Solved

Can't move mailboxes from Exchange 2003 to 2010

Posted on 2013-02-04
7
587 Views
Last Modified: 2013-02-04
I am currently working on a network that has 2 domains within the forest.  I recently implemented an Exchange 2010 server to replace the Exchange 2003 server.  These servers hold the mailboxes for users on both domains.  
I was able to move the mailboxes from 2003 to 2010 for all the users on the main domain.  However, when I attempt to move the mailboxes from the sub-domain, I get the following error:
Active directory failed on server1.  additional information: insufficient access rights to perform this operation:
Active directory response: 00002098: SecErr: DSID-03150A48. problem 4003 (INSUFF_ACCESS_RIGHTS). Data 0
the user has insufficient access rights

This occurs whether I am logged into the Exchange 2010 server as the administrator of the top domain or as the administrator of the sub domain.

What rights do I need to assign and to which administrator user?
0
Comment
Question by:Cybertronnh
7 Comments
 
LVL 34

Expert Comment

by:Paul MacDonald
ID: 38851328
Make sure the user accounts in AD are set to inherit permissions.
0
 
LVL 52

Expert Comment

by:Manpreet SIngh Khatra
ID: 38851361
What credentails are used to move ?
Does the Admin or whatever creds used for Sub-domain have appropriate rights on Exchange and Users to perform the move ?

- Rancy
0
 
LVL 49

Accepted Solution

by:
Akhater earned 500 total points
ID: 38851372
you need to run setup.com /preparedomain:fqdnofsubdomain
0
Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 

Author Comment

by:Cybertronnh
ID: 38851377
I saw the article about setting the user's security properties to inherit permissions and on the mailbox I am experimenting with I have "include inheritable permissions from this object's parert" checked.  Still I am unable to move this mailbox
0
 
LVL 49

Expert Comment

by:Akhater
ID: 38851386
u need to prepare the domain run setup.com /preparedomain:fqdnofsubdomain
0
 
LVL 1

Expert Comment

by:kj_syence
ID: 38851429
Wait,

Did you check the box that said to allow inheritable permissions or was it already checked? If you just checked it then replication will have to take place before this setting will take effect. try forcing replication between all of your DC's if possible and restart the information store service in one location where a mailbox resides then try to move the mailbox again.
0
 

Author Comment

by:Cybertronnh
ID: 38851543
I did the setup /perparedomain:fqdn and I was able to move the first mailbox.  I will update this question after I have moved the remaining maiboxes.  Thank you AKHater!
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
open ost file into new machine? 7 55
problem with default throttling policy 2 23
Exchange 2007 stray Mailbox 5 23
Server Rebuild after 2 drive in raid crashed 16 46
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
A procedure for exporting installed hotfix details of remote computers using powershell
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question