I am using a java LDAP API to update certain values in Active Directory.
When I update a user's sn (surname AKA last name) and/or givenName (AKA first name), I'm noticing that their 'mail' attribute is automatically being updated as well (we're running Exchange Server 2003). The desired behavior is that the mail attribute remain as-is regardless of what we change the first and last name to programmatically. Our admins say that there is nothing that we can do about this from their end as it's something automatic within Active Directory.
I'm looking for ideas/work-arounds to be able to preserve the mail address when updating it from my application - preferably in a manner that wouldn't disrupt instances where someone might want that mail address to be updated (i.e. an admin creating a new account via the AD admin tools).