Exchange 2010 (INSUFF_ACCESS_RIGHTS) This error is not retriable. Additional information: Access is denied

Thank to: https://ayalaaii.wordpress.com

Error:
Active Directory operation failed on FQDN.dc.com. This error is not retriable. Additional information: Access is denied.
Active directory response: 00000005: SecErr: DSID-031521D0, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

I recently found myself with a dilemma, I have an Exchange 2003 and Exchange 2010 environment, and about a week ago, both exchange servers started to have issues with creating mailboxes, updating OAB, etc. I started to troubleshoot the basics “permissions”. These kind of issues normally indicates “permissions”, open Active Diretory Users and Computers, and under view select Advanced 

Features, then right click your Domain and select Properties afterwards got to the Security tab and it will take you to this section.

 

Now it is very important that if the “Include Inheritable permissions from this objects parent” is cheked you uncheck it Apply setting, then go back check it and Apply agaain, ensuring that permission will get re-applied. If this doesnt’ work then you could also go to the System Folder on your domain:

right click, and select properties on AdminSDHolder and verify that “Include Inheritable permissions from this objects parent” is cheked.

Now if you still get:

Error:
Active Directory operation failed on FQDN.dc.com. This error is not retriable. Additional information: Access is denied.
Active directory response: 00000005: SecErr: DSID-031521D0, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0



REPORT THIS AD



there is still hope, now this is what worked for me, from Exchange Server

1. insert the Installation dvd for Exchange 2010

2. open command prompt

3. change directory to the Exchange setup dvd

4. execute the following command : Setup /PrepareAD



this command will run the ForestPrep and Domain Prep for Exchange Environment, and will re-add all the permissions to the Forest and Domain.

After this all should be working as it was before.