Export (0) Print
Expand All
Expand Minimize
This topic has not yet been rated - Rate this topic



Topic Last Modified: 2013-02-21

Verifies that the required permissions needed to install Lync Server or one of its components have been configured on the specified Active Directory container. This cmdlet was introduced in Lync Server 2010.

Test-CsSetupPermission -ComputerOU <String> [-Domain <Fqdn>] [-DomainController <Fqdn>] [-GlobalCatalog <Fqdn>] [-Report <String>]

The command shown in Example 1 checks to see if the required setup permissions have been applied to the CsServers OU in the litwareinc.com domain.

Test-CsSetupPermission -ComputerOU "ou=CsServers,dc=litwareinc,dc=com"

The domain preparation that takes place when you install Lync Server does not automatically add the permissions that enable members of the RTCUniversalServerAdmins group to run the Enable-CsTopology cmdlet. That means that, by default, you must be a domain administrator in order to enable a topology. To give members of the RTCUniversalServerAdmins group the right to enable a topology, you must run the Grant-CsSetupPermissions cmdlet. In addition, you will need to run this cmdlet against each Active Directory container that houses computers running Lync Server.

The Test-CsSetupPermission cmdlet enables you to determine whether or not the requisite permissions have been added to a given Active Directory container (that is, a container hosting computers running Lync Server). The Test-CsSetupPermission cmdlet returns True if the correct permissions have been applied, and returns False if the correct permissions have not been applied. If the cmdlet returns False, you will need to run the Grant-CsSetupPermission cmdlet in order to make the necessary changes to the Active Directory container.

Who can run this cmdlet: To return a list of all the role-based access control (RBAC) roles this cmdlet has been assigned to (including any custom RBAC roles you have created yourself), run the following command from the Windows PowerShell prompt:

Get-CsAdminRole | Where-Object {$_.Cmdlets –match "Test-CsSetupPermission"}


Parameter Required Type Description




Distinguished name of the organizational unit (OU) that contains the accounts for the computers running Lync Server. For example: "ou=CsServers,dc=litwareinc,dc=com".




Name of the domain where the OU to be checked is located. If this parameter is not included, then the Test-CsSetupPermission cmdlet will look for the OU in the current domain.




Fully qualified domain name (FQDN) of a domain controller in your domain. This parameter is not required if you are running the Test-CsSetupPermission cmdlet on a computer with an account in your domain.




FQDN of a global catalog server in your domain. This parameter is not required if you are running the Test-CsSetupPermission cmdlet on a computer with an account in your domain.




Reports detailed activity to the screen as the cmdlet runs.

None. The Test-CsSetupPermission cmdlet does not accept pipelined input.

The Test-CsSetupPermission cmdlet returns an instance of the Microsoft.Rtc.SyntheticTransactions.TaskOutput object.

Did you find this helpful?
(1500 characters remaining)
Thank you for your feedback
© 2014 Microsoft. All rights reserved.