During Exchange 2007 to 2010 migration some mailbox move operations fails with error:
Active Directory operation failed on domain-controller-name. This error is not retriable. Additional information: Insufficient access rights to perform the operation.
Active directory response: 00002098: SecErr: DSID-03150BB9, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
The user has insufficient access rights.
This error is similar to one described here. Resolution is also the same - re-enable inheritable permissions the users in question:
Open user account properties in Active Directory Users and Computers, change to Security tab > Advanced - check Include inheritable permissions from this object's parents.
