We have been working on our first Exchange 2003 to 2010 migration and have seen the following message when attempting to move a mailbox from Exchange 2003 to Exchange 2010:


Active Directory operation failed on . This error is not retriable. Additional information: Insufficient access rights to perform the operation.

Active directory response: 00002098: SecErr: DSID-03150A45, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

The user has insufficient access rights.

Turned out to be the fairly common issue of inheritance being disabled on this users Advanced Security Settings.

Once enabled, several “Exchange Trusted Subsystems” rights were applied and the mailbox moved successfully shortly thereafter.