Lync 2010 – Error when changing Lync users settings

When you try and change a users settings you get “Active Directory Operation Failed on…” “You do not have the appropriate permissions to perform this operation…”

This happens because the user is a member of a Windows Builtin group, such as Domain Admins.  When a user is a member of one of the special Windows built-in groups, Windows will automatically remove security inheritance on that user.To fix this you must reapply inheritance.
• Open Active Directory Users and Computers and locate the user object
• Right-click the user and select Properties
• Click the Security tab and then the Advanced button
• Check the Include inheritable permissions from this object’s parent check box
• Click OK twice. Now try again.

Be aware that Windows will automatically remove the inheritance setting again within a few minutes as long as the user remains a member of the Windows built-in group.


Please enter your comment!
Please enter your name here