Insufficient access rights to perform the operation. Active directory response: 00002098: SecErr: DSID-03150BC1, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

my Company has some problems with exchange server and DC server.

When we try to change something in the exchange admin center it gives us the following error message:

Active Directory operation failed on (server).imagebuilders.local. This error is not retriable. Additional information: Insufficient access rights to perform the operation. Active directory response: 00002098: SecErr: DSID-03150BC1, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

we tried the enable inheritance, not only for user but also for the security groups.

 We tried to add the "modify permissions" permission for the Exchange Trusted Subsystem to the organizational unit (OU) that contains the Distribution Group by following these steps: 1.Open Active Directory Users and Computers.

Now we dont know what the source of the problem is, and how to fix it.

anyone an idea where this comes from and how to fix?

Kind regards,

Jeremy Smit

August 25th, 2015 12:03pm

Is the user a member of any Exchange security groups?
Free Windows Admin Tool Kit Click here and download it now
August 25th, 2015 4:20pm

Hi,

Check the following setting:

  1. Open ADSIEdit -> Configuration container
  2. Services -> Microsoft Exchange -> First Organization -> Administrative Groups -> Exchange Administrative Group (FYDIBOHF23SPDLT)
  3. Double-click on it, under Security tab. Choose Exchange Trusted Subsystem, check the full access permission and enable inheritance(If it's enable, disable then enable it)

In addition, you can also create a test account then add the account to the groups the original admin has. Then use this test account to have a test.

Best Regards.

August 26th, 2015 5:13am

Yes al admin/IT accounts that have permission to change anything on the servers.

Free Windows Admin Tool Kit Click here and download it now
August 26th, 2015 6:29am

Dear Lynn-Li,

EX-Trusted subsystem has already been added and has full access permission.

Inheritance is also enabled.

Stil when i try on my own account or an other domain admin account.

 it gives me the error message

Active Directory operation failed on IMG-DC01.imagebuilders.local. This error is not retriable. Additional information: Insufficient access rights to perform the operation. Active directory response: 00002098: SecErr: DSID-03150BC1, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

August 26th, 2015 6:31am

That isn't what I asked.
Free Windows Admin Tool Kit Click here and download it now
August 26th, 2015 12:16pm

But what you said, i did that already an it didn't help.

Will prepareAD work?

prepareAD what will that do to a production environment.

If it will work doess anyone have some information how to perform for exchange 2013?

September 3rd, 2015 8:34am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics