Topic Last Modified: 2011-02-23

To grant access to the Microsoft Lync Server 2010 Control Panel, do the following:

  1. Log on as a member of the Domain Admins group or the RTCUniversalServerAdmins group.

  2. Open Active Directory Users and Computers, expand your domain, right-click the Users container, and then click Properties.

  3. In CSAdministrator Properties, click the Members tab.

  4. On the Members tab, click Add. In Select Users, Contacts, Computers, Service Accounts, or Groups dialog, locate the Enter the object names to select. Type the user name(s) or group name(s) to add to the group CSAdministrators. Click OK.

  5. On the Members tab, confirm that the users or groups that you selected are present. Click OK.

Tip:
The Lync Server 2010 Control Panel is a role-based access control tool. Membership in the CsAdministrator group gives a user who is using the Lync Server 2010 Control Panel full control to all configuration functions available in Lync Server 2010 Control Panel. There are other roles available that are designed for specific functions. Users do not have to be Lync Server 2010 enabled to be made members of the management groups.
  • CsArchiving: Members of this group can perform all archiving functions, such as configuring and managing the Archiving Server role.

  • CsHelpDesk: Members of this group can view the configuration and deployment, including user properties and policies. Members can also perform specific troubleshooting tasks.

  • CsLocationAdministrator: Members have the least user rights associated with Enhanced 9-1-1 (E9-1-1) management. They can create E9-1-1 locations and network identifiers and associate those in the deployment.

  • CsResponseGroupAdministrator: Members can manage and configure the Response Group service

  • CsServerAdministrator: Members can manage, monitor and troubleshoot all servers running Lync Server 2010.

  • CsUserAdministrator: Members can manage, enable and disable users, and assign existing policies to users.

  • CsViewOnlyAdministrator: Members can view the deployment and configuration of the server information. This membership allows for a member to monitor the health of the servers running Lync Server 2010.

  • CsVoiceAdministrator: Members can create, configure and manage voice related settings in Lync Server 2010.

To help retain security and role-based access control integrity, add users to the groups that define what role the user performs in management of the Lync Server 2010 deployment.