/ Perhaps you have seen the error message below when trying to enable a Domain Admin (not recommended) in the Skype for Business control panel. You cannot use the Control Panel to users who belong to protected security groups. So your options are to either use Powershell as suggested in the error message or you could try this magical thing:
Open active directory users and computers Enable the advanced features in the view menu Search for the account which is in a protected security group Go to Properties / Security / Advanced Check the following box: Include inheritable permissions Retry what you were doing in the Lync Control Panel Now this might not be the best “securest” way of solving this issue, but for my lab environment I do not care too much about that, but i should think twice before doing this in a productional environment.
Continue reading
