Hi All,

I am migrating my 2010 public folders across to 2013 and am at the point of setting up/creating my Public Folder Mailbox. However when doing so in powershell as below I receive an access denied. Insufficient Access Rights.

new-mailbox -publicfolder pfmailbox -isexcludedfromservinghierachy $true -holdformigration

The powershell is

ACtive Directory operation failed. This error is non retrieveable. Additional information : Access is denied

Active directory response : 0000005 Problem 4003 INSUFF_ACCESS_RIGHTS

I have ensure Powershell is run as admin, the user is part of all exchange groups necessary including subsystem.

Anyone have any idea as to why I am getting error?

You've connected to Office 365 before executing the command, right?  Is the account you've used to connect in Organization Admins?

Do you have multiple domains in your forest?

Sorry, this isn't a 365 ENVIROMENT or hybrid. Just 4 standalone 2013 boxes.

We do have multiple domains in the organisation yes.

Hi,

According to the error, it seems to be the permission issue.

I suggest we can complete the migration refering to the following article.

The process to move public folders to Exchange 2013 is documented on TechNet:

https://technet.microsoft.com/en-us/library/jj150486(v=exchg.150).aspx   

I have found a helpful article for your reference:

https://supertekboy.com/2014/10/13/2013-public-folder-migration-made-easy/

Please note: Since the website is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information. And the changes made in the above blog is not supported officially by Microsoft.

Regards,

David 

Hi,

It seems to be problem with creating\removing public folder health mailbox in active directory Monitoring Mailboxes container permission. So please provide the permissions for creating \deleting objects in the Monitoring Mailboxes container in active directory. For your reference please fine the below URL.      https://support.microsoft.com/enus/kb/3046530                                                                                                                                                                          

Hi Guys,

So just to confirm, I am able to run the command fine I am just coming across a permissions error. Where abouts in AD am I able to give permissions over creating public folder mailbox?

Kumar - the post helps however is for deleting a monitoring mailbox so won't add any permissions to my public folder query

Do you have multiple domains?  Does the account you're using have rights in the root domain?

We have only one DOMAIN and the account I am using has permissions over everything including the exchange servers, subsystem etc etc

Sorry, does anyone else have any ideas here?