Exchange 2010 Cannot add or modify Mailboxes

nshoe43 used Ask the Experts™
I am trying to run a script on Exchange 2010 as well as trying to add a new mailbox and I continue to get the dreaded, Active Directory operation failed on This error is not retriable. Additional information:
Access is denied.
Active directory response: 00000005: SecErr: DSID-03151E04, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
    + CategoryInfo          : NotSpecified: (0:Int32) [New-Mailbox], ADOperationException
    + FullyQualifiedErrorId : 1F5ED462,Microsoft.Exchange.Management.RecipientTasks.NewMailbox

I have done everything I can think of to resolve this. I am using my account with the following settings:

Member of:
Domain Admin
Domain Users
Enterprise Admins
Exchange Admins
Organization Management
Schema Admins

I have also checked and rechecked the Include inheritable permissions from this object's parent and this box DOES have a checkmark in it.

I am in a very crucial situation here. Thank you in advance.
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
It seems that your account has explicit deny on the Exchange Server object or the Org object. It could be also a problem with one of the groups your account is the member of. If you are well versed with adsiedit then i would say to check if there is any deny for your account on the org or server object or the group you are the member of...


OK I am trying to look through adsiedit, I am not too good with it, do you have any pointers on where to look for those deny statements?

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial