Thursday, March 15, 2012

Enabling Privileged Accounts for Lync

While it is not recommended to enable privileged accounts (e.g. Domain Admins) for Lync or Exchange, sometimes it is needed.

By default, Lync blocks the option when trying to enable a Domain Admin from the Lync Control Panel.  In my example, I am enabling the Administrator account.  I receive the following error:

Active Directory operation failed on <DC server name>. You cannot retry this operation: “Insufficient access rights to perform the operation…..”

Lync - Enable Admin failure

The error is pretty explanatory.  So to test out the solution in the error, we should try enabling the privileged account by:

  • Logging into server as a member of the Domain Admins group
  • Enabling the user using the Lync Management Shell (LMS)

So trying again from the Lync Management Shell:

Enable-CsUser Administrator –SipAddressType SamAccountName –SipDomain twhlab.com –RegistrarPool pool.twhlab.com

Lync - Enable Admin command

The command runs successfully and now the Administrator account is enabled for Lync.

Lync - Enable Admin CP

Enabling privileged accounts must be performed from the Lync Management Shell.

13 comments:

  1. "Enabling privileged accounts must be performed from the Lync Management Shell." - Not exactly correct - the issue also occurs with these accounts when enabling for Active Sync in Exchange 2010 - go to the AD poperties (make sure Advanced Features is enabled) select the "security" tab > select "Advanced" UNCHECK "include iheritable premissions from this objects parents" then Enable user don't worry in about an Hour AD will reanable the setting

    ReplyDelete
  2. "While it is not recommended to enable privileged accounts (e.g. Domain Admins) for Lync or Exchange, sometimes it is needed."

    Out of curiosity, why is this not recommended?

    ReplyDelete
    Replies
    1. It's more of and AD/security discussion. I never recommend using priviledge accounts for daily activity (email, IM, etc.). If that account gets compromised or infected with a virus, there are no bounds for possible spread of attack. So always split your everyday account from your administrative account.

      Delete
  3. Steph Curry reps his home state’s NFL team with a special colorway of the Under Armour Curry 3 for the Carolina Panthers. With the Panthers being Steph’s favorite KD shoes football team and fellow Under Armour athlete Cam Newton on the squad, the move to release a teal and black edition of kobe basketball shoes the Curry 3 is certainly not very surprising, and as you can see, the execution is on point. No release date for Kobe 10 the “Panthers” Curry 3 has been announced yet, so stay tuned to Sneaker News for further information.
    In my opinion, the Ambassador Derrick Rose Shoes 8 outperformed the signature Lebron XIII, last year’s Soldier 9, and, with confidence, outperforms the current Soldier 10. Today we get a LeBron 14 first glimpse at the rumored Nike Lebron Ambassador 9.While there are very little details about the shoe, we can already tell the Curry 2.5 outsole uses XDR rubber for outdoor traction. Most overseas models utilize the more dense XDR rubber due to the nature of the Curry Shoes outdoor courts that the shoe is played on. The cushion set up is unknown, however, what is visible is the heel Zoom. Golden State Warriors Jerseys I personally hope they utilize slightly bigger or even the same Zoom Air unit used in its predecessor (the Ambassador 8) because Warriors Team Store that cushion set up was amazing. The traction pattern uses a non-traditional setup with a mixture of aggressive herringbone patterns with some Curry 2 similar diamond grid pattern from last year’s model (which I loved).What disappears from its predecessor is the TPU wings for its lacing Kobe high top as the Ambassador 9 opts for a more traditional system. Fuse is on the high-wear areas along with a full mesh upper. Kyrie 2 Lebron James’ symbol hits the toe while his jersey number is flaunted on the tongue of the shoe and also printed into kobe 9 elite the rubberized outsole.There has been no release date nor price however we here at WearTesters.com will keep you up-to-date with the latest KD 6

    ReplyDelete
  4. I am really very happy to visit your blog. Now I am found which I actually want.I check your blog every day and try to learn something from your blog.
    Please keep it up to date like this. Thanks for sharing.
    McAfee is the ultimate cyber security software range that keeps your devices protected round the clock. Although set up for any application is a time consuming and complicated process. However,
    McAfee Activate activate setup is much simpler and convenient than expected.

    ReplyDelete
  5. Your work is very good and I appreciate you and hopping for some more informative posts. Thank you for sharing great information to us.สล็อต 999

    ReplyDelete
  6. Thank you for some other informative website. The place else may just I get that kind of information written in such a perfect method? I have a venture that I am simply now running on, and I’ve been at the glance out for such info.สล็อตทรูวอเลท

    ReplyDelete
  7. Pretty good post. I have just stumbled upon your blog and enjoyed reading your blog posts very much. I am looking for new posts to get more precious info. Big thanks for the useful info.สล็อตxo

    ReplyDelete
  8. It is truly a well-researched content and excellent wording. I got so engaged in this material that I couldn’t wait reading. I am impressed with your work and skill. Thanks.เว็บสล็อต

    ReplyDelete
  9. Thank you so much as you have been willing to share information with us. We will forever admire all you have done here because you have made my work as easy as ABC.เว็บตรงสล็อต

    ReplyDelete
  10. Thank you for another great article. Where else could anyone get that kind of information in such a perfect way of writing? I have a presentation next week, and I am on the look for such information.สล็อต เว็บ ตรง

    ReplyDelete