While trying to enable a user for Lync via the console I got the following error -
Using Powershell I got this error -
Enable-CsUser : Active Directory operation failed on "WrongDC.OtherDomain.BigDog.com".
You cannot retry this operation: "Insufficient access rights to perform the op
eration
00002098: SecErr: DSID-03150BB9, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
I realised that this user was in a sub-domain that I did not have access rights too.
The workaround was to use a GC in the parent domain since the default was going to the DC "WrongDC.OtherDomain.BigDog.com"
import-module ActiveDirectory
$DCsGCs = Get-ADDomainController -filter { IsGlobalCatalog -eq $True}
Then I specified which domain controller to use -
Enable-CsUser -Identity "tbolton" -SipAddressType EmailAddress -DomainController RightDC.BigDog.com -RegistrarPool "BigDog-LyncPool.BigDog.com"
Worked like a charm!
Thanks to Romy Verhovshek..! She helped set me in the right direction and found my syntax error.
Enable-CsUser : Active Directory operation failed
Posted - 07/25/2012 : 5:56:55 PM
