从exchange2003迁移mailbox到2010时的错误处理

错误：

某些用户的mailbox无法迁移到2010的database

错误提示：

Summary: 1 item(s). 0 succeeded, 1 failed.
Elapsed time: 00:00:00


UserA
Failed

Error:
Active Directory operation failed on mail.domain.com. This error is not retriable. Additional information: Insufficient access rights to perform the operation.
Active directory response: 00002098: SecErr: DSID-03150A48, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

The user has insufficient access rights.
Click here for help... http://technet.microsoft.com/en-US/library/ms.exch.err.default(EXCHG.141).aspx?v=14.1.218.11&t=exchgf1&e=ms.exch.err.Ex6AE46B

Exchange Management Shell command attempted:
'domain.com/domain Staff Users/UserA' | New-MoveRequest -TargetDatabase 'Mailbox Database Exchange2010SP1' -BadItemLimit '0'

Elapsed Time: 00:00:00
 

解决办法：

http://www.msexchange.org/articles_tutorials/exchange-server-2007/management-administration/exchange-2007-issues-mailbox-management.html

1. Run the Active Directory Users and Computers snap-in and locate the user account.
2. Bring up the properties of the user account and go to the Security tab. If you don’t see the Security tab, choose View / Advanced Features.
3. On the Security tab, click the Advanced button.
4. You should now see a screen similar to the one shown in Figure 5. Notice the fact that the check box Allow inheritable permissions… is not selected. This is the problem. If you re-select this check-box and close the property pages of the user account, you should now find that OWA works for this user. This assume
5. s that all necessary Active Directory replication has completed, of course.