How to Fix Exchange Server Error 00002098

This article will help you to solve the problem with the creation of a mailbox. It occurs when you are trying to create a mailbox for an existing user.

Here is an error code:

Active directory response: 00002098: SecErr: DSID-03150E49, problem 4003 (INSUFF_ACCESS_RIGHTS)

First time we have encountered this error during switching mailbox accounts that were present even before Exchange Server deployment.


The full text of error message:

[PS] C:Windowssystem32>Get-User John | Enable-Mailbox Active Directory operation failed on dc.xxxxxx.local. This error is not retriable. Additional information: Insufficient access rights to perform the operation. Active directory response: 00002098: SecErr: DSID-03150E49, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0 + CategoryInfo : NotSpecified: (:) [Enable-Mailbox], ADOperationException + FullyQualifiedErrorId : [Server=MAIL,RequestId=8c112c0a-8ad9-4cb2-9d28-a98ff374e8fe,TimeStamp=3/28/2016 8:30:15 PM] [FailureCategory=Cmdlet-ADOperationException] E848E14F,Microsoft.Exchange.Management.RecipientTasks.EnableMail box + PSComputerName : mail.xxxxxx.local

There is a simple solution there.

advanced security settings

You should open up the Active Directory Users and Computers tool, select a user and enable inheritance by using appropriate button.

That’s it.

I enjoy technology and developing websites. Since 2012 I'm running a few of my own websites, and share useful content on gadgets, PC administration and website promotion.
Latest posts by Cyril Kardashevsky (see all)

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.