Insufficient Access Rights to Perform the Operation (Exchange 2010)

While moving some mailboxes I got the following error :

Active Directory operation failed on servername.domainname.local. This error is not retriable. Additional information: Insufficient access rights to perform the operation.

Active directory response: 00002098: SecErr: DSID-03150BB9, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

The user has insufficient access rights.

Exchange Management Shell command attempted:

‘domainname.local/Users/User Name’ | New-MoveRequest -TargetDatabase ‘User Mailbox Database’

I found out the error was because inheritable permissions was not turned on for this specific user. (In this case this user was a member of the domain admin usergroup). This is how you can fix this problem :

Open dsa.msc (make sure advanced features has been enabled). Open the specific user and go to properties and select security

advanced

Go to advanced and enable “Include inheritable permissions..”

include_inheritable

In my case I was enable to move this specific mailbox.

 

move_succesfull

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.