox entries or user objects; if the source recipient container or Organizational Units contains only custom recipients or contacts, you must synchronize all of those custom recipients or contacts; and similarly for distribution lists or groups. However, it's often desirable to be able to synchronize just a subset of the objects within a recipient container or an Organizational Units. For example, you may wish to exclude Exchange 5.5 mailboxes that are shared between multiple users and not associated with any Windows NT4 account in particular, the so-called resource mailboxes. Similarly, synchronizing from the AD to the Exchange 5.5 Directory Service, you may wish to select only those mailenabled user objects in a particular geographic location, even though they may all reside in the...