This article will help you to solve the problem with the creation of a mailbox. It occurs when you are trying to create a mailbox for an existing user.
Here is an error code:
Active directory response: 00002098: SecErr: DSID-03150E49, problem 4003 (INSUFF_ACCESS_RIGHTS)
First time we have encountered this error during switching mailbox accounts that were present even before Exchange Server deployment.
The full text of error message:
[PS] C:Windowssystem32>Get-User John | Enable-Mailbox Active Directory operation failed on dc.xxxxxx.local. This error is not retriable. Additional information: Insufficient access rights to perform the operation. Active directory response: 00002098: SecErr: DSID-03150E49, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0 + CategoryInfo : NotSpecified: (:) [Enable-Mailbox], ADOperationException + FullyQualifiedErrorId : [Server=MAIL,RequestId=8c112c0a-8ad9-4cb2-9d28-a98ff374e8fe,TimeStamp=3/28/2016 8:30:15 PM] [FailureCategory=Cmdlet-ADOperationException] E848E14F,Microsoft.Exchange.Management.RecipientTasks.EnableMail box + PSComputerName : mail.xxxxxx.local
There is a simple solution there.
You should open up the Active Directory Users and Computers tool, select a user and enable inheritance by using appropriate button.
That’s it.