Topic Last Modified: 2010-12-22
Delegating setup and administration has changed in Microsoft Lync Server 2010. For setup, you can grant permissions to the RTCUniversalServerAdmins universal group for a specific Active Directory organizational unit (OU), enabling members of the RTCUniversalServerAdmins group in that OU to install Lync Server 2010 in the specified domain. The permissions you grant are the following:
- Read
- Write
- ReadSPN
- WriteSPN
For administration, you can add permissions to specified OUs so that members of the RTC universal groups created by forest preparation can access the OUs without needing to be members of the Domain Admins group. The permissions added to the specified OU are the same permissions that the Enable-CsAdDomain cmdlet adds to the computers and users OU containers.