We have been working on our first Exchange 2003 to 2010 migration and have seen the following message when attempting to move a mailbox from Exchange 2003 to Exchange 2010:
Error:
Active Directory operation failed on . This error is not retriable. Additional information: Insufficient access rights to perform the operation.
Active directory response: 00002098: SecErr: DSID-03150A45, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
The user has insufficient access rights.
Turned out to be the fairly common issue of inheritance being disabled on this users Advanced Security Settings.
Once enabled, several “Exchange Trusted Subsystems” rights were applied and the mailbox moved successfully shortly thereafter.
Where did you find the advanced setting with the checkbox for inheritance. We have advanced settings in AD for the user, but no checkbox.
Click View and make sure advanced features is checked.
Then click the security tab that is now displayed. and make sure inherent permissions is checked.
Ms exchange is a very compound tool and unfortunately I personally tested all possible troubles. Only couple days ago I could manage with all these troubles and in this matter next tool participiated. This tool showed me such resources as: restoring edb does not modify processed email databases and etc. Besides it would be very useful for any kind of complicated situation connected with ms exchange server – reparar edb.