When creating a mailbox for some users from under the domain, after selecting a user, Exchange gives an error, how to fix it?

Question

Active Directory

When creating a mailbox for some users from under a domain, Exchange 2016 gives the message
Active Directory operation on domain failed. This error does not allow a retry. Additional information: You do not have sufficient rights to perform the operation. Active Directory response: 00002098: SecErr: DSID-03150BB9, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

Answer 1

From the description it is not very clear what "from under the domain" means.
The first and obvious is the problem with rights.
The second - ekschedzh can work with HELL in shared-permission and AD Split-permissions.
In the first case, he makes modifications on behalf of your account, in the second case, he acts on behalf of the "Exchange Trusted Subsystem" group.
Depending on the mode in which - check the rights to the OU in AD in which you create the mailbox.
In split permission it is meant - that the account in AD is created by the Domain Administrator, the creation of the mailbox is done by the Exchange Administrator (or service desk).

Answer 2

Search lazy?