Good day folks,

Having a simple yet annoying issue concerning a client trying to migrate mailboxes using the exchange management console [2010].

Their account has numerous OUs and Security groups attached, amongst which of course Exchange Servers, Exchange Recipient Administrator

My account has less, but the core ones mentioned on top.

They can't move a particular user from one database to another, I can.

The error states "Can not open log file C:\Program Files\Microsoft\Exchange Server\Logging\MigrationLogs\move-Mailbox-xxx.log" 

Access to the above is denied.

This looks like a permissions issue, and judging from the fact that my account works, compounds this fact.

Is it that their account is so entwined with some security group or OU that the constraints are overriding the priveleges?

Hi ,

Step 1 :

Just add the problematic user account on the exchange server's local administrator group on where the mailbox move is been initiated and then check the results.

Step 2 :

Same time before moving the problematic mailbox Just try to move the user id of that mailbox from one ou to another ou with the same account which is utilized for mailbox move.

Step 3:

Above mentioned step is to find out is there any active directory related permissions is lacking for mailbox move.

As an additional info ,Please have a look in to the below mentioned points .

In exchange 2010 Move Mailboxes is the role which is having the required access to move the mailboxes from one database to another database.

Same time by default "Move Mailboxes" role is mapped on the below mentioned RABC groups.

Organization Management
Recipient Management

So please make sure the account which you are using is been a member of anyone of those groups.

Please reply me if anything is un

Hi cajunspirit,

As Singaravadivelu mentioned, it may be related to RBAC issue.
We can open EMC and navigate to Toolbox, then open Role Based Access Control(RBAC)  User Editor, then login RBAC with Administrator.
Note: please make sure administrator host on Exchange server 2010 rather than Exchange 2013. If the administrator has moved to Exchange 2013, we can login EAC to configure RBAC.
More details about Mailbox Permissions, please refer to Mailbox moves section:
https://technet.microsoft.com/en-us/library/dd638132(v=exchg.141).aspx

Besides, we also can create an user role group with relevant role, then add some user to achieve this goal.

Best Regards,
Allen Wang