Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 10779
  • Last Modified:

Active directory response: 00002098: SecErr: DSID-03150BB9, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

I am trying to migrate users from Exchange 2003 to Exchange 2010. I have both servers up and connected. They can see and talk to one another as well as the DC.

I was able to move three accounts, our Admin Account, A User account. However the rest of our users about 60-65 I get an error message below



Summary: 1 item(s). 0 succeeded, 1 failed.
Elapsed time: 00:00:17
John Doe
Failed
Error:
Active Directory operation failed on DC01.MYDOMAIN.LOCAL. This error is not retriable. Additional information: Insufficient access rights to perform the operation.
Active directory response: 00002098: SecErr: DSID-03150BB9, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

The user has insufficient access rights.
Click here for help... http://technet.microsoft.com/en-US/library/ms.exch.err.default(EXCHG.141).aspx?v=14.1.218.11&t=exchgf1&e=ms.exch.err.Ex6AE46B
Exchange Management Shell command attempted:
'MYDOMAIN.local/MDX Users/John Doe' | New-MoveRequest -TargetDatabase 'Mailbox Database'
Elapsed Time: 00:00:17
0
janusnetworks
Asked:
janusnetworks
  • 2
1 Solution
 
janusnetworksAuthor Commented:
Nevermind I figured it out.

The Solution
Inherited Permissions on the User Object. I ensured that the Administrator User Account has FULL Rights on the OU, then Allowed Inherited permissions apply then it worked.
0
 
janusnetworksAuthor Commented:
Inherited Permissions on the User Object. I ensured that the Administrator User Account has FULL Rights on the OU, then Allowed Inherited permissions apply then it worked.
0
 
PfaelzerCommented:
1. Open Activie Directory Users and Computers
2. Make sure you can see the Advance Options by clicking View -> Advanced
Options
3. Find the user account for a mailbox that will not move
4. Right Click the User account and clikc Properties -> go to the Security Tab
5. Click Advanced and then check the box next to Include inheritable
permissions from this objects parents.
6. Go back to the Exchange Management Console and try to move the mailbox
again. You will get an error that states that there is already a move
request.
7. Copy the code under the section on how to remove the move request.
8. Paste this code into the Exchange Management Shell and click Yes to All
(A) when it asks you if you are sure.
9. Move the mailbox. This time it should work.

Regards
0

Featured Post

NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now