在 Lync Server 2013 中委派安装程序权限Delegate setup permissions in Lync Server 2013

 

上次修改的主题: 2014-02-05Topic Last Modified: 2014-02-05

如果您不想向正在部署 lync server 2013 的用户或组授予 Domain Admins 组成员身份,则可以启用 RTCUniversalServerAdmins 组的成员,以便在运行 Lync server 2013 的服务器上运行enable-cstopology Windows PowerShell cmdlet。If you do not want to grant membership in the Domain Admins group to users or groups who are deploying Lync Server 2013, you can enable members of the RTCUniversalServerAdmins group to run the Enable-CsTopology Windows PowerShell cmdlet on servers running Lync Server 2013. 默认情况下,RTCUniversalServerAdmins 组的成员无法运行此 cmdlet。By default, members of the RTCUniversalServerAdmins group do not have the ability to run this cmdlet. 通过使用CsSetupPermission cmdlet 并指定运行 lync server 2013 的服务器的计算机对象所在的组织单位(OU),您可以授予管理员对运行 lync server 的服务器上运行enable-cstopology的权限。You grant administrator rights and permissions to run Enable-CsTopology on servers running Lync Server by using the Grant-CsSetupPermission cmdlet and specifying an organizational unit (OU) where computer objects for the server running Lync Server 2013 are located.

在安装 Lync Server 时进行的域准备不会自动添加允许 RTCUniversalServerAdmins 组成员运行 Enable-cstopology cmdlet 的权限。The domain preparation that takes place when you install Lync Server does not automatically add the permissions that enable members of the RTCUniversalServerAdmins group to run the Enable-CsTopology cmdlet. 这意味着,默认情况下,只有域管理员才能启用拓扑。That means that, by default, you must be a domain administrator in order to enable a topology. 要授予 RTCUniversalServerAdmins 组的成员启用拓扑的权限,必须运行 Grant-CsSetupPermissions cmdlet。To give members of the RTCUniversalServerAdmins group the right to enable a topology you must run the Grant-CsSetupPermissions cmdlet. 此外,还需要对驻留运行 Lync Server 的计算机的每个 Active Directory 容器运行此 cmdlet。In addition, you will need to run this cmdlet against each Active Directory container that houses computers running Lync Server.

请记住,此 cmdlet 仅向 RTCUniversalServerAdmins 组授予权限;此 cmdlet 不能用于向其他安全组或向单个用户授予权限。Keep in mind that this cmdlet only grants permissions to the RTCUniversalServerAdmins group; the cmdlet cannot be used to grant permissions to other security groups or to individual users.

备注

Enable-enable-cstopology是允许 RTCUniversalServerAdmins 组成员设置和部署 Lync Server 2013 的关键 cmdlet。Enable-CsTopology is the key cmdlet to allow the RTCUniversalServerAdmins group members to set up and deploy Lync Server 2013.

向 RTCUniversalServerAdmins 组添加运行 Enable-CsTopology 的权限To add the ability to run Enable-CsTopology to the RTCUniversalServerAdmins group

  1. 以委派用户将在其上运行 Enable-CsTopology 的域的 Domain Admins 组成员身份登录服务器。Log on to a server as a member of the Domain Admins group for the domain on which the delegated user will run Enable-CsTopology.

  2. 打开 Lync Server 2013 命令行管理程序。Open the Lync Server 2013 Management Shell. Lync Server 2013 命令行管理程序将自动安装在每台前端服务器或安装了 Lync Server 2013 管理工具的任何计算机上。The Lync Server 2013 Management Shell is automatically installed on each Front End Server or any computer where the Lync Server 2013 administrative tools have been installed. 有关 Lync Server 2013 命令行管理程序的详细信息,请参阅操作文档中的Lync server 2013 命令行管理程序。For details about the Lync Server 2013 Management Shell, see Lync Server 2013 Management Shell in the Operations documentation.

  3. 从 Lync Server 2013 命令行管理程序运行以下 cmdlet:Run the following cmdlet from the Lync Server 2013 Management Shell:

    Grant-CsSetupPermission -ComputerOU <DN of the OU> -Domain <Domain FQDN>
    

    备注

    如果 OU 不是最高级别,则必须提供完整的域名。If the OU is not top level, you must provide the full domain name.

    在以下示例中,OU 是位于 contoso.com 域中的“Lync Servers”。In the following example, the OU is “Lync Servers,” which is in the contoso.com domain.

    Grant-CsSetupPermission -ComputerOU "OU=Lync Servers" -Domain contoso.com