Grant-CsSetupPermission
Grants Skype for Business Server setup permissions on an Active Directory organizational unit (OU). This cmdlet was introduced in Lync Server 2010.
Syntax
Grant-CsSetupPermission
-ComputerOU <String>
[-Domain <Fqdn>]
[-DomainController <Fqdn>]
[-GlobalCatalog <Fqdn>]
[-Force]
[-Report <String>]
[-WhatIf]
[-Confirm]
[<CommonParameters>] Description
The domain preparation that takes place when you install Skype for Business Server does not automatically add the permissions that enable members of the RTCUniversalServerAdmins group to run the Enable-CsTopology cmdlet. That means that, by default, you must be a domain administrator in order to enable a topology. To give members of the RTCUniversalServerAdmins group the right to enable a topology you must run the Grant-CsSetupPermissions cmdlet. In addition, you will need to run this cmdlet against each Active Directory container that houses computers running Skype for Business Server.
Keep in mind that this cmdlet only grants permissions to the RTCUniversalServerAdmins group; the cmdlet cannot be used to grant permissions to other security groups or to individual users.
Examples
-------------------------- EXAMPLE 1 --------------------------
Grant-CsSetupPermission -ComputerOU "ou=CsServers,dc=litwareinc,dc=com"The command shown in Example 1 grants setup permissions for the CsServers OU in the domain litwareinc.com.
Parameters
-ComputerOU
Distinguished name of the OU containing the accounts for the computers where Skype for Business Server will be (or has been) installed. For example: "ou=CsServers,dc=litwareinc,dc=com".
If you prefer you can leave off the domain portion of the distinguished name when specifying the OU. For example:
-ComputerOU "ou=CsServers"
| Type: | String |
| Position: | Named |
| Default value: | None |
| Required: | True |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
| Applies to: | Lync Server 2010, Lync Server 2013, Skype for Business Server 2015, Skype for Business Server 2019 |
-Confirm
Prompts you for confirmation before executing the command.
| Type: | SwitchParameter |
| Aliases: | cf |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
| Applies to: | Lync Server 2010, Lync Server 2013, Skype for Business Server 2015, Skype for Business Server 2019 |
-Domain
Name of the domain where the OU is located. If this parameter is not included, then the Grant-CsSetupPermission cmdlet will look for the OU in the current domain.
| Type: | Fqdn |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
| Applies to: | Lync Server 2010, Lync Server 2013, Skype for Business Server 2015, Skype for Business Server 2019 |
-DomainController
Fully qualified name of the domain controller to be contacted when assigning the policy. For example:
-DomainController atl-dc-001.litwareinc.com
If not specified, the Grant-CsSetupPermission cmdlet will contact the nearest available domain controller when assigning the policy.
| Type: | Fqdn |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
| Applies to: | Lync Server 2010, Lync Server 2013, Skype for Business Server 2015, Skype for Business Server 2019 |
-Force
Suppresses the display of any non-fatal error message that might occur when running the command.
| Type: | SwitchParameter |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
| Applies to: | Lync Server 2010, Lync Server 2013, Skype for Business Server 2015, Skype for Business Server 2019 |
-GlobalCatalog
Fully qualified name of the global catalog server to be contacted when assigning the policy. For example:
-GlobalCatalog atl-dc-001.litwareinc.com
If not specified, the Grant-CsSetupPermission cmdlet will contact the nearest available global catalog server when assigning the policy.
| Type: | Fqdn |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
| Applies to: | Lync Server 2010, Lync Server 2013, Skype for Business Server 2015, Skype for Business Server 2019 |
-Report
Enables you to specify a file path for the log file created when the cmdlet runs. For example:
-Report "C:\Logs\SetupPermissions.html"
| Type: | String |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
| Applies to: | Lync Server 2010, Lync Server 2013, Skype for Business Server 2015, Skype for Business Server 2019 |
-WhatIf
Describes what would happen if you executed the command without actually executing the command.
| Type: | SwitchParameter |
| Aliases: | wi |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
| Applies to: | Lync Server 2010, Lync Server 2013, Skype for Business Server 2015, Skype for Business Server 2019 |
Inputs
None. The Grant-CsSetupPermission cmdlet does not accept pipelined input.
Outputs
None. The Grant-CsSetupPermission cmdlet does not return any objects or values.