During Exchange 2007 to 2010 migration some mailbox move operations fails with error:

Active Directory operation failed on domain-controller-name. This error is not retriable. Additional information: Insufficient access rights to perform the operation.
Active directory response: 00002098: SecErr: DSID-03150BB9, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
The user has insufficient access rights.

This error is similar to one described here. Resolution is also the same – re-enable inheritable permissions the users in question:

Open user account properties in Active Directory Users and Computers, change to Security tab > Advanced – check Include inheritable permissions from this object’s parents.