When migrating a users mailbox from Exchange 2003 to Exchange 2010 or Exchange 2010 to Exchange 2013 you may come across the following error as seen below.
FailedError:
Active Directory operation failed on server2.serverco.CO.UK. This error is not retriable. Additional information: Insufficient access rights to perform the operation.
Active directory response: 00002098: SecErr: DSID-03150A45, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0The user has insufficient access rights.
Click here for help… http://technet.microsoft.com/en-US/library/ms.exch.err.default(EXCHG.141).aspx?v=14.3.123.3&t=exchgf1&e=ms.exch.err.Ex6AE46B
The main part of this error is the Active directory response: 00002098: SecErr: DSID-03150A45, problem 4003 (INSUFF_ACCESS_RIGHTS)
You may get this error on a random user even though you have already moved multiple mailboxes. The issue is that the administrator account that you are using does not have intermission to access this users mailbox to move it. We need to reset the Exchange inheritance permission to resolve this issue.
Problem 4003 (INSUFF_ACCESS_RIGHTS) – Reset Inheritance
We need to give Exchange and the admin account you are using access rights to move this mailbox.In Active Directory users and computers we first enable advance features. To do this click on view then select advanced features. This will enable the extra tabs that we need.
Once done, locate the user or users who`s mailbox you cannot migrate and right click them and select properties. Once there then you will see the security tab that advanced features has enabled.
Now we need to select the advanced option at the bottom of the screen. On the following screen you will see at the bottom the option to include inheritable permissions from this objects parents. Put a tick in this box and apply the settings. Now wait a moment or two for these changes to replicate. Then the mailbox should migrate without any issues.
