We recently upgrade BES from 4.1.6 to 5.0.3 and just installed Exchange 2010. I am able to successfully move user accounts from our old Exchange 2003 server to the new Exchange 2010 server. When I go to move the besadmin account, it fails with the following error.
Summary: 1 item(s). 0 succeeded, 1 failed.
Elapsed time: 00:00:12
Active Directory operation failed on dc01.domain.com. This error is not retriable. Additional information: Insufficient access rights to perform the operation.
Active directory response: 00002098: SecErr: DSID-03150E8A, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
The user has insufficient access rights.
Click here for help... http://technet.microsoft.com/en-US/library/ms.exch.err.default(EXCHG.141).aspx?v=14.1.355.1&t=exchgf1&e=ms.exch.err.Ex6AE46B
Exchange Management Shell command attempted:
'domain.com/Domain Users/IT/Service Account/besadmin' | New-MoveRequest -TargetDatabase 'General Users'
Elapsed Time: 00:00:12
I have the EMC pointed to dc02.domain.com since we are having issues with dc01 but for some reason it keeps connecting to dc01 for this move. I have a feeling the underlining issue may have to do with the issue with dc01but I do not see any messages about replication issues in the logs on any of the domain controllers.
The issue we are having with dc01 is the SYSVOL folder has the domain.com folder but all folders under that are missing. The NETLOGON folder is replicating correctly. We do have a third DC (DC03) at another site and that one is replicating properly too.
Thanks in advance!