Exchange Mailbox Migration Error

When migrating a users mailbox from Exchange 2003 to Exchange 2010 or Exchange 2010 to Exchange 2013 you may come across the following error as seen below.

 

User Name
FailedError:
Active Directory operation failed on server2.serverco.CO.UK. This error is not retriable. Additional information: Insufficient access rights to perform the operation.
Active directory response: 00002098: SecErr: DSID-03150A45, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0The user has insufficient access rights.
Click here for help… http://technet.microsoft.com/en-US/library/ms.exch.err.default(EXCHG.141).aspx?v=14.3.123.3&t=exchgf1&e=ms.exch.err.Ex6AE46B

The main part of this error is the Active directory response: 00002098: SecErr: DSID-03150A45, problem 4003 (INSUFF_ACCESS_RIGHTS)

You may get this error on a random user even though you have already moved multiple mailboxes. The issue is that the administrator account that you are using does not have intermission to access this users mailbox to move it. We need to reset the Exchange inheritance permission to resolve this issue.

Problem 4003 (INSUFF_ACCESS_RIGHTS) – Reset Inheritance

We need to give Exchange and the admin account you are using access rights to move this mailbox.In Active Directory users and computers we first enable advance features. To do this click on view then select advanced features. This will enable the extra tabs that we need.

active direcotry turn on advanced features

Once done, locate the user or users who`s mailbox you cannot migrate and right click them and select properties. Once there then you will see the security tab that advanced features has enabled.

user advanced security settings

Now we need to select the advanced option at the bottom of the screen. On the following screen you will see at the bottom the option to include inheritable permissions from this objects parents. Put a tick in this box and apply the settings. Now wait a moment or two for these changes to replicate. Then the mailbox should migrate without any issues.

include inheritable objects

 

Tags: mailbox, migrate

Allen White

Allen is a Consultant for ITPS in the North East of England and holds the following accreditations. MCSA, MCSE, MCTS, MCITP, CCA, CCSP, VCP 4,5 and HP ASE, AIS - Network Infrastructure.

Comments (1)

  • Avatar

    Jeremy Smit

    |

    Dear Allen,

    I have some sort of the same problem about Insufficient access rights.

    I have the follow errror:
    Active Directory operation failed on IMG-DC01.imagebuilders.local. This error is not retriable. Additional information: Insufficient access rights to perform the operation. Active directory response: 00002098: SecErr: DSID-03150BC1, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

    We disabled/enabled the inheritance option.
    we gave all domain admins full control on exchange trusted subsystem

    any ideas what we can do

    Reply

Leave a comment

Categories

Vote!

What Web Browser Do You Use?

View Results

Loading ... Loading ...

Vote!

What do you prefer..VMware or Hyper-V?

View Results

Loading ... Loading ...