NewMoveRequest Error -2147467259 00002098: SecErr: DSID-03150BB9, problem 4003 (INSUFF_ACCOUNT_ (4352504)

MTA fails with the following error:

12/8/2011 9:29:45 AM PowerShellCmdExec::NewMoveRequest Error -2147467259 Active Directory operation failed on DC04.source.local. This error is not retriable. Additional information: Insufficient access rights to perform the operation.

Active directory response: 00002098: SecErr: DSID-03150BB9, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

The log indicates an issue with permissions and insufficient rights.

Examine the affected object in AD Users and Computers and confirm that the service account has sufficient permissions. Under the Security tab click on Advanced and verify that inheritance is enabled and the service accounts permissions in AD do propagate to this object.

For more information about the inheritance and permissions propagation please also review the following articles:

SOL17416
https://support.quest.com/SolutionDetail.aspx?id=SOL17416&pr=

and SOL22213
https://support.quest.com/SolutionDetail.aspx?id=SOL22213&pr=

One of them could be: http://thoughtsofanidlemind.wordpress.com/2010/10/08/ex2010-insufficient-access/