Moving mailboxes from Exchange 2007 to Exchange 2010

Posted on 2014-02-17
Last Modified: 2014-02-19
We have around 65 mailboxes and I am having a problem with 14 mailboxes.  Have checked Full Access Permissions and DNS.  Same AD domain, should be pretty straightforward.  Here is the error message:

Summary: 1 item(s). 0 succeeded, 1 failed.
Elapsed time: 00:00:00

John Doe

Active Directory operation failed on C02.domain This error is not retriable. Additional information: Insufficient access rights to perform the operation.
Active directory response: 00002098: SecErr: DSID-03150BB9, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

The user has insufficient access rights.
Click here for help...

Exchange Management Shell command attempted:
'domain/E-Mail Users Only/John Doe' | New-MoveRequest -TargetDatabase 'Mailbox Database 0404678324'

Elapsed Time: 00:00:00
Question by:Webcc
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
LVL 17

Expert Comment

by:Kent Dyer
ID: 39866615
Reading this, it sounds like you need to grant privileges to the destination Exchange Mailbox..  Since it is based on AD and the user already exists in the domain, you need to do that first..  Then copy the data..

Accepted Solution

Arjun Vyavahare earned 500 total points
ID: 39866634
This sounds like the  AD inheritable permissions issue that was seen a lot in EXCHANGE 2007.

Go to AD and find the mailbox which is having issue
Properties > Security > Advanced.  Check the box and ensure that "allow inheritable
permissions from parent" is set.  

Let AD replicate.  Try to perform a move function again.

I hope this will resolve your issue.


Expert Comment

ID: 39867052
You can also consider for an automated option if still have facing error in moving mailbox from exchange 2007 to 2010. Please have a look at this link which is very proficient in terms of proceeding safe and error-free migration from old exchange server to upgraded one.
Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.


Author Comment

ID: 39867214
Cannot find the "Security" tab referred to?

Author Closing Comment

ID: 39869480
Thanks Arjun,  I dug around and found the security tab.

Expert Comment

by:Arjun Vyavahare
ID: 39872414
Gr8.. !! :)


Featured Post

PeopleSoft Has Never Been Easier

PeopleSoft Adoption Made Smooth & Simple!

On-The-Job Training Is made Intuitive & Easy With WalkMe's On-Screen Guidance Tool.  Claim Your Free WalkMe Account Now

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
Had a business requirement to store the mobile number in an environmental variable. This is just a quick article on how this was done.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

710 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question