When merging contacts with security objects in Notes Migrator for Exchange, the object is mail enabled properly. However, the contact object is not deleted and the following error is seen:
16:34:55 ERROR: [7437-1-196-00000000] Unable to enable object. Reason: 'ErrorId: 9B9977FE
16:34:55 Error: Active Directory operation failed on DC.Domain.com. This error is not retriable. Additional information: Insufficient access rights to perform the operation.
16:34:55 Active directory response: 00002098: SecErr: DSID-03150BB9, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
16:34:55
This issue is caused when the logged in account on the migration console does not have the needed rights to the AD domain.
1- Verify you logged in as migration service account to NME server
2- Verify migration service account is a member of Domain Admin as Primary Group
3- Verify migration service account is a member of Exchange Organization Management Group
4- Verify "inheritable permissions from this object's parent" by going to security tab of the object
During the merge process, the logged in account is used to delete the contact object.
