Enable Mailbox for AD User in child domain fails

Issue

Unable to mail enable AD user accounts when the account resides in a child domain.

Description

Unable to mail enable Active Directory (AD) accounts in child domains. Receiving the following error:

Active Directory operation failed on <DOMAINCONTROLLER>. This error is not retriable. Additional information: Insufficient access rights to perform the operation. Active directory response: 00002098: SecErr: DSID-03150BB9, problem 4003 (INSUFF_ACCESS_RIGHTS),
data 0

Cause

The Cayosoft Administrator Service is running under Local System account instead of the domain member service account.

Resolution

The service account for Cayosoft Administrator requires the necessary permissions to carry out operations (granting permissions, updating directories and editing files). In addition, the user account must belong to the group Domain Users and be configured with the extended user permission Log on as a service.

Related Articles

How to change the Cayosoft Administrator Account(s)