Exchange

Microsoft Exchange – OU picker is empty when creating new user

We've migrated one of our Clients fairly early but recently we got complain that when new user is created from ECP on Exchange 2013 there's no way to pick Organizational Unit (OU) where the user is supposed to be.

❗ Problem Description

It seems that OU Picker was not displaying any OU's. This is strange and a bit unexpected.

Quick verification that Get-OrganizationalUnit actually works as designed confirms that there must be something else here.

✅ Solution

It seems it's well known issue for Exchange Server 2013. It's described in KB303817 but a title is a bit misleading Exchange Server 2013 doesn't display all OUs when it creates a new mailbox. In our case it was not showing all organizational units and not just some of them. The fix is simple from there.

Check OU count in Exchange Management Shell

(Get-OrganizationalUnit -ResultSize unlimited).count

Modify each servers web.config: \\<server>\c$\Program Files\Microsoft\Exchange Server\V15\ClientAccess\ecp\web.config by adding

<!-- allows the OU picker when placing a new mailbox in its designated organizational unit to retrieve all OUs - default value is 500 -->
<add key="GetListDefaultResultSize" value="2000" />

just before AppSettings end </appSetting>

After that it's just matter of opening IIS, finding MSExchangeECPAppPool and recyling it. 

Do this for every server that holds Mailbox Role.

📝 Notes

This change has to be added to web.config every time there's new Cumulative Update installed as it overwrites web.config. Make sure to add it to your TO DO list for Exchange upgrades.

This post was last modified on June 6, 2025 21:15

Przemyslaw Klys

System Architect with over 14 years of experience in the IT field. Skilled, among others, in Active Directory, Microsoft Exchange and Office 365. Profoundly interested in PowerShell. Software geek.

Share
Published by
Przemyslaw Klys

Recent Posts

Supercharging Your Network Diagnostics with Globalping for NET

Ever wondered how to run network diagnostics like Ping, Traceroute, or DNS queries from probes…

7 days ago

Automating Network Diagnostics with Globalping PowerShell Module

Are you tired of manually running network diagnostics like Ping, Traceroute, or DNS queries? The…

1 week ago

Enhanced Dashboards with PSWriteHTML – Introducing InfoCards and Density Options

Discover new features in the PSWriteHTML PowerShell module – including New-HTMLInfoCard, improved layout controls with…

2 weeks ago

Mastering Active Directory Hygiene: Automating SIDHistory Cleanup with CleanupMonster

Security Identifier (SID) History is a useful mechanism in Active Directory (AD) migrations. It allows…

2 weeks ago

Upgrade Azure Active Directory Connect fails with unexpected error

Today, I made the decision to upgrade my test environment and update the version of…

2 weeks ago

Mastering Active Directory Hygiene: Automating Stale Computer Cleanup with CleanupMonster

Have you ever looked at your Active Directory and wondered, "Why do I still have…

2 weeks ago