Granting permissions in Lync Server 2013
Topic Last Modified: 2012-10-15
For setup, you can grant permissions to the RTCUniversalServerAdmins universal group for a specific Active Directory organizational unit (OU), enabling members of the RTCUniversalServerAdmins group in that OU to install Lync Server 2013 in the specified domain. When you grant permissions for an OU, the following permissions are granted:
Read
Write
ReadSPN
WriteSPN
For administration, you can add permissions to specified OUs so that members of the RTC universal groups created by forest preparation can access the OUs without needing to be members of the Domain Admins group. The permissions added to the specified OU are the same permissions that the Enable-CsAdDomain cmdlet adds to the computers and users OU containers.