Solved

Moving BESadmin Account to Exchange 2010 from 2003

Posted on 2012-03-16
5
905 Views
Last Modified: 2012-06-22
We recently upgrade BES from 4.1.6 to 5.0.3 and just installed Exchange 2010. I am able to successfully move user accounts from our old Exchange 2003 server to the new Exchange 2010 server. When I go to move the besadmin account, it fails with the following error.

Summary: 1 item(s). 0 succeeded, 1 failed.
Elapsed time: 00:00:12

besadmin
Failed

Error:
Active Directory operation failed on dc01.domain.com. This error is not retriable. Additional information: Insufficient access rights to perform the operation.
Active directory response: 00002098: SecErr: DSID-03150E8A, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

The user has insufficient access rights.
Click here for help... http://technet.microsoft.com/en-US/library/ms.exch.err.default(EXCHG.141).aspx?v=14.1.355.1&t=exchgf1&e=ms.exch.err.Ex6AE46B

Exchange Management Shell command attempted:
'domain.com/Domain Users/IT/Service Account/besadmin' | New-MoveRequest -TargetDatabase 'General Users'

Elapsed Time: 00:00:12

Open in new window


I have the EMC pointed to dc02.domain.com since we are having issues with dc01 but for some reason it keeps connecting to dc01 for this move. I have a feeling the underlining issue may have to do with the issue with dc01but I do not see any messages about replication issues in the logs on any of the domain controllers.

The issue we are having with dc01 is the SYSVOL folder has the domain.com folder but all folders under that are missing. The NETLOGON folder is replicating correctly. We do have a third DC (DC03) at another site and that one is replicating properly too.

Thanks in advance!
0
Comment
Question by:tkmluv
  • 3
  • 2
5 Comments
 
LVL 7

Expert Comment

by:doertalk
ID: 37731169
0
 

Author Comment

by:tkmluv
ID: 37731210
Yea, that is the documentation I am using. I am stuck at step 3 because Exchange wont let me move the mailbox.
0
 
LVL 7

Accepted Solution

by:
doertalk earned 500 total points
ID: 37731270
0
 

Author Closing Comment

by:tkmluv
ID: 37732957
Thanks, that did it!
0
 
LVL 7

Expert Comment

by:doertalk
ID: 37733113
Glad to hear that...

Cheers...
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
This article explains how to install and use the NTBackup utility that comes with Windows Server.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager

786 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question