Cannot Create New Mailbox

Question

Hi all,
First of all I already create a similar thread : http://social.technet.microsoft.com/Forums/en-US/b8f88745-ca79-43f9-8857-3b87781e5c19/rbac-to-create-mailbox?forum=exchangesvradmin 
I got a problem in my Exchange Server 2013 environment. I cannot create new mailbox (new user) from ECP. But I can create new mailbox and choose existing user.
Active Directory operation failed on DC.mydomain.com. This error is not retriable. Additional information: Access is denied. Active directory response: 00000005: SecErr: DSID-031A121F, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0 
already try with no luck :
re-inherit the permission.
setup /prepareAD
I create new user and assign Org Management & Domain Admin
how to check whether the permission in my AD is correct ? or any idea should I start troubleshooting ?
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Krisna Ismayanto | My blogs: Krisna Ismayanto | Twitter:
@ikrisna

Answer 1

solved by executing setup.exe /preparedomain
and I found one of the server in container ADSIEdit were disabled inheritance. execute setup.exe /prepareAD, reboot the server (because it
ask for it), then execute setup.exe /preparedomain
cheers ! :)
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Krisna Ismayanto | My blogs: Krisna Ismayanto | Twitter:
@ikrisna