Public Folder migration AD error 2007 to 2013

Hi all

This is getting the best of me.

Migrating from exchange 2007 SP3 RU12 to 2013 CU3

when attempting to migrate the public folders I'm greeted with this error

FailureCode                      : -2146233088
FailureType                      : ADOperationException
FailureSide                      : Target
Message                          : Error: Active Directory operation failed on                   CORP2008DC01.domain.com. This
                                          error is not retriable. Additional information: Insufficient access rights to
                                          perform the operation.
                                          Active directory response: 00002098: SecErr: DSID-03150BB9, problem 4003
                                          (INSUFF_ACCESS_RIGHTS), data 0
                                            --> The user has insufficient access rights.
FailureTimestamp                 : 2/13/2014 4:11:27 PM
IsValid                                  : True
ValidationMessage                :
OrganizationId                   :
RequestGuid                      : 9bba5622-e262-4ff2-8e1c-d52661a862d8
RequestQueue                     : DB01
ExchangeGuid                     : 3824a2c8-6597-4cd4-a28e-f06b3aa137c1
Identity                         : 6d80a38a-f7e0-4589-bf76-c6ae64ae1097\9bba5622-e262-4ff2-8e1c-d52661a862d8
DiagnosticInfo                   :
Report                           : 2/13/2014 4:11:17 PM [CORP2013EX01] 'domain.com/OU/
                                   Exchange Administrator' created request.
                                   2/13/2014 4:11:24 PM [CORP2013EX01] The Microsoft Exchange Mailbox                                    Replication service 'CORP2013EX01.Domain.com' (15.0.775.35 caps:3F)     is examining the request. 
                                    
                                   2/13/2014 4:11:24 PM [CORP2013EX01] Connected to target mailbox
                                   '3824a2c8-6597-4cd4-a28e-f06b3aa137c1', database 'DB01', Mailbox                                          server
                                   'CORP2013EX01.Domain.com' Version 15.0 (Build 775.0), proxy server
                                   'CORP2013EX01.Domain.com' 15.0.775.35 caps:07FFCB07FFFF.
                                   2/13/2014 4:11:24 PM [CORP2013EX01] Connected to source mailbox '',                                     database
                                   'CORP2007MBX01\Second Storage Group\Public Folder Database',                                               Mailbox server 'CORP2007MBX01.Domain.com' Version 8.3 (Build 330.0).
                                   2/13/2014 4:11:24 PM [CORP2013EX01] Request processing started.
                                   2/13/2014 4:11:27 PM [CORP2013EX01] Stage:                   CreatingFolderHierarchy. Percent complete: 10.
                                   2/13/2014 4:11:27 PM [CORP2013EX01] Initializing folder hierarchy from                                     mailbox '':340 folders total.
                                   2/13/2014 4:11:27 PM [CORP2013EX01] Folder creation progress: 0                                           folders created in
                                   mailbox '3824a2c8-6597-4cd4-a28e-f06b3aa137c1'.
                                   2/13/2014 4:11:27 PM [CORP2013EX01] Fatal error                                  ADOperationException has occurred.

Ive looked into all the permissions in AD the PS is running in elevated mode

The "inheritable permissions" is checked on all OU's and Objects involved in this migration.

I asked the Client to retire a 2003 Domain Controller that I thought was the culprit (Schema Mismatch errors).

the PS ran leading up to this error.

=========================

New-PublicFolderMigrationRequest -SourceDatabase (Get-PublicFolderDatabase -Server corp2007mbx01.domain.com) -CSVData (Get-Content PBFtoMailboxGen.csv -Encoding Byte) -BadItemLimit 5

=========================

PBFtoMailboxGen.csv

"FolderPath","TargetMailbox"
"\", "PF-Hierarchy"

=========================

[PS] C:\scripts\PublicFolder>get-mailbox -PublicFolder

Name                              Alias                ServerName       ProhibitSendQuota
----                                     -----                ----------            -----------------
PF-Hierarchy              PF-Hierarchy         corp2013ex01     Unlimited

========================

New-Mailbox -PublicFolder PF-Hierarchy Database DB01 -IsExcludedFromServingHierarchy $True HoldForMigration

========================

Any assistance would be appreciated. 



  • Edited by Zharkov Lillie Friday, February 14, 2014 12:44 AM Formatting
February 14th, 2014 12:39am

Post the event ID 2080 from exchange 2013.
Free Windows Admin Tool Kit Click here and download it now
February 16th, 2014 1:16pm

Hi,

Please check the account you used to run the commands, make sure it has the necessary permissions.

Please check with the Get-PublicFolderMigrationRequest | Get-PublicFolderMigrationRequestStatistics command.

Please check the application log to see if there is any related event error.

Best regards,
Belinda

February 17th, 2014 4:23am

Thanks for looking at this.

the Permissions have been checked many times over. The account that is running the command is the same account that is used to create the PF structure and the same account used to install exchange 2013.

Has all permissions stated in this article.

http://technet.microsoft.com/en-us/library/jj150486(v=exchg.150).aspx

Thanks

-Z

Free Windows Admin Tool Kit Click here and download it now
February 17th, 2014 8:48pm

Event 2080 Msexchange ADAccess Topology

       Process Microsoft.Exchange.Directory.TopologyService.exe (PID=2052). Exchange Active Directory Provider has discovered the following servers with the following characteristics:       
 (Server name | Roles | Enabled | Reachability | Synchronized | GC capable | PDC | SACL right | Critical Data | Netlogon | OS Version)       
In-site:
CORP2008DC01.domain.com CDG 1 7 7 1 0 1 1 7 1
CORP2008DC02.domain.com CDG 1 7 7 1 0 1 1 7 1       
Out-of-site:
DRAZ2008DC01.domain.com CDG 1 7 7 1 0 1 1 7 1    

 
February 26th, 2014 11:28pm

In my trouble shooting i did see that the organizational management and Domain Admin was assigned to the user account that I was using to migrate the public folder.

Remediation - created a new account org management and public folder manager. gave that user "full access" to the root public folder that was created for the migration.

Did this work - NO

little help Ms guys please, even a ticket open to the MS exchange ppl is going unanswered.

 

 
Free Windows Admin Tool Kit Click here and download it now
February 26th, 2014 11:35pm

I am experiencing the same issue.  What was the resolution?
July 17th, 2015 7:02pm

I have the same issue, also created a brand new account, just the announced permissions assigned, but still the same result as Zharkov Lillie :-(

Free Windows Admin Tool Kit Click here and download it now
August 17th, 2015 12:10pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics