I tried both of the following:

1)

I tried to turn Advanced Features on in AD Users and Computers, locate the user who im using as a csadmin, select the security tab, click advanced and select "Include Inheritable Permissions from this object's parent" on the user object you then be able to add them for Lync, but that had no affect for the Lync Control Panel.

The user i made is NOT a member of domain admins, but IS a CSarchiver, and CSAdmin... and same error message.

.... I believe the problem is that IIS (which runs the Lync Control Panel) is running as a weird user problem?

2)

Enable-CsUser works, but the Control Panel does not work. Could not figure out how to do: "Get-AdUser | Enable-CsUser", so powershell will not work for me.

• Edited by martKyu Wednesday, August 19, 2015 2:11 PM

Users can move into new OUs and Existing OUs.

None of the new OUs or Existing OUs can be moved to other locations.

• Edited by martKyu Wednesday, August 19, 2015 5:39 PM

No it is not working anymore. It did for 1 user earlier but not for the user moved into the new top level OU made. Weird... hmm..

• Edited by martKyu Wednesday, August 19, 2015 5:54 PM

I am using Administrator (member of Domain Admins, and a bunch of other things)

The Highest OU with the users has Security Permissions of:

Allow   RTCHUniversalServices   Permission: Special   <--- only once

Allow   RTCUniversalServerReadOnlyGroup   Permission: Special   <--- only once

Allow   RTCUniversalUserAdmins   Permission: Special
..about 20 times

Allow   RTCUniversalUserReadOnlyGroup   Permission: Blank
Allow   RTCUniversalUserReadOnlyGroup   Permission: Blank
Allow   RTCUniversalUserReadOnlyGroup   Permission: Blank
Allow   RTCUniversalUserReadOnlyGroup   Permission: Blank
..about 20 times

• Edited by martKyu Wednesday, August 19, 2015 6:16 PM