How to Fix Exchange Server Error 00002098

March 29, 2016 Cyril Kardashevsky Active Directory, Exchange, Miscellaneous, Windows, Windows 10

This article will help you to solve the problem with the creation of a mailbox. It occurs when you are trying to create a mailbox for an existing user.

Here is an error code:

Active directory response: 00002098: SecErr: DSID-03150E49, problem 4003 (INSUFF_ACCESS_RIGHTS)

First time we have encountered this error during switching mailbox accounts that were present even before Exchange Server deployment.

The full text of error message:

[PS] C:Windowssystem32>Get-User John | Enable-Mailbox Active Directory operation failed on dc.xxxxxx.local. This error is not retriable. Additional information: Insufficient access rights to perform the operation. Active directory response: 00002098: SecErr: DSID-03150E49, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0 + CategoryInfo : NotSpecified: (:) [Enable-Mailbox], ADOperationException + FullyQualifiedErrorId : [Server=MAIL,RequestId=8c112c0a-8ad9-4cb2-9d28-a98ff374e8fe,TimeStamp=3/28/2016 8:30:15 PM] [FailureCategory=Cmdlet-ADOperationException] E848E14F,Microsoft.Exchange.Management.RecipientTasks.EnableMail box + PSComputerName : mail.xxxxxx.local

There is a simple solution there.

You should open up the Active Directory Users and Computers tool, select a user and enable inheritance by using appropriate button.

That’s it.

Author
Recent Posts

Cyril Kardashevsky

I enjoy technology and developing websites. Since 2012 I'm running a few of my own websites, and share useful content on gadgets, PC administration and website promotion.

Latest posts by Cyril Kardashevsky (see all)