Solved

Moving BESadmin Account to Exchange 2010 from 2003

Posted on 2012-03-16
5
913 Views
Last Modified: 2012-06-22
We recently upgrade BES from 4.1.6 to 5.0.3 and just installed Exchange 2010. I am able to successfully move user accounts from our old Exchange 2003 server to the new Exchange 2010 server. When I go to move the besadmin account, it fails with the following error.

Summary: 1 item(s). 0 succeeded, 1 failed.
Elapsed time: 00:00:12

besadmin
Failed

Error:
Active Directory operation failed on dc01.domain.com. This error is not retriable. Additional information: Insufficient access rights to perform the operation.
Active directory response: 00002098: SecErr: DSID-03150E8A, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

The user has insufficient access rights.
Click here for help... http://technet.microsoft.com/en-US/library/ms.exch.err.default(EXCHG.141).aspx?v=14.1.355.1&t=exchgf1&e=ms.exch.err.Ex6AE46B

Exchange Management Shell command attempted:
'domain.com/Domain Users/IT/Service Account/besadmin' | New-MoveRequest -TargetDatabase 'General Users'

Elapsed Time: 00:00:12

Open in new window


I have the EMC pointed to dc02.domain.com since we are having issues with dc01 but for some reason it keeps connecting to dc01 for this move. I have a feeling the underlining issue may have to do with the issue with dc01but I do not see any messages about replication issues in the logs on any of the domain controllers.

The issue we are having with dc01 is the SYSVOL folder has the domain.com folder but all folders under that are missing. The NETLOGON folder is replicating correctly. We do have a third DC (DC03) at another site and that one is replicating properly too.

Thanks in advance!
0
Comment
Question by:tkmluv
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 7

Expert Comment

by:SriHarsha K
ID: 37731169
0
 

Author Comment

by:tkmluv
ID: 37731210
Yea, that is the documentation I am using. I am stuck at step 3 because Exchange wont let me move the mailbox.
0
 
LVL 7

Accepted Solution

by:
SriHarsha K earned 500 total points
ID: 37731270
0
 

Author Closing Comment

by:tkmluv
ID: 37732957
Thanks, that did it!
0
 
LVL 7

Expert Comment

by:SriHarsha K
ID: 37733113
Glad to hear that...

Cheers...
0

Featured Post

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
After hours on line I found a solution which pointed to the inherited Active Directory permissions . You have to give/allow permissions to the "Exchange trusted subsystem" for the user in the Active Directory...
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
Suggested Courses

626 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question