Solved

Exchange Mailboxlocal  move fails - insufficient rights

Posted on 2011-10-01
5
441 Views
Last Modified: 2012-05-12

Hello,

I'm in the middle of an Win2K3 Server/Exchange 2007 to Win2K8 Server/Exchange 2010 upgrade.  Everything was going quite well and I am at the point where I was successfully moving mailboxes from the Exchange 2007 server to the Exchange 2010 server.  I only have one domain and I currently on have one active Exchange 2007 server and one Exchange 2010 server.

I have moved about 10 mailboxes ranging from 700 MB to 2000 MB and the users report successful use of their mail after restarting Outlook.

Unfortunately, after about 6 hours since my first successful mailbox move, I get a notice from one of my Win2K8 Domain Controllers as follows:

Error:
Active Directory operation failed on ZEEDC9SERVER.ashleymcgraw.com. This error is not retriable. Additional information: Insufficient access rights to perform the operation.
Active directory response: 00002098: SecErr: DSID-03150E8A, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

The user has insufficient access rights.

Why has this just "suddenly" started?

Any help would be appreciated.
0
Comment
Question by:aarontheyoung1
5 Comments
 
LVL 14

Accepted Solution

by:
btdownloads7 earned 500 total points
ID: 36897046
Not sure why this would have started all of a sudden, unless you changed the permissions since you started moving mialboxes, but here's a good guide to fix the permissions to correct the problem:
http://blogs.catapultsystems.com/tharrington/archive/2010/08/22/exchange-2010-%E2%80%9Cinsufficient-access-rights-to-perform-the-operation%E2%80%9D.aspx
0
 
LVL 24

Expert Comment

by:Rajith Enchiparambil
ID: 36897595
Normally the solution shown in the link above is the problem. Check and reply.
0
 
LVL 12

Expert Comment

by:Deepu Chowdary
ID: 36898376
Have you checked eventviewer..?
Do you get any errors over there..
If yes can you post them here.
Also what about mailflow, runing fine..?
0
 
LVL 4

Expert Comment

by:pravinkb
ID: 36902718
This seems to be a permission inheritance blocked at OU level.

Could you please check security permissions on the user which you could not move. Checked and enabled permissions inheritance on the OU on which the user is a member.

0
 

Author Closing Comment

by:aarontheyoung1
ID: 36903193
Thanks!
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

We are happy to announce a brand new addition to our line of acclaimed email signature management products – CodeTwo Email Signatures for Office 365.
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

25 Experts available now in Live!

Get 1:1 Help Now