Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Active directory response: 00002098: SecErr: DSID-03150BB9, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

Posted on 2010-11-26
3
Medium Priority
?
10,561 Views
Last Modified: 2012-05-10
I am trying to migrate users from Exchange 2003 to Exchange 2010. I have both servers up and connected. They can see and talk to one another as well as the DC.

I was able to move three accounts, our Admin Account, A User account. However the rest of our users about 60-65 I get an error message below



Summary: 1 item(s). 0 succeeded, 1 failed.
Elapsed time: 00:00:17
John Doe
Failed
Error:
Active Directory operation failed on DC01.MYDOMAIN.LOCAL. This error is not retriable. Additional information: Insufficient access rights to perform the operation.
Active directory response: 00002098: SecErr: DSID-03150BB9, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

The user has insufficient access rights.
Click here for help... http://technet.microsoft.com/en-US/library/ms.exch.err.default(EXCHG.141).aspx?v=14.1.218.11&t=exchgf1&e=ms.exch.err.Ex6AE46B
Exchange Management Shell command attempted:
'MYDOMAIN.local/MDX Users/John Doe' | New-MoveRequest -TargetDatabase 'Mailbox Database'
Elapsed Time: 00:00:17
0
Comment
Question by:janusnetworks
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 

Accepted Solution

by:
janusnetworks earned 0 total points
ID: 34217987
Nevermind I figured it out.

The Solution
Inherited Permissions on the User Object. I ensured that the Administrator User Account has FULL Rights on the OU, then Allowed Inherited permissions apply then it worked.
0
 

Author Closing Comment

by:janusnetworks
ID: 34217988
Inherited Permissions on the User Object. I ensured that the Administrator User Account has FULL Rights on the OU, then Allowed Inherited permissions apply then it worked.
0
 

Expert Comment

by:Pfaelzer
ID: 34348263
1. Open Activie Directory Users and Computers
2. Make sure you can see the Advance Options by clicking View -> Advanced
Options
3. Find the user account for a mailbox that will not move
4. Right Click the User account and clikc Properties -> go to the Security Tab
5. Click Advanced and then check the box next to Include inheritable
permissions from this objects parents.
6. Go back to the Exchange Management Console and try to move the mailbox
again. You will get an error that states that there is already a move
request.
7. Copy the code under the section on how to remove the move request.
8. Paste this code into the Exchange Management Shell and click Yes to All
(A) when it asks you if you are sure.
9. Move the mailbox. This time it should work.

Regards
0

Featured Post

Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Know the reasons and solutions to move/import EDB to New Exchange Server. Also, find out how to recover an Exchange .edb file and to restore the file back.
Are you an Exchange administrator employed with an organization? And, have you encountered a corrupt Exchange database due to which you are not able to open its EDB file. This article will explain all the steps to repair corrupt Exchange database.
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
This video discusses moving either the default database or any database to a new volume.

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question