Exchange Mailbox Error: "Active Directory operation failed on *DomainController*. This error is not retriable. Additional information: Insufficient access rights to perform the operation."

Exchange Mailbox Error: "Active Directory operation failed on *DomainController*. This error is not retriable. Additional information: Insufficient access rights to perform the operation."

When you try to move a mailbox from Exchange 2003 or Exchange 2007 to Exchange 2010, following error occurred:

Error:

Active Directory operation failed on *DomainController*. This error is not retriable. Additional information: Insufficient access rights to perform the operation.

Active directory response: 00002098: SecErr: DSID-03150E8A, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

The user has insufficient access rights.

Exchange Management Shell command attempted:

’*OUStructure*’ | New-MoveRequest -TargetDatabase ‘Mailbox Database 1985885663′ -BadItemLimit ‘-1′

To resolve this error…..by editing the Advanced Security Settings for that user,

  • Open Active Directory Users and Computers
  • Find the user of which the mailbox error occured
  • Open the properties of the user and go to the security tab (if this is not available, choose view and then advanced features in the AD users and computers under MMC)
  • Click on [Advanced]
  • Check the box at the bottom which says “Include inheritable permissions from this object’s parent” and then click [OK] twice.
  

Error fixing

Then try to move it and it will work…

Sort by: Published Date | Most Recent | Most Useful
Comments
  • Perfect, thanks!

    -Kevin C.

  • Thanks

  • I have the same issue with several mailboxes, this works for most of them however I am left with 2 mailboxes that simply will not move. They come up with this error even with the Inheritable permissions tickbox enabled. Any ideas what else could cause this?

    Thanks

  • Thank you very much. you just saved me lot of worries

Page 1 of 1 (4 items)