Monthly Archives: January 2015

QuickTip: Insufficient Access Rights Enabling Any Lync User

You’re likely here because you’re trying to enable a user but are receiving the dreaded error “Active Directory operation failed on [servername].  You cannot retry this operation: “Insufficient access rights to perform the operation 00002098: SecErr: DSID-03150BB9, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0.


Nooooo problem, you’ve seen this before.  The user must be a member of a privileged group like Domain Admins or something, something that would block inheritance.  Only in this case, they’re not.  Did you check inheritance in the security tab of the users account?  That’s enabled already.  Are you a member of the CSAdministrator group or CSUserAdministrator, yes?

If all of the above is true, it’s likely you’re dealing with locked down Active Directory.  Check the individual OU and all OUs above to determine if security inheritance has been disabled at the OU level.  If inheritance is disabled, there’s either a very good reason for it, or you’ve been visited by an overzealous domain admin.

Option 1 for those with an overzealous admin: Enable inheritance and wait for it to replicate. Once this has propagated, you should be able to enable users from the Control Panel once again.

Option 2, for those who have security policies dictating that inheritance is disabled, the answer can be found in Grant-CSOuPermission.  This command specifically grants rights to individual containers in Active Directory, removing the need to enable inheritance.


Grant-CsOUPermission -OU "ou=rockstars,dc=skypeadmin,dc=com" -ObjectType "user"

There are a few different ObjectTypes available, user will be the most common one you’d use, but be aware there are others such as Contact and Device (which would be used for common area phones).

More detail can be found in the Microsoft article Preparing Active Directory Domain Services for Lync Server 2013:

Reminder: Quarterly Lync Users Groups Coming!

Just a reminder that the quarterly US Lync Users Groups are coming up.

If you haven’t ever attended, I HIGHLY recommend going for the great presentations as well as the networking with other individuals excited about Microsoft Lync\Skype. If you’re newer to Lync or just want some questions answered it’s a great place to go to network and meet up with others in your field.

Head over to and find your group on

  • January 20th – Chicago, IL
  • January 21st – Los Angeles, CA
  • January 27th – Nashville, TN
  • January 28th – Cincinnati, OH
  • February 3rd – Detroit, MI
  • February 4th – Silicon Valley, CA
  • February 11th – Charlotte, NC
  • February 12th – Baltimore, MD
  • February 19th – Kansas City, MO
  • TBA – Philadelphia, PA
  • TBA – Atlanta, GA
  • TBA – Milwaukee, WI
  • TBA – Seattle, WA
  • TBA – Boise, ID
  • TBA – Portland, OR
  • TBA – San Francisco, CA
  • TBA – New York, NY

Hope to see you there!

QuickTip: Changing Lync/Skype Dial Timeouts on VVX Phones

This question has come up from my clients and I’ve seen it on TechNet now as well so I thought I’d share a portion of a config to alter the timeout values on VVX phones for Microsoft Lync or Skype for Business.

With Lync Phone Edition, such as found on the Polycom CX-line of phones, the timeout is hardcoded and cannot be changed.  However, the VVX and other 3PIP (third party IP) phones are more flexible in this regard.

There are two time settings you’ll need to set, on-hook and off-hook.  On-hook simply means the handset is still physically “hung up” on the phone base.  The on-hook time  can be configured with the dialplan.userDial.timeOut parameter.  Off-hook means you’re holding the handset, and that value can be configured with the dialplan.1.lyncDigitmap.timeOut parameter.

The default for the VVX phone is 3.  To experiment with this and increase the value to 9 (long enough for the change to be noticeable, also long enough to drive your users crazy) copy the below config contents in a file called LyncTimeout.cfg.  If you want to start with a different time, you can specify anything from 1 to 99.


Now, let’s upload that configuration to test it.  To do this, navigate to your phone’s web page, go to Utilities -> Import & Export Configuration.  Click choose file to find the file you just created and click Import.  Your phone will reboot and you can see the results.


If you’d like to deploy this to all phones or a subset, you can place the relevant portions in your shared.cfg file per Jeff’s blog:

For other great Lync/VVX settings, check out Greig’s blog on optimising the VVX for Lync:

Review: Jabra Evolve 80 for Lync/Skype

I’m not the first to review these, nor will I be the last.  But I do own a pair and I wanted to walk through it for my own readers.  Thanks for reading!


If you’re unfamiliar with the line, you can find more information here:  In a nutshell, they’re a very high end UC endpoint and are specifically optimized to work with Microsoft Lync.  I’m reviewing the Evolve 80 because that’s what I have, though as you can see in the link above there are others in the line.  The audio quality is outstanding and the noise cancellation features are amazing.


Thoughts on the Various Features

  • Quiet – This is a major feature and one of the key reasons you see it touted.  Jabra has Active Noise Cancellation technology.  There’s a little switch on the side of your headphones that you can flip and the world goes quiet.  It’s not perfect and you don’t want it to be, but I didn’t realize how many fans and chatter my brain was tuning out until I turned this on. I work in a pretty noisy shared workspace area near our call center, this makes a huge difference.  This where the WOW factor for most who are trying them comes from.  Beyond that, the shape and build alone gets rid of a lot of the noise without the cancellation tech.
  • Comfortable – I’ve heard reports from other that they’re a bit too heavy for their taste.  The specifications say they’re about 11.43 oz or just under 3/4 of a US pound.  I didn’t notice the weight, they’re just comfortable to me.  The earpieces fit snugly and are very soft.
  • Wired – This isn’t necessarily a positive for some, but for me it is.  They’re wired.  I don’t have to worry if they’re charged or where that little bluetooth dongle went.  I just pull them out of the case when I’m on the go and use them.  Done.
  • Stereo – I’ve said this many times, I love a good stereo headphone.  My head needs to feel balanced. I can’t explain this, but the mono headsets many love so much are difficult for me to get used to and must be very comfortable.
  • Microphone – It moves out of the way and isn’t intrusive.  I haven’t tested the audio quality of the microphone because in my world, I don’t care.  It’s likely to be compressed to G.711 or G.729.  The mic itself is not too noticeable when it’s up and I’m listening to music.
  • Works with everything – You can separate the USB dongle portion that functions as a call and volume control module and you’ll expose a 3.5mm headphone/microphone jack that will work great with your smartphone as well.  You can see a picture of that below.  The UC portion also supposedly works with Avaya and Cisco, but if you have one of those old PABX systems I assume you’re using them ironically, you crazy hipster.
  • Audio Quality – I stopped listening to music a while ago because I typically work in a very noisy environment.  Since I received these, I’ve found myself listening to music quite a bit, the noise cancellation makes it a pleasure and the audio for the first time in my office is very clear.
  • Easy to Use – Plug and play.  It’s Lync!  I didn’t have to read any manual.
  • Good Looking – Yeah they are.  The pop of red is a nice touch.  Very cool.  The red ring you see in the picture above is the “busylight” which you can turn on an off even when you’re not in a call.  I don’t think I’ll ever be able to train my colleagues to not bother me regardless, but I like the look.

Cons – I can’t afford to buy them for everyone, but everyone wants one.  I let several people in my office try them out and received a lot of “wows”.  Given a choice of endpoints, this very reasonably priced next to a Polycom VVX 500 or CX600 phone, but getting both may be a tough sale.  No surprise for a headset of this caliber.

Overall Impression

So I don’t need to repeat it but I will.   I love them, and I give them the highest marks.  Is love a strong word?  Yes.  Too strong?  No. Even when I’m not on a call or listening to music I’ve just kept them on so I can plan and write without distraction.  These are my new favorite endpoint.






Thanks for reading!