Cannot Create New Mailbox

Hi all,

First of all I already create a similar thread : http://social.technet.microsoft.com/Forums/en-US/b8f88745-ca79-43f9-8857-3b87781e5c19/rbac-to-create-mailbox?forum=exchangesvradmin 

I got a problem in my Exchange Server 2013 environment. I cannot create new mailbox (new user) from ECP. But I can create new mailbox and choose existing user.

Active Directory operation failed on DC.mydomain.com. This error is not retriable. Additional information: Access is denied. Active directory response: 00000005: SecErr: DSID-031A121F, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0 

already try with no luck :

1. re-inherit the permission.
2. setup /prepareAD
3. I create new user and assign Org Management & Domain Admin

how to check whether the permission in my AD is correct ? or any idea should I start troubleshooting ?

Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Krisna Ismayanto | My blogs: Krisna Ismayanto | Twitter:@ikrisna