KB20150909-1 Enable Mailbox for AD User in child domain fails

Published: 9/9/2015
Applies to: Cayosoft Administrator 3.x or later 

---

Issue

Unable to mail enable AD user accounts when the account resides in a child domain

Description

Unable to mail enable Active Directory (AD) accounts in child domains.  Receiving the following error:

"Active Directory operation failed on <DOMAINCONTROLLER>. This error is not retriable. Additional information: Insufficient access rights to perform the operation. Active directory response: 00002098: SecErr: DSID-03150BB9, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0"

Cause

The Cayosoft Administrator Services is running under "Local System account" instead of the domain member service account.

Resolution

The service account for Cayosoft Administrator requires the necessary permissions to carry out operations (granting permissions, updating directories and editing files). In addition, the user account must belong to the group “Domain Users” and be configured with the extended user permission “Log on as a service”.

 

---

Related Articles

KB20160524-2 How to change the Cayosoft Administrator Service Account(s)