If you end up with message Action ‘Disable’ could not be performed on object ‘name’ along with “Active directory response: 00002098: SecErr: DSID-03150BB9, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0”, there is an explanation and solution for this issue.
Is the active directory account for the Mailbox disabled? If yes, Mailbox is probably lost permission on SELF account. I would recommend enable the Active Directory account to disable or delete the mailbox.
Now the real explanation would be the account Exchange Trusted Subsystem don’t have permissions for the account to remove the Exchange attributes. It may be due the permissions are NOT inheriting to the user account.
The solution is to do the two things.
1. Give Exchange Trusted Subsystem account Full Control over the User account
- Open Active Directory Users and Computers console
- Click View –> Advanced Features
- Find the User account and double click to open the properties.
- Click on Security Tab
- Select Exchange Trusted Sub System and check the box for Full control permission.
2. Enable permission In-heritance
- On the Security tab on user account properties (see above picture), click on Advanced button
- Check the box for
Wait for Active Directory Replication to happen or trigger manual replication between servers and sites. Try disable or delete operation again on the same mailbox.
If that works for you, reply “Yay!” for me here.
Yay! Thanks!
Yay to you
Thanks
Thanks, was having issues adding send as permission and also creating a new mailbox to an existing user. getting the above error. In the second case the user account didn’t have the Exchange Trusted Subsystem account in the Security tab at all.
All working now.
Dan
Thanks it woked
Yay!
Excellent! worked like a charm
What if I deleted the user prior to deleting the mailbox?
Yay! I was going to delete a users account and re-add them because I could not get their Cell phone to send/receive emails…. SO I tried to delete the account and got the error as described above. After applying this fix I decided to try setting up the users email account on my phone IT WORKS…. THANKS!!!!
Yay! Thank you!
Hi, thanks, I had to switch on Inheritance. This worked like a charm. Greetings from Frankfurt
Yay! First time fix. Thank you.
Yay! Thank!!!!!
Worked great! Appreciate the tip!
Yaaaaaaay!!!!!!!
Nice post. It worked where other posts didn’t. Kudo’s.
Yay! Thanks!
Yay! Thank you!!!
Yay
Yay 🙂