One of the most common problems that you can encounter during an Exchange migration is the error in the process of moving a mailbox from the legacy Exchange to the new one, This is the most classic error:
Active Directory operation failed on server.nomedominio.local. This error is not retriable. Additional information: Insufficient access rights to perform the operation.
Active directory response: 00002098: SecErr: DSID-03150A48, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0”:
I think I've got this error in ALL the exchange migrations with at least 50 users…
Fortunately, if the error is the one I have reported the solution is very simple, it is a permissions problem at the user level in active directory (the error is not really clear INSUFF_ACCESS_RIGHTS yes… but about what?!?!?!?! And I wonder… why Microsoft does not adjust the description since it's a so common error?)
So as I was saying, the solution is simple: you have to go in active directory users and computers, enable advanced features in the view menu, go on involved user properties (the one whose mailbox you are trying to move), security tab, click on the button “Advanced”, verify that the check that enable propagation of permissions is enabled, if it's not checked enable it and click ok or apply. After fixing the permissions of the user you should be able to move the mailbox without problem.
In the title I wrote from exchange 2003 to 2010 but being an active directory permissions problem the error can also occur between 2007->2010 2010->2013