An error occurred while updating the calendar event
If this succeeds, synchronization proceeds and all is well.If Exchange is blocked by Active Directory permissions, synchronization fails and event 1053 for MSExchange Active Sync is logged in the Application Event Log.In this example, we create a new move request to move my mailbox by running the New-Move Request -Identity 'Redmond' -Bad Item Limit 10 -MRSServer exserver1.-Target Database DB2 New-Move Request : Active Directory operation failed on AD-Root. Additional information: Insufficient access rights to perform the operation.Active directory response: 00002098: Sec Err: DSID-03150BB9, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0 At line:1 char:16 New-Move Request Bang!
The word is that the problems described here tend to affect highly privileged user objects that were created before the deployment of Exchange 2010.
Both share the same fundamental root cause in that Exchange 2010 is unable, for some reason, to update or create information in Active Directory.
The first issue I’ll discuss is when you can’t create a new mailbox move request for some reason.
The move request fails immediately and we’re told that the problem is with Active Directory.
We can also see that it’s due to insufficient access rights.
A process called SDPROP runs every 60 minutes (default interval) on the PDC to check the ACL of protected groups such as Administrators and reset their inherited permissions to that specified for the Admin SDHolder object.