Solved

Exchange 2010 SP1 failed 4003 INSUFF_ACCESS_RIGHTS

Posted on 2010-11-21
8
2,407 Views
Last Modified: 2012-05-10
Hey everyone,

Tried installing SP1 for exchange 2010, and got the following error as per the screenshot.  It seems to be the same error as in this guide:

http://social.technet.microsoft.com/Forums/en-US/exchange2010/thread/d3a370a5-1061-4174-8454-8a1ca0c96fd4

I have tried all the steps countless times.  I am logged in as administrator, and so far, i have had no issues with permissions in setting up all other aspects of the server including exchange.

Thanks.
 screenshot
0
Comment
Question by:ben_kapel
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
  • 2
8 Comments
 
LVL 31

Accepted Solution

by:
MegaNuk3 earned 500 total points
ID: 34182673
Try "Alright I did something which might have fixed the issue... well I logged in with a different account which had "Domain Admins" "Schema Admins" and "Enterprise Admins" and enabled the "Include inheritable permissions from this object's parent"  property on the user account has mentioned in one of the steps above and it worked..."

Or add another account to schema admins and enterprise admins and run setup.com /prepareAD with that account and then you should be able to run the setup.com /mode:upgrade with your other account
0
 
LVL 31

Expert Comment

by:MegaNuk3
ID: 34182693
0
 

Author Comment

by:ben_kapel
ID: 34182875
G'day there mate, not sure if you noticed but I tried the steps in that thread.  For one they didn't work for me and secondly even if it did it bothers me that the administrator account can't access all aspects of what it should...

Cheers
0
Online Training Solution

Drastically shorten your training time with WalkMe's advanced online training solution that Guides your trainees to action. Forget about retraining and skyrocket knowledge retention rates.

 
LVL 31

Expert Comment

by:MegaNuk3
ID: 34182896
The bit after the "Or" comes from me so don't know if you tried that...
0
 
LVL 10

Expert Comment

by:abhijitmdp
ID: 34187461
Make sure the user has inherited permission granted to domain\Exchange Servers to allow List, Create child, Delete child of object type "msExchangeActiveSyncDevices" and doesn't have any deny permissions that block such operations.

to do this,

On a Domain Controller, Click on Start/All Programs/Administrative Tools/Active Directory Users and Computers

Click on View and Select Advanced Features

Select a mailbox that isn’t working with Active Sync, double click on the account, Select the Security Tab and then the Advanced Button.

Select Exchange Servers, and tick the Include inheritable permissions toggle then Apply and OK.
0
 
LVL 10

Expert Comment

by:abhijitmdp
ID: 34187476
Also please post the details in the log stored on SystemDrive\exchange setuplogs folder
0
 

Author Comment

by:ben_kapel
ID: 34204111
Thanks,

I forgot to add organization management the first time but i tried what you said and then added this and it worked
0
 
LVL 31

Expert Comment

by:MegaNuk3
ID: 34204786
So just to confirm the solution...
You added a new account to Schema Admins, enterprise admins and exchange org admins. You were then able to setup.com /PrepareAd with this account? Did you do the rest of the install with this account or with your other old account?

Thanks
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
Unified and professional email signatures help maintain a consistent company brand image to the outside world. This article shows how to create an email signature in Exchange Server 2010 using a transport rule and how to overcome native limitations …
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

751 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question