Simple setup. I added an exchange 2010 and am moving mailboxes to the new one so eventually I can decommission the older server. Everything is smooth except with a few mailboxes that have an active directory permissions issue? I re-enabled their accounts, moved them to the regular users folder in the active directory management console. Within exchange they are active. See the error below. I am a domain / exchange admin. I dont have issues with other mailboxes so I am stuck. I am sure it is something simple. Any help would be appreciated. ------------------------------- Summary: 5 item(s). 0 succeeded, 5 failed. Elapsed time: 00:00:11 user1 Failed Error: Active Directory operation failed on connection.diederichgroup.com. This error is not retriable. Additional information: Insufficient access rights to perform the operation. Active directory response: 00002098: SecErr: DSID-03150A48, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0 The user has insufficient access rights. Click here for help... http://technet.microsoft.com/en-US/library/ms.exch.err.default(EXCHG.141).aspx?v=14.1.355.1&t=exchgf1&e=ms.exch.err.Ex6AE46B Exchange Management Shell command attempted: 'diederichgroup.com/Users/Bart Lincoln' | New-MoveRequest -TargetDatabase 'oldmailbox2' Elapsed Time: 00:00:04

Hi Could you check if inherit permissions in enabled in AD, on the security tab of the user's object click advanced? This will also need to be enabled on the OU that the accounts are in. Cheers, Steve

Hi 1. Run the Active Directory Users and Computers snap-in(Start->run-> dsa.msc). 2. Right click the user account whose mailbox move is failing and go to the properties. 3. Go to the Security tab(If you could not see the Security tab, choose View / Advanced Features. ) 4. On the Security tab, click the Advanced button. 5. Verify if 'Allow inheritable permissions from the parent to propagate to this object' is checked. 6. If Allow inheritable permissions from the parent to propagate to this object' is not checked, put a check mark in there. 7. Restart the Microsoft Exchange Information Store service and do a replication between the Domain controllers(If there are multiple domain controllers in your environment). 8. After trying all the above steps, move the mailbox again and see if the problem persists. TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.comTerence Yu TechNet Community Support

Hi 1. Run the Active Directory Users and Computers snap-in(Start->run-> dsa.msc). 2. Right click the user account whose mailbox move is failing and go to the properties. 3. Go to the Security tab(If you could not see the Security tab, choose View / Advanced Features. ) 4. On the Security tab, click the Advanced button. 5. Verify if 'Allow inheritable permissions from the parent to propagate to this object' is checked. 6. If Allow inheritable permissions from the parent to propagate to this object' is not checked, put a check mark in there. 7. Restart the Microsoft Exchange Information Store service and do a replication between the Domain controllers(If there are multiple domain controllers in your environment). 8. After trying all the above steps, move the mailbox again and see if the problem persists. TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.comTerence Yu TechNet Community Support

Hi Do you have anything update on your issue ?Terence Yu TechNet Community Support

Thank you for your help.