When you try to perform Microsoft Exchange Server management tasks such as Set-Mailbox and Move-Mailbox in a multidomain environment, you receive the following error message:
Active Directory operation failed on dc1.contoso.com. This error is not retriable. Additional information: Insufficient access rights to perform the operation. Active directory response: 00002098: SecErr: DSID-03150889, problem 4003 (INSUF_ACCESS_RIGHTS), data 0
This issue occurs only when you are running cmdlets against mailboxes in the domain in which the Exchange universal security groups reside. For example, this issue occurs when you are running cmdlets against mailboxes in Exchange Trusted Subsystem.