This error implies that the account that you are using does not have permissions on the DC to change the user account information in the AD. In order to migrate mailboxes you should have mailbox permissions plus DS permissions to modify the user accounts in the AD. Verify the permissions of the Exchange and domain controller (DC) servers.