Hello Friends,

I have and exchange 2013 environment and AD with a Child domain.

Eg. ABC.def.com

When I Create a user account from Eac, i am able to create the users in OU which are in my child Domain, with some warnings.

I don't have full permissions in AD to create AD users directly there.

But When I use following powershell script , I get the error of access denied on my CHild Domain COntrollers although i defined the DC by using -domaincontroler parameter the request seems be going to child DC only.

Please help.

Error :-

New-Mailbox : Active Directory operation failed on txadvdcqa01.advisors.def.net. This error is not retriable. Additional 
information: Access is denied.
Active directory response: 00000005: SecErr: DSID-031521D0, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
At line:1 char:1
+ New-Mailbox -UserPrincipalName Roshini.Mendis@abc.com -Name "Roshini Mendis" ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [New-Mailbox], ADOperationException
    + FullyQualifiedErrorId : [Server=TXBX02,RequestId=c3a272bb-7b75-44c7-8c03-c1e9610afe4b,TimeStamp=8/26/2015 12:35:32 PM] [ 
   FailureCategory=Cmdlet-ADOperationException] 6BD8104,Microsoft.Exchange.Management.RecipientTasks.NewMailbox
 

New-Mailbox -UserPrincipalName Roshini.Mendis@abc.com -Name "Roshini Mendis" -OrganizationalUnit "Steve" -Password $password -FirstName Roshini -LastName Mendis -DomainController TXLPLDC02.abc.net

I'm afraid we can't see enough of your permissions settings to know why you can't perform that function.