Solved

Can't move mailboxes from Exchange 2003 to 2010

Posted on 2013-02-04
7
591 Views
Last Modified: 2013-02-04
I am currently working on a network that has 2 domains within the forest.  I recently implemented an Exchange 2010 server to replace the Exchange 2003 server.  These servers hold the mailboxes for users on both domains.  
I was able to move the mailboxes from 2003 to 2010 for all the users on the main domain.  However, when I attempt to move the mailboxes from the sub-domain, I get the following error:
Active directory failed on server1.  additional information: insufficient access rights to perform this operation:
Active directory response: 00002098: SecErr: DSID-03150A48. problem 4003 (INSUFF_ACCESS_RIGHTS). Data 0
the user has insufficient access rights

This occurs whether I am logged into the Exchange 2010 server as the administrator of the top domain or as the administrator of the sub domain.

What rights do I need to assign and to which administrator user?
0
Comment
Question by:Cybertronnh
7 Comments
 
LVL 34

Expert Comment

by:Paul MacDonald
ID: 38851328
Make sure the user accounts in AD are set to inherit permissions.
0
 
LVL 52

Expert Comment

by:Manpreet SIngh Khatra
ID: 38851361
What credentails are used to move ?
Does the Admin or whatever creds used for Sub-domain have appropriate rights on Exchange and Users to perform the move ?

- Rancy
0
 
LVL 49

Accepted Solution

by:
Akhater earned 500 total points
ID: 38851372
you need to run setup.com /preparedomain:fqdnofsubdomain
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 

Author Comment

by:Cybertronnh
ID: 38851377
I saw the article about setting the user's security properties to inherit permissions and on the mailbox I am experimenting with I have "include inheritable permissions from this object's parert" checked.  Still I am unable to move this mailbox
0
 
LVL 49

Expert Comment

by:Akhater
ID: 38851386
u need to prepare the domain run setup.com /preparedomain:fqdnofsubdomain
0
 
LVL 1

Expert Comment

by:kj_syence
ID: 38851429
Wait,

Did you check the box that said to allow inheritable permissions or was it already checked? If you just checked it then replication will have to take place before this setting will take effect. try forcing replication between all of your DC's if possible and restart the information store service in one location where a mailbox resides then try to move the mailbox again.
0
 

Author Comment

by:Cybertronnh
ID: 38851543
I did the setup /perparedomain:fqdn and I was able to move the first mailbox.  I will update this question after I have moved the remaining maiboxes.  Thank you AKHater!
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article explains in simple steps how to renew expiring Exchange Server Internal Transport Certificate.
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
In this Micro Video tutorial you will learn the basics about Database Availability Groups and How to configure one using a live Exchange Server Environment. The video tutorial explains the basics of the Exchange server Database Availability grou…
how to add IIS SMTP to handle application/Scanner relays into office 365.

840 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question