prepareAD exchnage 2019 CU12 nsufficient access right

Hello,

Im trying to update my exchange 2019 CU9 to CU12 , and Im getting the below error

note: the user in all the needed security group , the Exchange Trusted Subsystem has full rights on the root OU

logs:

active directory operation faild access denied 0000005 (DSID-03152C55, problem 4003 insufficient access right ) the users has insufficient access right)