Technical Fixes
RSS icon Email icon Home icon
  • Lync 2010 – Active Directory Operation Failed – Insufficient Access Rights To Perform This Operation

    Posted on August 26th, 2011 Matt Parkinson No comments

    So after a long break in posting due to busy work commitments I am finally back to write some more articles which I have saved up. This one goes back a while to when Microsoft Lync 2010 first came out however it is something that I have come across in a few environments when installing Lync especially in environments where I.T. staff are domain administrators to be able to support their users on a day to day basis.

    When editing a domain administrator in the Lync control panel you may be faced with the error below once you press the commit button to save your changes.

    Lync - Active Directory Operation Failed - Insufficient Access Rights

    To fix this you need to make the following changes in active directory which can be a bit of a pain if you are making regular changes to any domain administrators as the permissions you are about to change will reset themselves after about 5 minutes.

    1. Go to Start>Administrative Tools>Active Directory Users and Computers.
    2. Browse to the organizational unit that holds the user account you are attempting to modify in Lync.
    3. Right click the user and go to properties which will present the following dialog.
    4. Press the advanced button where you will then be presented with another dialog box.
    5. Tick the box marked “Include Inheritable Permissions” as shown below

      Active Directory Advance Security Dialog

    6. Press ok to close all of the dialogs and try saving your changes again.

    Please remember as I mentioned earlier this fix will only last for around 5 minutes as Active Directory will automatically re-apply the old permissions so if you need to make a number of changes you may want to keep the advanced security dialog open so you can easily re-apply the settings.