From: Buckeye Tech on 17 Nov 2009 17:00 I am not able to move certain mailboxes to our new exchange 2010 server. I get the error message: Error: Active Directory operation failed on {Domain Controller Name}. This error is not retriable. Additional information: Insufficient access rights to perform the operation. Active directory response: 00002098: SecErr: DSID-03150E8A, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0 The user has insufficient access rights. I even tried using the main Domain Admin account and it still will not move the box. I have to go in manually and cancel the request. I have receiced this error message on 2 of the 10 boxes I wanted to move over for testing. Other mailboxes have moved just fine. Where should I begin troubleshooting this problem? Thanks.
From: Ed Crowley [MVP] on 17 Nov 2009 23:43 A domain administrator does not necessarily have Exchange rights. Is the account you're using in the Exchange Organization Administrators group? From what version of Exchange are you moving, and does the account have rights there as well? -- Ed Crowley MVP "There are seldom good technological solutions to behavioral problems." .. "Buckeye Tech" <BuckeyeTech(a)discussions.microsoft.com> wrote in message news:29BFB328-76E3-46CF-BBB1-2699A3190C57(a)microsoft.com... >I am not able to move certain mailboxes to our new exchange 2010 server. I > get the error message: > > Error: > Active Directory operation failed on {Domain Controller Name}. This error > is > not retriable. Additional information: Insufficient access rights to > perform > the operation. > Active directory response: 00002098: SecErr: DSID-03150E8A, problem 4003 > (INSUFF_ACCESS_RIGHTS), data 0 > > > The user has insufficient access rights. > > > I even tried using the main Domain Admin account and it still will not > move > the box. I have to go in manually and cancel the request. I have receiced > this error message on 2 of the 10 boxes I wanted to move over for testing. > Other mailboxes have moved just fine. > > > Where should I begin troubleshooting this problem? > > > Thanks.
From: Buckeye Tech on 18 Nov 2009 15:23 Thanks for the reply. Yes, the account I am using is in the Exchange Organization Administrators group. I am moving mailboxes from an Exchange 2007 sp2 mailserver to the new Exchange 2010. I can move mailboxes between databases on the Exchange 2007 box and mailboxes to another Exchange 2007 sp2 box no problems with this account. "Ed Crowley [MVP]" wrote: > A domain administrator does not necessarily have Exchange rights. Is the > account you're using in the Exchange Organization Administrators group? > From what version of Exchange are you moving, and does the account have > rights there as well? > -- > Ed Crowley MVP > "There are seldom good technological solutions to behavioral problems." > .. > > "Buckeye Tech" <BuckeyeTech(a)discussions.microsoft.com> wrote in message > news:29BFB328-76E3-46CF-BBB1-2699A3190C57(a)microsoft.com... > >I am not able to move certain mailboxes to our new exchange 2010 server. I > > get the error message: > > > > Error: > > Active Directory operation failed on {Domain Controller Name}. This error > > is > > not retriable. Additional information: Insufficient access rights to > > perform > > the operation. > > Active directory response: 00002098: SecErr: DSID-03150E8A, problem 4003 > > (INSUFF_ACCESS_RIGHTS), data 0 > > > > > > The user has insufficient access rights. > > > > > > I even tried using the main Domain Admin account and it still will not > > move > > the box. I have to go in manually and cancel the request. I have receiced > > this error message on 2 of the 10 boxes I wanted to move over for testing. > > Other mailboxes have moved just fine. > > > > > > Where should I begin troubleshooting this problem? > > > > > > Thanks. > > . >
From: Gary Fletcher on 19 Nov 2009 07:38 For me it was AD permissions. Go to AD and find the mailbox in question. Properties > Security > Advanced. Check the box to allow inheritable permissions from parent. Let AD replication. Problem solved. "Buckeye Tech" wrote: > Thanks for the reply. > > Yes, the account I am using is in the Exchange Organization Administrators > group. I am moving mailboxes from an Exchange 2007 sp2 mailserver to the new > Exchange 2010. I can move mailboxes between databases on the Exchange 2007 > box and mailboxes to another Exchange 2007 sp2 box no problems with this > account. > > "Ed Crowley [MVP]" wrote: > > > A domain administrator does not necessarily have Exchange rights. Is the > > account you're using in the Exchange Organization Administrators group? > > From what version of Exchange are you moving, and does the account have > > rights there as well? > > -- > > Ed Crowley MVP > > "There are seldom good technological solutions to behavioral problems." > > .. > > > > "Buckeye Tech" <BuckeyeTech(a)discussions.microsoft.com> wrote in message > > news:29BFB328-76E3-46CF-BBB1-2699A3190C57(a)microsoft.com... > > >I am not able to move certain mailboxes to our new exchange 2010 server. I > > > get the error message: > > > > > > Error: > > > Active Directory operation failed on {Domain Controller Name}. This error > > > is > > > not retriable. Additional information: Insufficient access rights to > > > perform > > > the operation. > > > Active directory response: 00002098: SecErr: DSID-03150E8A, problem 4003 > > > (INSUFF_ACCESS_RIGHTS), data 0 > > > > > > > > > The user has insufficient access rights. > > > > > > > > > I even tried using the main Domain Admin account and it still will not > > > move > > > the box. I have to go in manually and cancel the request. I have receiced > > > this error message on 2 of the 10 boxes I wanted to move over for testing. > > > Other mailboxes have moved just fine. > > > > > > > > > Where should I begin troubleshooting this problem? > > > > > > > > > Thanks. > > > > . > >
From: Edgar on 26 Nov 2009 15:48 On Nov 18, 4:23 pm, Buckeye Tech <BuckeyeT...(a)discussions.microsoft.com> wrote: > Thanks for the reply. > > Yes, the account I am using is in the Exchange Organization Administrators > group. I am moving mailboxes from an Exchange 2007 sp2 mailserver to the new > Exchange 2010. I can move mailboxes between databases on the Exchange 2007 > box and mailboxes to another Exchange 2007 sp2 box no problems with this > account. > > "Ed Crowley [MVP]" wrote: > > A domain administrator does not necessarily have Exchange rights. Is the > > account you're using in the Exchange Organization Administrators group? > > From what version of Exchange are you moving, and does the account have > > rights there as well? > > -- > > Ed Crowley MVP > > "There are seldom good technological solutions to behavioral problems." > > .. > > > "Buckeye Tech" <BuckeyeT...(a)discussions.microsoft.com> wrote in message > >news:29BFB328-76E3-46CF-BBB1-2699A3190C57(a)microsoft.com... > > >I am not able to move certain mailboxes to our new exchange 2010 server. I > > > get the error message: > > > > Error: > > > Active Directory operation failed on {Domain Controller Name}. This error > > > is > > > not retriable. Additional information: Insufficient access rights to > > > perform > > > the operation. > > > Active directory response: 00002098: SecErr: DSID-03150E8A, problem 4003 > > > (INSUFF_ACCESS_RIGHTS), data 0 > > > > The user has insufficient access rights. > > > > I even tried using the main Domain Admin account and it still will not > > > move > > > the box. I have to go in manually and cancel the request. I have receiced > > > this error message on 2 of the 10 boxes I wanted to move over for testing. > > > Other mailboxes have moved just fine. > > > > Where should I begin troubleshooting this problem? > > > > Thanks. > > > . Helo, I am having the same problem, did you find any solution?
|
Pages: 1 Prev: Error when updating Outlook calendar item Next: use OWA 2010 as default client |