The scenario is we have one forest and two different domains in tree domain architecture(Forest : expo.com)(tree : dept.com) with windows 2012R2

We have deployed exchange 2013 in another server with windows 2012R2 based on expo.com.

When I try to create new user for dept.com I am getting the below error. but the same is working for expo.com

error

Active Directory operation failed on Server2.dept.com. This error is not retriable. Additional information: Access is denied. Active directory response: 00000005: SecErr: DSID-031521E1, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

When I try to create mailbox for the existing user in the dept.com i am getting the below error. but the same is working for expo.com

error

Active Directory operation failed on Server2.dept.com. This error is not retriable. Additional information: Insufficient access rights to perform the operation. Active directory response: 00002098: SecErr: DSID-03150BC1, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

Please help on providing me the details of configuration to do for solving the issue.

• Edited by araddy 18 hours 28 minutes ago update

Hi araddy,

Thank you for your question.

For user account in dept.com, we should create it on DC in dept.com domain.

By my understanding, we have install Exchange 2013 in expo.com domain, there are no Exchange that install in dept.com domain. If I misunderstanding, please be free to let me know.

If that, If that, we should create link mailbox for user in dept.com domain. In the Exchange forest, for each user in the accounts forest that will have a mailbox in the Exchange forest, create a mailbox that is associated with an external account by the following link:

https://technet.microsoft.com/en-us/library/jj673532(v=exchg.150).aspx

The more details could be referred by the following link:

https://technet.microsoft.com/en-us/library/aa998031%28v=exchg.150%29.aspx

If there are any questions regarding this issue, please be free to let me know.

Best Regard,