Answered by:
Insufficient access rights to perform the operation

Question
-
Enable a user in Lync server 2013 control panel.
Getting the error message: Insufficient access rights to perform the operation. What's wrong?
Tuesday, February 18, 2020 7:38 AM
Answers
-
Hi Shane,
This error is caused by the combination of the following two reasons:
1. The user account is a part of an Active Directory, directory service protected domain security group.
2. The Lync server control panel is not designed to delegate the permissions of RTCUniversalUserAdmins and RTCUniversalUserReadOnlyGroup Lync Server Universal Security groups.
You can follow the steps to fix this issue:
1. Enable-CsUser -Identity "Bill Anderson" -RegistrarPool "pool01.contoso.com" -SipAddressType EmailAddress -SipDomain contoso.com
About Enable-CsUser, please refer to: https://docs.microsoft.com/en-us/powershell/module/skype/Enable-CsUser?redirectedfrom=MSDN&view=skype-ps.
2. Move-CsUser -Identity "Bill Anderson" -Target "pool01.contoso.com"
About Move-CsUser, please refer to: https://docs.microsoft.com/en-us/powershell/module/skype/Move-CsUser?redirectedfrom=MSDN&view=skype-ps.
3. Move-CsLegacyUser -Identity "Bill Anderson" -Target "pool01.contoso.com"
About Move-CsLegacyUser, please refer to: https://docs.microsoft.com/en-us/powershell/module/skype/Move-CsLegacyUser?redirectedfrom=MSDN&view=skype-ps.
For more detailed information about this issue, please refer to this link: https://docs.microsoft.com/en-us/skypeforbusiness/troubleshoot/server-configuration/issue-attempt-move-or-enable-user-command.
Best Regards,
Sharon Zhao
Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.
- Edited by sharon_zhaoMicrosoft contingent staff Tuesday, February 18, 2020 9:15 AM
- Proposed as answer by sharon_zhaoMicrosoft contingent staff Friday, February 21, 2020 5:18 AM
- Marked as answer by Shane_Shi Monday, February 24, 2020 5:10 AM
Tuesday, February 18, 2020 9:14 AM
All replies
-
Hi Shane,
This error is caused by the combination of the following two reasons:
1. The user account is a part of an Active Directory, directory service protected domain security group.
2. The Lync server control panel is not designed to delegate the permissions of RTCUniversalUserAdmins and RTCUniversalUserReadOnlyGroup Lync Server Universal Security groups.
You can follow the steps to fix this issue:
1. Enable-CsUser -Identity "Bill Anderson" -RegistrarPool "pool01.contoso.com" -SipAddressType EmailAddress -SipDomain contoso.com
About Enable-CsUser, please refer to: https://docs.microsoft.com/en-us/powershell/module/skype/Enable-CsUser?redirectedfrom=MSDN&view=skype-ps.
2. Move-CsUser -Identity "Bill Anderson" -Target "pool01.contoso.com"
About Move-CsUser, please refer to: https://docs.microsoft.com/en-us/powershell/module/skype/Move-CsUser?redirectedfrom=MSDN&view=skype-ps.
3. Move-CsLegacyUser -Identity "Bill Anderson" -Target "pool01.contoso.com"
About Move-CsLegacyUser, please refer to: https://docs.microsoft.com/en-us/powershell/module/skype/Move-CsLegacyUser?redirectedfrom=MSDN&view=skype-ps.
For more detailed information about this issue, please refer to this link: https://docs.microsoft.com/en-us/skypeforbusiness/troubleshoot/server-configuration/issue-attempt-move-or-enable-user-command.
Best Regards,
Sharon Zhao
Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.
- Edited by sharon_zhaoMicrosoft contingent staff Tuesday, February 18, 2020 9:15 AM
- Proposed as answer by sharon_zhaoMicrosoft contingent staff Friday, February 21, 2020 5:18 AM
- Marked as answer by Shane_Shi Monday, February 24, 2020 5:10 AM
Tuesday, February 18, 2020 9:14 AM -
Hi Shane,
Do you have any further issue on this topic?
Meanwhile, if there is no issue, please remember to mark helpful reply as answer to close the thread. Your action would be helpful to other users who encounter the same issue and read this thread.
Thanks for your understanding.
Best Regards,
Sharon Zhao
Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.Friday, February 21, 2020 5:32 AM