Thursday, March 15, 2012

Enabling Privileged Accounts for Lync

While it is not recommended to enable privileged accounts (e.g. Domain Admins) for Lync or Exchange, sometimes it is needed.

By default, Lync blocks the option when trying to enable a Domain Admin from the Lync Control Panel.  In my example, I am enabling the Administrator account.  I receive the following error:

Active Directory operation failed on <DC server name>. You cannot retry this operation: “Insufficient access rights to perform the operation…..”

Lync - Enable Admin failure

The error is pretty explanatory.  So to test out the solution in the error, we should try enabling the privileged account by:

  • Logging into server as a member of the Domain Admins group
  • Enabling the user using the Lync Management Shell (LMS)

So trying again from the Lync Management Shell:

Enable-CsUser Administrator –SipAddressType SamAccountName –SipDomain twhlab.com –RegistrarPool pool.twhlab.com

Lync - Enable Admin command

The command runs successfully and now the Administrator account is enabled for Lync.

Lync - Enable Admin CP

Enabling privileged accounts must be performed from the Lync Management Shell.

7 comments:

  1. "Enabling privileged accounts must be performed from the Lync Management Shell." - Not exactly correct - the issue also occurs with these accounts when enabling for Active Sync in Exchange 2010 - go to the AD poperties (make sure Advanced Features is enabled) select the "security" tab > select "Advanced" UNCHECK "include iheritable premissions from this objects parents" then Enable user don't worry in about an Hour AD will reanable the setting

    ReplyDelete
  2. Intersting and beautiful blog lovely presentation thanks for sharing your views...microsoft software support

    ReplyDelete
  3. "While it is not recommended to enable privileged accounts (e.g. Domain Admins) for Lync or Exchange, sometimes it is needed."

    Out of curiosity, why is this not recommended?

    ReplyDelete
    Replies
    1. It's more of and AD/security discussion. I never recommend using priviledge accounts for daily activity (email, IM, etc.). If that account gets compromised or infected with a virus, there are no bounds for possible spread of attack. So always split your everyday account from your administrative account.

      Delete
  4. Steph Curry reps his home state’s NFL team with a special colorway of the Under Armour Curry 3 for the Carolina Panthers. With the Panthers being Steph’s favorite KD shoes football team and fellow Under Armour athlete Cam Newton on the squad, the move to release a teal and black edition of kobe basketball shoes the Curry 3 is certainly not very surprising, and as you can see, the execution is on point. No release date for Kobe 10 the “Panthers” Curry 3 has been announced yet, so stay tuned to Sneaker News for further information.
    In my opinion, the Ambassador Derrick Rose Shoes 8 outperformed the signature Lebron XIII, last year’s Soldier 9, and, with confidence, outperforms the current Soldier 10. Today we get a LeBron 14 first glimpse at the rumored Nike Lebron Ambassador 9.While there are very little details about the shoe, we can already tell the Curry 2.5 outsole uses XDR rubber for outdoor traction. Most overseas models utilize the more dense XDR rubber due to the nature of the Curry Shoes outdoor courts that the shoe is played on. The cushion set up is unknown, however, what is visible is the heel Zoom. Golden State Warriors Jerseys I personally hope they utilize slightly bigger or even the same Zoom Air unit used in its predecessor (the Ambassador 8) because Warriors Team Store that cushion set up was amazing. The traction pattern uses a non-traditional setup with a mixture of aggressive herringbone patterns with some Curry 2 similar diamond grid pattern from last year’s model (which I loved).What disappears from its predecessor is the TPU wings for its lacing Kobe high top as the Ambassador 9 opts for a more traditional system. Fuse is on the high-wear areas along with a full mesh upper. Kyrie 2 Lebron James’ symbol hits the toe while his jersey number is flaunted on the tongue of the shoe and also printed into kobe 9 elite the rubberized outsole.There has been no release date nor price however we here at WearTesters.com will keep you up-to-date with the latest KD 6

    ReplyDelete