Wednesday, September 9, 2015

Lync 2013: You cannot try this operation.Insufficient rights to perform the operation.

Problem : 

You receive this error "Active Directory operation failed on "xxx.xxx.com''. You cannot retry this operation: "Insufficient access rights to perform the operation". 00002098: SecErr : 03150BB9, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0.
when try to modify or enable an active directory user object from Lync Server 2013 control panel .
This issue is caused by missing inheritable for the active directory user object.

Solution :

  1. To resolve this issue you need to open Active Directory Users and Computers. Right click user property and select Security tab. If there is no security tab, click View > select Advance features. Now the Security tab should be visible.

Click Advanced

       2. The Include Inheritable permission from this object's parent is not checked. Go ahead put a check mark on this option and click OK.

Check inheritable permission

Now we can enable a user from active directory for SIP from Lync Server 2013 Control Panel.

No comments:

Post a Comment