Exchange 2010 error Creating Contact

Question

I get the below error when doing any action in 2010 EMC or via 2010 powershell. I also get it when moving mailbox from 2007 to Office 365. My setup is Exchange 2007 with an Exchange 2010 SP3 Hybrid server with HUB and CAS roles installed. I can create
this object in 2007 EMC or in ADUC.
Summary: 1 item(s). 0 succeeded, 1 failed.
Elapsed time: 00:00:00
UserX
Failed
Error:
Active Directory operation failed on xxx.xxx.local. This error is not retriable. Additional information: Access is denied.
Active directory response: 00000005: SecErr: DSID-031521D0, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
The user has insufficient access rights.
Click here for help... technet.microsoft.com/en-US/library/ms.exch.err.default(EXCHG.141).aspx?v=14.3.123.3&t=exchgf1&e=ms.exch.err.Ex6AE46B
Exchange Management Shell command attempted:
New-MailContact -ExternalEmailAddress 'SMTP:[email protected] 'user user' -Alias 'user' -FirstName 'user' -Initials '' -LastName 'user' -OrganizationalUnit 'xxx.local/Contacts'
Elapsed Time: 00:00:00

Answer 1

Hi,
First, please make sure the account have these required permissions: Organization Management and Recipient Management.
Please check on your account in AD under advanced settings if the checkbox "Include inheritable permissions from this object's parent" is checked as this can cause problems when you perform Exchange tasks.
Have you tried to execute the Setup /PrepareAD command to check the result? This command will run the Forest Prep and Domain Prep for Exchange Environment and will re-add all the permissions to the Forest and Domain.
If no, it's worth to try it.
If the issue persists, to narrow down the issue, I need to clarify one thing.
Did you install Exchange 2010 using the split permissions model?
For the split permissions model, please refer to:
Understanding Split Permissions
Here is a similar thread for your reference.
http://social.technet.microsoft.com/Forums/exchange/en-US/96fb93d7-ad47-4c12-a847-05b16fd57ace/exchange-2010-sp2-forest-level-win2008r2-errors-newmailbox-type-etc?forum=exchange2010
Hope this helps.
Best regards,
Belinda
Belinda Ma
TechNet Community Support