locked
Powershell Active Directory operation failed when set-csuser with new domain user account RRS feed

  • Question

  • Hi All,

    I try to run below powersehll with runas powershell  to set the user lineuri "set-csuser -identity username -lineuri +1123132131 -verbose "it return error as below:

    set-csuser : Active Directory operation failed on "DC01.domain.local". You
    cannot retry this operation: "Insufficient access rights to perform the
    operation
    00002098: SecErr: DSID-03150E49, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
    "
    At line:2 char:2
    + {set-csuser -identity $importuser.sip -lineuri $importuser.lineuri -verbose}
    +  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : InvalidOperation: (CN=username,OU=HH,DC=doamin,DC=local:OCSADUser) [Set-CsUser], ManagementException
        + FullyQualifiedErrorId : SetCSUser,Microsoft.Rtc.Management.AD.Cmdlets.Se
       tOcsUserCmdlet

    If I set the number on SfB control panel , it is working with same service account.

    This service account have caadministrator and rtcuniversalserveradmins  and domain user permission.

    I have grant-csoupermission for this account for specific OU.

    Please advise, it is new create user account with domain user permission only.

    Thanks.


    • Edited by JohnHK215 Friday, May 18, 2018 2:57 PM update runas administrator
    Friday, May 18, 2018 2:56 PM

All replies

  • Hi Mick,

    Did you mean this only happen to the new created user in your environment?
    When you run other command line, is that the same issue?

    Please make sure that you choose “Run as administrators” when you run the powershell command.

    If you had already run as administrator, please try to close SFB management and restart again.

    Moreover, if it only happens to the specific user, please try to run “Get-CsUser” compare user attribute between the affected user and other normal users.


    Best Regards,
    Alice Wang


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.


    Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.

    • Proposed as answer by Alice-Wang Monday, May 21, 2018 9:26 AM
    Monday, May 21, 2018 2:47 AM
  • Hello,

    You're missing a 'tel:' prefix from the telephone number.

    It should be "Set-CsUser -Identity username -LineURI tel:+1123132131"

    Give it a try again with the above.

    Thanks,

    Steve

    • Proposed as answer by Alice-Wang Monday, May 21, 2018 9:26 AM
    Monday, May 21, 2018 7:12 AM
  • Hi ,

     

    Do you have some updates? If the reply help to you ,please mark the reply as answer.


    Best Regards,
    Leon Lu


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.


    Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.

    Thursday, June 7, 2018 10:12 AM