Error when moving Mailbox from Exchange 2003 to 2010

Posted on 2009-12-18
Last Modified: 2012-05-08
Getting the following message when I try to movea mailbox from 2003 2010. I am lokked in as thee domain administrator.

Summary: 1 item(s). 0 succeeded, 1 failed.
Elapsed time: 00:00:02


Active Directory operation failed on This error is not retriable. Additional information: Insufficient access rights to perform the operation.
Active directory response: 00002098: SecErr: DSID-03150BB9, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

The user has insufficient access rights.

Exchange Management Shell command attempted:
' 7 Security Guide EC Client OU/Department OU/Windows Windows 7 Users OU/GPAT Test' | New-MoveRequest -TargetDatabase 'GPPSDSTAFF'

Elapsed Time: 00:00:02

Question by:GPPSD2357
    LVL 8

    Expert Comment

    Does the administrator have all the appropriate access rights to the mailbox? In Exchange 2003, the administrator , by default, does not possess a number of mail related permissions that are required in a migration to 07/2010.

    You could create a new user and add him as a member to the mail administrators so you can avoid editing the deny permissions on the current Domain Administrator account.

    Also, please make sure the user in question is not disabled within AD.
    LVL 74

    Expert Comment

    by:Glen Knight
    You don't have the appropriate permissions.
    Set up a new user and give it full access to all mailboxes as per this guide:

    Then login using this user and move the mailboxes again.

    Expert Comment

    Domain Admins cannot access Exchange 2003 mailboxs by default. Microsoft explicity denys read write access for Domain Admins (AD), Enterprise Admins (AD) Administrator (local),  Exchange Administrator role (Exchange), and Exchange Full Administrator role (Exchange).

    Try to create a mail recovery user (AD User account) and grant that user Exchange Administrator role. Login with that user and run the mailbox migration again.
    LVL 15

    Expert Comment

    Check the users properties in AD and make sure inherit permission is checked.

    And also the OU in which the mailbox user is, Exchange Server group shoud have write permission.
    1) Open Active Directory Users and Computers.
    2) Navigate to the problematic OU where user is
    (3) Right the OU click properties,click security tab
    4) Select Exchange server group and enable "write" permissions and click advanced
    5) Under Advanced security settings window,select the "Exchange server" goup and
    click edit to apply "This objects and all descendant objects"
    6) Click ok .
    LVL 8

    Expert Comment

    Please verify your permissions as Narayan suggests as its what I was eluding to.  That should certainly allow you to do whatever you need to do (migrate, restore, access, etc).
    LVL 74

    Accepted Solution

    You will need to have permissions on both stores as per the instructions in the KB article just having permissions on the user will not help.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Highfive + Dolby Voice = No More Audio Complaints!

    Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

    Find out how to use dynamic social media in email signatures with this top 10 DOs & DON’Ts.
    ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
    To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…
    In this Micro Video tutorial you will learn the basics about Database Availability Groups and How to configure one using a live Exchange Server Environment. The video tutorial explains the basics of the Exchange server Database Availability grou…

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    21 Experts available now in Live!

    Get 1:1 Help Now