Microsoft Exchange Server 2013 adds new and modifies existing Active Directory schema classes and attributes. This reference topic provides a summary of the Active Directory schema changes that are made when you install the release to manufacturing (RTM) version of Exchange 2013 or any of its cumulative updates or service packs. Refer to the .ldf files for more information about changes to the Active Directory schema. The .ldf files are located in the \amd64\Setup\Data\ directory in the Exchange installation files.
Exchange 2013 schema updates are cumulative. Each release includes all of the changes included in previous releases. This means that if you skip a release, you may still need to apply schema updates even if the release you're installing doesn't include its own changes. The following table gives examples of when your Active Directory will be updated, and when it's already up-to-date.
Current Exchange 2013 release installed
New Exchange 2013 release being installed
Are schema updates required?
Service Pack 1
Cumulative Update 8 through Cumulative Update 21
Yes, schema updates are required. You need to apply the CU5, CU6, and CU7 schema updates.
Cumulative Update 6
Cumulative Update 8 through Cumulative Update 21
Yes, schema updates are required. You need to apply the CU7 schema updates.
Cumulative Update 7
Cumulative Update 8 through Cumulative Update 21
No, no schema updates are required. No schema changes are made in CU7 through CU21.
Note
The Active Directory schema changes identified in this topic may not apply to all editions of an Exchange Server version.
To verify that Active Directory has been successfully prepared, see the "How do you know this worked?" section in Prepare Active Directory and domains.
Exchange 2013 CU23 Active Directory schema changes
No changes are made to the Active Directory schema in Exchange 2013 CU23.
Exchange 2013 CU22 Active Directory schema changes
No changes are made to the Active Directory schema in Exchange 2013 CU22.
However, a reduction in Active Directory permissions is made: The "Allow" Access Control Entry (ACE) that grants the "Exchange Windows Permissions" group the "Write DACL" right to the "User" and "INetOrgPerson" inherited object types is updated to include the "Inherit Only" flag on the domain root object. For more information, see KB 4490059.
Exchange 2013 CU21 Active Directory schema changes
No changes are made to the Active Directory schema in Exchange 2013 CU21.
Exchange 2013 CU20 Active Directory schema changes
No changes are made to the Active Directory schema in Exchange 2013 CU20.
Exchange 2013 CU19 Active Directory schema changes
No changes are made to the Active Directory schema in Exchange 2013 CU19.
Exchange 2013 CU18 Active Directory schema changes
No changes are made to the Active Directory schema in Exchange 2013 CU18.
Exchange 2013 CU17 Active Directory schema changes
No changes are made to the Active Directory schema in Exchange 2013 CU17.
Exchange 2013 CU16 Active Directory schema changes
No changes are made to the Active Directory schema in Exchange 2013 CU16.
Exchange 2013 CU15 Active Directory schema changes
No changes are made to the Active Directory schema in Exchange 2013 CU15.
Exchange 2013 CU14 Active Directory schema changes
No changes are made to the Active Directory schema in Exchange 2013 CU14.
Exchange 2013 CU13 Active Directory schema changes
No changes are made to the Active Directory schema in Exchange 2013 CU13.
Exchange 2013 CU12 Active Directory schema changes
No changes are made to the Active Directory schema in Exchange 2013 CU12.
Exchange 2013 CU11 Active Directory schema changes
No changes are made to the Active Directory schema in Exchange 2013 CU11.
Exchange 2013 CU10 Active Directory schema changes
No changes are made to the Active Directory schema in Exchange 2013 CU10.
Exchange 2013 CU9 Active Directory schema changes
No changes are made to the Active Directory schema in Exchange 2013 CU9.
Exchange 2013 CU8 Active Directory schema changes
No changes are made to the Active Directory schema in Exchange 2013 CU8.
Exchange 2013 CU7 Active Directory schema changes
This section summarizes the changes that are made to the Active Directory schema when you install Exchange 2013 CU7. This section includes the following subsections:
Classes modified by Exchange 2013 CU7
Attributes added by Exchange 2013 CU7
Classes modified by Exchange 2013 CU7
This section contains the classes modified in Exchange 2013 CU7.
Class
Change
Attribute/Class
Mail-Recipient
add: mayContain
msExchStsRefreshTokensValidFrom
ms-Exch-Base-Class
add: mayContain
msExchMultiMailboxGUIDs
ms-Exch-Base-Class
add: mayContain
msExchMultiMailboxLocationsLink
Group
add: auxiliaryClass
msExchMailStorage
Attributes added by Exchange 2013 CU7
This section contains the attributes added in Exchange 2013 CU7.
ms-Exch-Multi-Mailbox-GUID
ms-Exch-Sts-Refresh-Tokens-Valid-From
ms-Exch-Multi-Mailbox-Locations-Link
Exchange 2013 CU6 Active Directory schema changes
This section summarizes the changes that are made to the Active Directory schema when you install Exchange 2013 CU6. This section includes the following subsections:
Classes modified by Exchange 2013 CU6
Attributes added by Exchange 2013 CU6
Attributes modified by Exchange 2013 CU6
Classes modified by Exchange 2013 CU6
This section contains the classes modified in Exchange 2013 CU6.
Class
Change
Attribute/Class
Mail-Recipient
add: mayContain
msExchAuxMailboxParentObjectIdLink
Top
add: mayContain
msExchAuxMailboxParentObjectIdBL
Attributes added by Exchange 2013 CU6
This section contains the attributes added in Exchange 2013 CU6.
ms-Exch-Aux-Mailbox-Parent-Object-Id-Link
ms-Exch-Aux-Mailbox-Parent-Object-Id-BL
Attributes modified by Exchange 2013 CU6
This section contains the attributes modified in Exchange 2013 CU6.
Attribute
Change
Value
ms-Exch-Smtp-TLS-Certificate
replace: rangeUpper
1024
Exchange 2013 CU5 Active Directory schema changes
This section summarizes the changes that are made to the Active Directory schema when you install Exchange 2013 CU5. This section includes the following subsections:
Classes added by Exchange 2013 CU5
Attributes added by Exchange 2013 CU5
Attributes modified by Exchange 2013 CU5
Classes added by Exchange 2013 CU5
This section contains the classes added in Exchange 2013 CU5.
Class
Change
ms-Exch-Unified-Policy
ntdsSchemaAdd
ms-Exch-Unified-Rule
ntdsSchemaAdd
Attributes added by Exchange 2013 CU5
This section contains the attributes added in Exchange 2013 CU5.
ms-Exch-UG-Member-Link
ms-Exch-UG-Member-BL
Attributes modified by Exchange 2013 CU5
This section contains the attributes modified in Exchange 2013 CU5.
Attribute
Change
Value
ms-Exch-Smtp-Receive-Tls-Certificate-Name
Replace: rangeUpper
1024
Mail-Recipient
Replace: mayContain
msExchUGMemberLink
Top
Replace: mayContain
msExchUGMemberBL
Exchange 2013 SP1 Active Directory schema changes
This section summarizes the changes that are made to the Active Directory schema when you install Exchange 2013 Service Pack 1 (SP1). This section includes the following subsections:
Classes added by Exchange 2013 SP1
Classes modified by Exchange 2013 SP1
Attributes added by Exchange 2013 SP1
Global catalog attributes added by Exchange 2013 SP1
Attributes modified by Exchange 2013 SP1
Classes added by Exchange 2013 SP1
This section contains the classes added in Exchange 2013 SP1.
Class
Change
ms-Exch-Intra-Organization-Connector
ntdsSchemaModify
ms-Exch-Client-Access-Rule
ntdsSchemaModify
Classes modified by Exchange 2013 SP1
This section contains the attributes added in Exchange 2013 SP1.
Class
Change
Attribute/Class
ms-Exch-Mail-Storage
add: mayContain
msExchMailboxContainerGuid
ms-Exch-Mail-Storage
add: mayContain
msExchUnifiedMailbox
ms-Exch-OAB
add: mayContain
msExchOABGeneratingMailboxLink
Top
add: mayContain
msExchOABGeneratingMailboxBL
Attributes added by Exchange 2013 SP1
This section contains the attributes added in Exchange 2013 SP1.
ms-Exch-OAB-Generating-Mailbox-Link
ms-Exch-OAB-Generating-Mailbox-BL
Global catalog attributes added by Exchange 2013 SP1
The following global catalog attributes are added by Exchange 2013 SP1:
ms-Exch-Mailbox-Container-Guid
ms-Exch-Unified-Mailbox
Attributes modified by Exchange 2013 SP1
This section contains the attributes modified in Exchange 2013 SP1.
Attribute
Change
Value
Ms-exch-schema-version-pt
rangeUpper
15292
Exchange 2013 CU3 Active Directory schema changes
This section summarizes the changes that are made to the Active Directory schema when you install Exchange 2013 CU3. This section includes the following subsections:
Classes added by Exchange 2013 CU3
Attributes added by Exchange 2013 CU3
Attributes modified by Exchange 2013 CU3
Classes added by Exchange 2013 CU3
This section contains the classes added in Exchange 2013 CU3.
Class
Change
msExchThrottlingPolicy
ntdsSchemaModify
Attributes added by Exchange 2013 CU3
This section contains the attributes added in Exchange 2013 CU3.
ms-Exch-Encryption-Throttling-Policy-State-Ex
Attributes modified by Exchange 2013 CU3
This section contains the attributes modified in Exchange 2013 CU3.
This section summarizes the changes that are made to the Active Directory schema when you install Exchange 2013 CU2. This section includes the following subsections:
Classes added by Exchange 2013 CU2
Classes modified by Exchange 2013 CU2
Attributes added by Exchange 2013 CU2
Attributes modified by Exchange 2013 CU2
Classes added by Exchange 2013 CU2
This section contains the classes added in Exchange 2013 CU2.
Class
Change
ms-Exch-Config-Settings
ntdsSchemaAdd
ms-Exch-Encryption-Virtual-Directory
ntdsSchemaAdd
Classes modified by Exchange 2013 CU2
This section contains the classes modified in Exchange 2013 CU2.
Class
Change
Attribute/Class
ms-Exch-Base-Class
Add:mayContain
msExchTenantCountry
ms-Exch-Base-Class
Add:mayContain
msExchConfigurationXML
ms-Exch-Account-Forest
Add:mayContain
msExchPartnerId
Attributes added by Exchange 2013 CU2
This section contains the attributes added in Exchange 2013 CU2.
ms-Exch-Tenant-Country
Attributes modified by Exchange 2013 CU2
This section contains the attributes modified in Exchange 2013 CU2.
Attribute
Change
Value
ms-Exch-Sync-Cookie
rangeUpper
262144
ms-Exch-Schema-Version-Pt
rangeUpper
15281
Object IDs added by Exchange 2013 CU2
The following class object IDs are added when you install Exchange 2013 CU1:
1.2.840.113556.1.5.7000.62.50204
1.2.840.113556.1.5.7000.62.50205
The following attribute object IDs are added when you install Exchange 2013 CU1:
1.2.840.113556.1.4.7000.102.52130
Exchange 2013 CU1 Active Directory schema changes
This section summarizes the changes that are made to the Active Directory schema when you install Exchange 2013 CU1. This section includes the following subsections:
Classes modified by Exchange 2013 CU1
Classes added by Exchange 2013 CU1
Attributes modified by Exchange 2013 CU1
Object IDs added by Exchange 2013 CU1
Indexed attributes added by Exchange 2013 CU1
Property sets modified by Exchange 2013 CU1
Global catalog attributes added by Exchange 2013 CU1
Classes modified by Exchange 2013 CU1
This section contains the classes modified in Exchange 2013 CU1.
Class
Change
Attribute/Class
Exch-Configuration-Unit-Container
add:mayContain
msExchArchiveRelease
Exch-Configuration-Unit-Container
add:mayContain
msExchMailboxRelease
Exch-Exchange-Server
add:mayContain
msExchArchiveRelease
Exch-Exchange-Server
add:mayContain
msExchMailboxRelease
Exch-OAB
add:mayContain
msExchLastUpdateTime
Exch-Accepted-Domain
add:mayContain
msExchOfflineOrgIdHomeRealmRecord
Exch-Base-Class
add:mayContain
msExchCapabilityIdentifiers
Exch-Base-Class
add:mayContain
msExchObjectID
Exch-Base-Class
add:mayContain
msExchProvisioningTags
Exch-Organization-Container
add:mayContain
msExchMaxABP
Exch-Organization-Container
add:mayContain
msExchMaxOAB
Exch-Organization-Container
add:mayContain
pFContacts
Exch-Team-Mailbox-Provisioning-Policy
add:mayContain
msExchConfigurationXML
Exch-MDB-Availability-Group
add:mayContain
msExchEvictedMembersLink
Top
add:mayContain
msExchEvictedMembersBL
Exch-On-Premises-Organization
add:mayContain
msExchTrustedDomainLink
Exch-OWA-Mailbox-Policy
add:mayContain
msExchConfigurationXML
Exch-OWA-Virtual-Directory
add:mayContain
msExchConfigurationXML
Classes added by Exchange 2013 CU1
This section contains the classes modified in Exchange 2013 CU1.
Class
Change
Exch-Mapi-Virtual-Directory
ntdsSchemaAdd
Exch-Push-Notifications-App
ntdsSchemaAdd
Attributes modified by Exchange 2013 CU1
This section contains the attributes modified in Exchange 2013 CU1.
Class
Change
Attribute/Class
Exch-Mailflow-Policy-Transport-Rules-Template-Xml
rangeUpper
256000
Exch-Configuration-Unit-Container
rangeUpper
15254
Object IDs added by Exchange 2013 CU1
The following attribute object IDs are added when you install Exchange 2013 CU1:
1.2.840.113556.1.4.7000.102.52109
1.2.840.113556.1.4.7000.102.52110
1.2.840.113556.1.4.7000.102.52127
1.2.840.113556.1.4.7000.102.52126
1.2.840.113556.1.4.7000.102.52128
1.2.840.113556.1.4.7000.102.52129
The following class object IDs are added when you install Exchange 2013 CU1:
1.2.840.113556.1.5.7000.62.50202
1.2.840.113556.1.5.7000.62.50203
Indexed attributes added by Exchange 2013 CU1
The following table lists the attributes that are added to the list of indexed attributes when you install Exchange 2013 CU1.
Attribute
Search flag value
ms-Exch-Provisioning-Tags
1
Property sets modified by Exchange 2013 CU1
The following property sets are modified when you install Exchange 2013 CU1:
Exchange-Information
Global catalog attributes added by Exchange 2013 CU1
The following global catalog attributes are added by Exchange 2013 CU1:
ms-Exch-Offline-OrgId-Home-Realm-Record
ms-Exch-EvictedMembers-Link
ms-Exch-EvictedMembers-BL
Exchange 2013 RTM Active Directory schema changes
This section summarizes the changes that are made to the Active Directory schema when you install Exchange 2013 RTM. This section includes the following subsections:
Classes modified by Exchange 2013 RTM
Attributes modified by Exchange 2013 RTM
Classes added by Exchange 2013 RTM
Attributes added by Exchange 2013 RTM
MAPI IDs added by Exchange 2013 RTM
Extended rights added by Exchange 2013 RTM
Object IDs added by Exchange 2013 RTM
Indexed attributes added by Exchange 2013 RTM
Global catalog attributes added by Exchange 2013 RTM
Classes modified by Exchange 2013 RTM
This section contains the classes modified in Exchange 2013 RTM.
The following MAPI IDs are added when you install Exchange 2013 RTM:
36066
36067
Extended rights added by Exchange 2013 RTM
The following table lists the extended rights that are added when you install Exchange 2013 RTM. Installing Exchange 2013 RTM doesn't modify any existing extended rights.
Determine the best approach to moving domain controllers to Windows Server 2025. Learn how the Active Directory Migration Tool can consolidate domains within a forest or migrate domains to a new AD DS forest.