Topic Last Modified: 2013-02-21

Verifies that the required permissions needed to install Lync Server or one of its components have been configured on the specified Active Directory container. This cmdlet was introduced in Lync Server 2010.

Syntax

Test-CsSetupPermission -ComputerOU <String> [-Domain <Fqdn>] [-DomainController <Fqdn>] [-GlobalCatalog <Fqdn>] [-Report <String>]

Examples

EXAMPLE 1

The command shown in Example 1 checks to see if the required setup permissions have been applied to the CsServers OU in the litwareinc.com domain.

Copy Code
Test-CsSetupPermission -ComputerOU "ou=CsServers,dc=litwareinc,dc=com"

Detailed Description

The domain preparation that takes place when you install Lync Server does not automatically add the permissions that enable members of the RTCUniversalServerAdmins group to run the Enable-CsTopology cmdlet. That means that, by default, you must be a domain administrator in order to enable a topology. To give members of the RTCUniversalServerAdmins group the right to enable a topology, you must run the Grant-CsSetupPermissions cmdlet. In addition, you will need to run this cmdlet against each Active Directory container that houses computers running Lync Server.

The Test-CsSetupPermission cmdlet enables you to determine whether or not the requisite permissions have been added to a given Active Directory container (that is, a container hosting computers running Lync Server). The Test-CsSetupPermission cmdlet returns True if the correct permissions have been applied, and returns False if the correct permissions have not been applied. If the cmdlet returns False, you will need to run the Grant-CsSetupPermission cmdlet in order to make the necessary changes to the Active Directory container.

Who can run this cmdlet: To return a list of all the role-based access control (RBAC) roles this cmdlet has been assigned to (including any custom RBAC roles you have created yourself), run the following command from the Windows PowerShell prompt:

Get-CsAdminRole | Where-Object {$_.Cmdlets –match "Test-CsSetupPermission"}

Parameters

Parameter Required Type Description

ComputerOU

Required

System.String

Distinguished name of the organizational unit (OU) that contains the accounts for the computers running Lync Server. For example: "ou=CsServers,dc=litwareinc,dc=com".

Domain

Optional

Microsoft.Rtc.Management.Deploy.Fqdn

Name of the domain where the OU to be checked is located. If this parameter is not included, then the Test-CsSetupPermission cmdlet will look for the OU in the current domain.

DomainController

Optional

Microsoft.Rtc.Management.Deploy.Fqdn

Fully qualified domain name (FQDN) of a domain controller in your domain. This parameter is not required if you are running the Test-CsSetupPermission cmdlet on a computer with an account in your domain.

GlobalCatalog

Optional

Microsoft.Rtc.Management.Deploy.Fqdn

FQDN of a global catalog server in your domain. This parameter is not required if you are running the Test-CsSetupPermission cmdlet on a computer with an account in your domain.

Report

Optional

System.String

Reports detailed activity to the screen as the cmdlet runs.

Input Types

None. The Test-CsSetupPermission cmdlet does not accept pipelined input.

Return Types

The Test-CsSetupPermission cmdlet returns an instance of the Microsoft.Rtc.SyntheticTransactions.TaskOutput object.

See Also