After recover Exchange 2013 in "Setup /m:RecoverServer" mode, the server does not allow to change any settings or create new mailboxes, giving the same error:
Active Directory operation over DC failed. This error does not allow retry.
Additional information: You do not have enough permissions to execute the operation.
Active Directory Reaction: 00002098: SecErr: DSID-03150BC1, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
+ CategoryInfo : NotSpecified: (:) [Enable-Mailbox], ADOperationException
+ FullyQualifiedErrorId : [Server=EMAIL,RequestId=d85a204a-cc37-4819-93de-8b6a46693bd5,TimeStamp=05.05.2021 11:47: 43] [FailureCategory=Cmdlet-ADOperationException] 268CEFB0,Microsoft.Exchange.Management.RecipientTasks.EnableMail
box
+ PSComputerName : email.contoso.com
