Delegate Setup Permissions
Topic Last Modified: 2012-10-01
If you do not want to grant membership in the Domain Admins group to users or groups who are deploying Lync Server 2013, you can enable members of the RTCUniversalServerAdmins group to run the Enable-CsTopology Windows PowerShell cmdlet on servers running Lync Server 2013. By default, members of the RTCUniversalServerAdmins group do not have the ability to run this cmdlet. You grant administrator rights and permissions to run Enable-CsTopology on servers running Lync Server by using the Grant-CsSetupPermission cmdlet and specifying an organizational unit (OU) where computer objects for the server running Lync Server 2013 are located.
|Enable-CsTopology is the key cmdlet to allow the RTCUniversalServerAdmins group members to set up and deploy Lync Server 2013.|
Log on to a server as a member of the Domain Admins group for the domain on which the delegated user will run Enable-CsTopology.
Open the Lync Server 2013 Management Shell. The Lync Server 2013 Management Shell is automatically installed on each Front End Server or any computer where the Lync Server 2013 administrative tools have been installed. For details about the Lync Server 2013 Management Shell, see Lync Server Management Shell in the Operations documentation.
Run the following cmdlet from the Lync Server 2013 Management Shell:
Grant-CsSetupPermission -ComputerOU <DN of the OU> -Domain <Domain FQDN>
Note: If the OU is not top level, you must provide the full domain name.
In the following example, the OU is “Lync Servers,” which is in the contoso.com domain.
Grant-CsSetupPermission -ComputerOU "OU=Lync Servers" -Domain contoso.com