Erwin Bierens

Sharing Knowledge

How to enable a Domain Admin for Skype for Business

Perhaps you have seen the error message below when trying to enable a Domain Admin (not recommended) in the Skype for Business control panel. Active Directory operation failed on “”. You cannot retry this operation:_ “Insufficient access rights to perform the operation_00002098: SecErr: DSID-03150F93, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0__ “.You do not have the appropriate permissions to perform this operation in Active Directory. One_ possible cause is that the Lync Server Control Panel and Remote Windows PowerShell cannot modify_ users who belong to protected scurity groups (for example, the Domain Admins group).