INSUFF_ACCESS_RIGHTS (Insufficient Access Rights) SBS2008 Mailbox Quota Change

As per the title, if you are seeing this error (in the logs) when you try to change a users mailbox quota via the SBS2008 Console then I have a fix for you….

You may also see this in the console.log file:

An exception of type ‘Type: Microsoft.WindowsServerSolutions.Messaging.Management.MessagingTaskException, MessagingManagement, Version=6.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35’ has occurred.
Timestamp: 12/02/2009 10:40:45
Message: Active Directory operation failed on yourserver.yourdomain.local. This error is not retriable. Additional information: Insufficient access rights to perform the operation.
Active directory response: 00002098: SecErr: DSID-03150E8A, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

Stack:    at Microsoft.WindowsServerSolutions.Messaging.Management.MessagingRunspace.StaticExecute(String cmdlet, Dictionary`2 parameters)
    at Microsoft.WindowsServerSolutions.Messaging.Management.MailboxConfiguration.Update(String SamAccountName, ConfigurationData newConfig)
    at Microsoft.WindowsServerSolutions.Messaging.Tasks.TaskSetMailboxLimit.Run(ITaskDataLink dataLink)

[7256] 091202.104045.2458: AdminTME: [Committer] Task failed = TaskCommitUserChanges, RootParentTaskId = TaskCommitUserChanges
[7256] 091202.104156.0060: AdminTME: Committer: Committer Completed.

You will also not be able to edit mailboxes directly via the Exchange 2007 Admin console, and get a myriad of other permissions type errors.

Amazingly, the issue is simply a cached password to your server.  

Click on Start, Run, and type:

“control keymgr.dll”, then press return.

In the list, clear any entries.

Fixed.

tadaaa!