Attempting to remove old Accepted Domains from Organization/Hub Transport/Accepted Domains on Exchange 2010 EMC.
--------------------------------------------------------
Microsoft Exchange Error
--------------------------------------------------------
Action 'Remove' could not be performed on object 'domain.com'.
domain.com
Failed
Error:
Active Directory operation failed on "domain controller.com". This error is not retriable. Additional information: Insufficient access rights to perform the operation.
Active directory response: 00002098: SecErr: DSID-03150E8A, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
The user has insufficient access rights.
I am mostly through with an exchange 03 and 2010 side by side migration. The account i'm using is part of domain admins, exchange organization admins, organization management.
Based on all the articles I've read on this I've done the following:
The account I'm using is part of domain admins, exchange organization admins, organization management. I have checked the permissions on the account are inherited.
I have created a new account and given it all the same permissions and made sure they were inherited and get the same error.
I've connected adsiedit to configuration /services/Microsoft Exchange/"domain"/administrative groups/exchange administrative group and confirmed that the Exchange Trusted Subsystem group has full control and inherited permissions the entire folder path to the database files.
I've read a lot of articles and tried what unique fixes there are to remedy this, i cannot get rid of the permissions error.
I have found the Accepted Domains in Adsiedit and am considering just deleting them from there if it's an option, but that still doesn't fix my permissions problem.
Any help would be greatly appreciated.
Mike
