Delegate Setup Permissions
Topic Last Modified: 2011-02-01
If you do not want to grant membership in the Domain Admins group to users or groups who are deploying Microsoft Lync Server 2010, you can enable members of the RTCUniversalServerAdmins group to run the Enable-CsTopology Windows PowerShell cmdlet on servers running Lync Server 2010. By default, members of the RTCUniversalServerAdmins group do not have the ability to run this cmdlet. You grant permissions to run Enable-CsTopology on servers running Lync Server by using the Grant-CsSetupPermission cmdlet and specifying an organizational unit (OU) where computer objects for the server running Lync Server are located.
Note
Enable-CsTopology is the key cmdlet to allow the RTCUniversalServerAdmins group members to set up and deploy Lync Server.
To add the ability to run Enable-CsTopology to the RTCUniversalServerAdmins group
Log on to a server as a member of the Domain Admins group for the domain on which the delegated user will run Enable-CsTopology.
Open the Lync Server Management Shell. The Lync Server Management Shell is automatically installed on each Front End Server or any computer where the Lync Server 2010 administrative tools have been installed. For details about the Lync Server Management Shell, see Lync Server Management Shell in the Operations documentation.
Run the following cmdlet from the Lync Server Management Shell:
Grant-CsSetupPermission -ComputerOU <DN of the OU> -Domain <Domain FQDN>In the following example, the OU is Lync Servers, which is in the contoso.com domain.
Grant-CsSetupPermission -ComputerOU "OU=Lync Servers" -Domain contoso.com