Interesting post. I'm wondering, have you noticed this bug regarding the uniqueness check and contacts: <br> <br>* Create a mail-enabled user <br>* Create a mail-enabled contact with an external address. <br>* (wait for the RUS to process) <br>* Open the contact and change the 'mail' value from the 'general' tab to equal the primary address of the user in the previous step. <br>* OK out of the property sheet. <br> <br>DSA will alert you of the conflict, but if you open up the object again (or view it from LDAP), the conflicting change has indeed been written.