locked
Mailbox Move from exch 2k7 to 2010 RRS feed

  • Question

  • Simple setup.  I added an exchange 2010 and am moving mailboxes to the new one so eventually I can decommission the older server. Everything is smooth except with a few mailboxes that have an active directory permissions issue? I re-enabled their accounts, moved them to the regular users folder in the active directory management console. Within exchange they are active.  See the error below.

    I am a domain / exchange admin.  I dont have issues with other mailboxes so I am stuck. I am sure it is something simple. Any help would be appreciated.

    -------------------------------

    Summary: 5 item(s). 0 succeeded, 5 failed.
    Elapsed time: 00:00:11

    user1
    Failed

    Error:
    Active Directory operation failed on connection.diederichgroup.com. This error is not retriable. Additional information: Insufficient access rights to perform the operation.
    Active directory response: 00002098: SecErr: DSID-03150A48, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0


    The user has insufficient access rights.
    Click here for help... http://technet.microsoft.com/en-US/library/ms.exch.err.default(EXCHG.141).aspx?v=14.1.355.1&t=exchgf1&e=ms.exch.err.Ex6AE46B

    Exchange Management Shell command attempted:
    'diederichgroup.com/Users/Bart Lincoln' | New-MoveRequest -TargetDatabase 'oldmailbox2'

    Elapsed Time: 00:00:04

    Tuesday, May 29, 2012 3:13 PM

Answers

  • Hi
       
    1. Run the Active Directory Users and Computers snap-in(Start->run->” dsa.msc”).

    2. Right click the user account whose mailbox move is failing and go to the properties.

    3. Go to the Security tab(If you could not see the Security tab, choose View / Advanced Features. )

    4. On the Security tab, click the Advanced button.

    5. Verify if 'Allow inheritable permissions from the parent to propagate to this object' is checked.

    6. If Allow inheritable permissions from the parent to propagate to this object' is not checked, put a check mark in there.

    7. Restart the “Microsoft Exchange Information Store” service and do a replication between the Domain controllers(If there are multiple domain controllers in your environment).

    8. After trying all the above steps, move the mailbox again and see if the problem persists.

    TechNet Subscriber Support in forum
      If you have any feedback on our support, please contact tngfb@microsoft.com


    Terence Yu

    TechNet Community Support

    Wednesday, May 30, 2012 2:24 AM

All replies

  • Hi

    Could you check if inherit permissions in enabled in AD, on the security tab of the user's object click advanced?  This will also need to be enabled on the OU that the accounts are in.

    Cheers, Steve

    Tuesday, May 29, 2012 3:28 PM
  • Hi
       
    1. Run the Active Directory Users and Computers snap-in(Start->run->” dsa.msc”).

    2. Right click the user account whose mailbox move is failing and go to the properties.

    3. Go to the Security tab(If you could not see the Security tab, choose View / Advanced Features. )

    4. On the Security tab, click the Advanced button.

    5. Verify if 'Allow inheritable permissions from the parent to propagate to this object' is checked.

    6. If Allow inheritable permissions from the parent to propagate to this object' is not checked, put a check mark in there.

    7. Restart the “Microsoft Exchange Information Store” service and do a replication between the Domain controllers(If there are multiple domain controllers in your environment).

    8. After trying all the above steps, move the mailbox again and see if the problem persists.

    TechNet Subscriber Support in forum
      If you have any feedback on our support, please contact tngfb@microsoft.com


    Terence Yu

    TechNet Community Support

    Wednesday, May 30, 2012 2:24 AM
  • Hi
       Do you have anything update on your issue ?

    Terence Yu

    TechNet Community Support

    Thursday, May 31, 2012 7:04 AM
  • Thank you for your help.

    Thursday, May 31, 2012 3:37 PM