Unable to Administer Exchange 2010 - Insufficient access rights to perform the operation.

Not open for further replies.


I am in the process of trying to migrate from Exchange 2003 to Exchange 2010. The domain structure is such that there is a root domain ("company.local" ) which has no exchange server. Under this is a number of state based domains (eg "qld.company.local") in which Exchange 2003 has been operating for years.

I have successfully prepared forest and domains and installed Exchange 2010 into the "qld.company.local" domain. This all appeared to go perfectly until I tried to configure anything on the new Exchange 2010 installation. I cannot perform almost any administrative task, even applying the ProductKeyt without getting the following error:

Active Directory operation failed on SVR-01.qld.company.local. This error is not retriable. Additional information

: Insufficient access rights to perform the operation.

Active directory response: 00002098: SecErr: DSID-03150BB9, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
+ CategoryInfo : NotSpecified: (0:Int32) [Set-ExchangeServer], ADOperationException
+ FullyQualifiedErrorId : 9010B41B,Microsoft.Exchange.Management.SystemConfigurationTasks.SetExchangeServer

The new exhcnage server boots with clean logs except for the following application log error

Log Name: Application

Source: MSExchangeRepl

Date: 16/08/2010 11:28:07 AM

Event ID: 4098

Task Category: Action

Level: Error

Keywords: Classic

User: N/A

Computer: SVR-03.qld.company.local


The Microsoft Exchange Replication service couldn't find a valid configuration for database '3728d80d-1037-4570-b9d4-b8026f544b5c' on server 'SVR-03'. Error:

I have tried everything I can think of or have been able to find possible explanations/solutions for this problem without luck.

Happy to provide any additional details that may be of useful if anyone has ideas.


Are you using the same account that you performed the exchange upgrade on? Also check the security group " Organization Managemement" to make sure your account is in there.


Yes, and I have also tried to administer from the administrator account in the domain at the root of the forest. I have checked that the domain accounts being used are in the relevant Exchange Security Groups.


Local Domain (qld.company.local) currently has four domain controllers. Three original Windows 2003 Servers and one new 2008R2 machine. The root domain has four as well, three 2003 boxes in different states and an new 2008R2 machine installed locally. All domain replication has been checked and is working fine.

Installing the lastest rollup now. Will report backl shortly.


OK another thing to check is to make sure that UAC isnt blocking you. When you open up the Exchange Management Shell right click it and select open as administrator.



Definitely not a UAC problem. Does the same with the Shell opened 'Run as Administrator'.

Have now installed Rollup 4. No change to the problem.


Thanks. The cmdlt did not help but working my way through the referenced article did. In my case it was the need to add the Server itself to the Trusted Subsystem Group. Seems that the installer does not do this in multi-domain installations.

Thanks for the help.
Not open for further replies.
Thread starter Similar threads Forum Replies Date
A Unable to save recurring Meeting to Documents folder due to error Using Outlook 2
O Outlook 365 - suddenly unable to send using Gmail POP3 Using Outlook 10
S Outlook 2010 unable to change default font Using Outlook 7
Q Unable to Sync Quicken reminder with Outlook 2016 64Bit Using Outlook 1
S Unable to remove rule outlook 2010 Using Outlook 0
L Wierd Office 365 Contact unable to edit body of random contacts Using Outlook 5
X Unable to send an email from one account to another on same PC Using Outlook 2
Mark Foley Unable to subscribe to published calendar in Outlook 2010 Using Outlook 4
S Unable to Edit Contact Information in Certain Contact Folders Using Outlook 3
P Deleted Items - Unable to Iterate All of Items Outlook VBA and Custom Forms 1
G Unable to dismiss reminders from share point list calendar shared in Outlook Using Outlook 2
R Unable to install without email account Using Outlook 4
E Unable to open Outlook 2010 after adding new email account Using Outlook 4
A Outlook 2016- unable to have all subfolders expanded when opening outlook Using Outlook 11
avant-guvnor Unable to view certain emails in Outlook 2016 Using Outlook 16
M Unable to Configure Gmail Account in Outlook 2007 Using Outlook 1
D Unable to Send On Behalf of Another User Exchange Server Administration 0
J Unable to link email messages in BCM using a single microsoft office 365 account in outlook 2013 BCM (Business Contact Manager) 1
Tim King Outlook 365 unable to change accounts Using Outlook 0
R Unable to send mail using Cox.net Using Outlook 1
T Unable to 'Upload a file' using popup 'Browse' button Using Outlook 0
D Unable to add email address to contact Using Outlook 3
G Outlook calendar entry corrupted. Constant pop up when you open outlook. Unable to delete or remove. Using Outlook 2
O OL2000: Unable to create IMAP account Using Outlook 2
wallisellener Unable to reply/post/create new thread using Chrome BCM (Business Contact Manager) 5
Rupert Dragwater unable to change font sizes in some replies Using Outlook 3
C Unable to see meeting attendees Outlook 2010 Using Outlook 5
M Unable to email from Word or Excel Using Outlook 11
O Unable to check name. Using Outlook 3
T Unable to create contacts subfolder in EAS profile Using Outlook.com accounts in Outlook 6
UncleBill Unable to delete items from gmail IMAP Trash using Outlook 2010 Outlook VBA and Custom Forms 5
B Unable to search delegated mailfile Using Outlook 3
K Unable to activate QueryBuilder in Outlook 2010 (32bit) with Windows 7 (64bit) Using Outlook 1
C Unable to forward email with URL Using Outlook 2
R New computer, OL2010 unable to display shared calendar appointments Exchange Server Administration 3
S unable to send email from my second address (outlook 2007) Using Outlook 2
A "Unable to display the folder" error when accessing Group mailbox Using Outlook 0
C Outlook 2010, two exchange mailboxes configured.Unable to see 2ndrymeeting req Using Outlook 2
H Outlook 2010 unable to send iCloud account e-mail after iOS 7 upgrade Using Outlook 12
B Unable to apply rule on Exchange server functional account Exchange Server Administration 1
J Archives: Unable to locate emails Using Outlook 1
S Unable to send or reeceive email in new Exchange 2010 Exchange Server Administration 0
B Unable to Accept meetings that are already Tentatively accepted Using Outlook 2
M Unable to read HTML Using Outlook 2
A Unable to send with attachments in Outlook 2013 (Exchange ActiveSync) Using Outlook 2
F Outlook 2010 unable to delete emails from scanner Using Outlook 1
T Unable to open msg files in Outlook 2010 Using Outlook 11
R catalog Content Index failed-Unable to mount database.(hr=0x80004005,ec=-501) Exchange Server Administration 0
R problem with incomming e-mail I am unable to print full e-mail letter Using Outlook 1
P Unable to delete custom forms in outlook 2010 Using Outlook 1
Similar threads