• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2426
  • Last Modified:

Exchange 2010 SP1 failed 4003 INSUFF_ACCESS_RIGHTS

Hey everyone,

Tried installing SP1 for exchange 2010, and got the following error as per the screenshot.  It seems to be the same error as in this guide:

http://social.technet.microsoft.com/Forums/en-US/exchange2010/thread/d3a370a5-1061-4174-8454-8a1ca0c96fd4

I have tried all the steps countless times.  I am logged in as administrator, and so far, i have had no issues with permissions in setting up all other aspects of the server including exchange.

Thanks.
 screenshot
0
ben_kapel
Asked:
ben_kapel
  • 4
  • 2
  • 2
1 Solution
 
MegaNuk3Commented:
Try "Alright I did something which might have fixed the issue... well I logged in with a different account which had "Domain Admins" "Schema Admins" and "Enterprise Admins" and enabled the "Include inheritable permissions from this object's parent"  property on the user account has mentioned in one of the steps above and it worked..."

Or add another account to schema admins and enterprise admins and run setup.com /prepareAD with that account and then you should be able to run the setup.com /mode:upgrade with your other account
0
 
ben_kapelAuthor Commented:
G'day there mate, not sure if you noticed but I tried the steps in that thread.  For one they didn't work for me and secondly even if it did it bothers me that the administrator account can't access all aspects of what it should...

Cheers
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 
MegaNuk3Commented:
The bit after the "Or" comes from me so don't know if you tried that...
0
 
abhijitmdpCommented:
Make sure the user has inherited permission granted to domain\Exchange Servers to allow List, Create child, Delete child of object type "msExchangeActiveSyncDevices" and doesn't have any deny permissions that block such operations.

to do this,

On a Domain Controller, Click on Start/All Programs/Administrative Tools/Active Directory Users and Computers

Click on View and Select Advanced Features

Select a mailbox that isn’t working with Active Sync, double click on the account, Select the Security Tab and then the Advanced Button.

Select Exchange Servers, and tick the Include inheritable permissions toggle then Apply and OK.
0
 
abhijitmdpCommented:
Also please post the details in the log stored on SystemDrive\exchange setuplogs folder
0
 
ben_kapelAuthor Commented:
Thanks,

I forgot to add organization management the first time but i tried what you said and then added this and it worked
0
 
MegaNuk3Commented:
So just to confirm the solution...
You added a new account to Schema Admins, enterprise admins and exchange org admins. You were then able to setup.com /PrepareAd with this account? Did you do the rest of the install with this account or with your other old account?

Thanks
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Easily Design & Build Your Next Website

Squarespace’s all-in-one platform gives you everything you need to express yourself creatively online, whether it is with a domain, website, or online store. Get started with your free trial today, and when ready, take 10% off your first purchase with offer code 'EXPERTS'.

  • 4
  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now