Active Directory operation failed on *DomainController*. This error is not retriable. Additional information: Insufficient access rights to perform the operation.

When you try to move a mailbox from Exchange 2007 to Exchange 2010,  following error occured:

Error:
Active Directory operation failed on *DomainController*. This error is not retriable. Additional information: Insufficient access rights to perform the operation.
Active directory response: 00002098: SecErr: DSID-03150E8A, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

The user has insufficient access rights.

Exchange Management Shell command attempted:
’*OUStructure*’ | New-MoveRequest -TargetDatabase ‘Mailbox Database 1985885663′ -BadItemLimit ‘-1′

To resolve this error…..by editing the Advanced Security Settings for that user,

• Open Active Directory Users and Computers
• Find the user of which the mailbox error occured
• Open  the properties of the user and go to the security tab (if this is not available, choose view and then advanced features in the AD users and computers under  MMC)
• Click on [Advanced]
• Check the box at the bottom which says “Include inheritable permissions from this object’s parent” and then click [OK] twice.

Image may be NSFW.
Clik here to view. Error fixing

Then try to move it and it will work…

Image may be NSFW.
Clik here to view.

Image may be NSFW.
Clik here to view.