I edited the user information like City, address etc and press the save button but get the following error. I have the full rights on Active Directory.

errorActive Directory operation failed on dc1.hammad.local. This error is not retriable. Additional information: Insufficient access rights to perform the operation. Active directory response: 00002098: SecErr: DSID-03150BC1, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

Hi,

This is clearly an AD Permission issue. Check whether the permissions you said are inherited to the container in the AD in which you edit details of the user

Hello,

ManU is right, this is one AD permission issue.

Are you using Exchange split permission mode?

From the error information, your account don't have permission to edit in AD.

You can contact AD administrator to check the permission on your account.

If you are using Exchange split permission mode, you can ask AD administrator delegate you AD permisison on OU or user.

Thanks,

Evan

FYI,

Out of the box, I am experiencing the same issue as (partner) Hammad Masood above.  I am not using Exchange split permission mode. 

Quick update...So far I'm only seeing this error updating a mail enabled user's "contact information" via the ECP.

I'm making the update after adjusting permissions on the exchange org (removal of explicit/uninherited DENY permissions from "First Organization" via adsiedit).  In my case, from:

CN=CTC First Organization,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=carr-tech,DC=com

• Edited by petercarrlive Wednesday, February 06, 2013 6:52 AM

Double click on user --> Security (Tab) --> Advanced (Botton) --> Permissions (Tab) --> Enable Inharitance (Button)

Solution of this Error:

errorActive Directory operation failed on dc1.hammad.local. This error is not retriable. Additional information: Insufficient access rights to perform the operation. Active directory response: 00002098: SecErr: DSID-03150BC1, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

• Proposed as answer by Hanntho 20 hours 46 minutes ago

Thanks for posting this despite the "AD permission" smoke screen! :-)