Exchange AD Access Denied

[Samm]

Hi,

 

When you try and create a shared mailbox or a room mailbox in our on prem exchange 2013 you get the following error:

 

[TABLE="width: 339"]
[TR]
[TD]Active Directory operation failed on ***-DC-1.*****.org.uk. This error is not retriable. Additional information: Access is denied. Active directory response: 00000005: SecErr: DSID-03152612, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0[/TD]
[/TR]
[/TABLE]

 

Has anyone got any ideas, i have seen a few suggestions that i should run the exchange setup again with the /preparead flag but i'm not sure about this.

 

This is also a hybrid exchange but 99.9% of mailboxes are located in 365

 

 

EDIT: We seem to also get errors about missing system mailboxes in event viewer

Thanks

Sam

Edited January 30, 2020 by Samm

[MatthewL]

Does your account you are logging in with have exchange admin permissions (going back to me Exchange 2003 days you needed to add that group to make it work) just incase that is an issue.

[Samm]

I have checked and added my account to the exchange admin groups. I even get this error when trying to create a mailbox with the domain admin account.

[MatthewL]

Domain Admin's are not necessarily Exchange Admin's so be mindful of that.

 

Has the Exchange box been rebooted?

[Samm]

Yes i rebooted it yesterday, I have checked the permissions and the domain admin account is a member of Organization Management.