{"id":792,"date":"2015-08-25T13:10:30","date_gmt":"2015-08-25T13:10:30","guid":{"rendered":"http:\/\/www.davidpapkin.net\/?p=792"},"modified":"2015-08-25T13:10:30","modified_gmt":"2015-08-25T13:10:30","slug":"configuring-users-and-rights-in-microsoft-lync-server-2013","status":"publish","type":"post","link":"https:\/\/davidpapkin.com\/?p=792","title":{"rendered":"Configuring Users and Rights in Microsoft Lync Server 2013"},"content":{"rendered":"<p>To configure and manage users in Microsoft\u00ae Lync\u00ae Server 2013, you can use a variety of methods. Lync Server 2013 provides configuration management options, including Lync Server Control Panel and Lync Server Management Shell. You can use basic syntax for working in Windows PowerShell because it has powerful scripting capabilities. You can also use the administrative model of the new role-based access control (RBAC) in Lync Server 2013. The administrative model provides predefined roles, which you can assign to administrators, and you can create new custom roles.<\/p>\n<p><strong>Lync Server Control Panel<\/strong><br \/>\nThe Lync Server Control Panel is a web-based user interface that replaces the Microsoft Management Console (MMC) interface from previous releases. The Lync Server Control<br \/>\nPanel extends the management functionality to any Microsoft Silverlight\u00ae\u2013capable browser. Youcan use the Lync Server Control Panel to perform the following tasks:<br \/>\n\u2022 Search for and configure users. You can search for users by display name, first name, last<br \/>\nname, Security Accounts Manager (SAM) account name, Session Initiation Protocol (SIP)<br \/>\naddress, or line Uniform Resource Identifier (URI). You can then use the results of your search query to configure users for Lync Server 2013, and perform other related tasks such as assigning policies, and changing or removing personal identification numbers (PINs).<br \/>\n\u2022 Enable or disable users. After you create a user account in Active Directory\u00ae Users and Computers, you can enable or disable a user account in Lync Server 2013. When you disable a previously enabled user account, you do not lose the Lync Server 2013 settings that you configured for that user account. Therefore, you can choose to re-enable the user without reconfiguring the user account.<br \/>\n\u2022 Assign policies to users. You can assign specific policies to a user or a group of users, such as<br \/>\nconferencing policies, supported client version policies, archiving policies, or remote user access policies.<br \/>\n\u2022 Assign users to a server or pool. You can assign users to a server or move them to a specific pool under the Edit or move users link in the Lync Server Control Panel.<br \/>\n\u2022 Set a user\u2019s dial-in conferencing PIN. You can configure global PIN policies, such as the required minimum length. In addition, you can configure PIN policies for individual users or sites. You can choose to generate the PIN automatically, or create one manually.<br \/>\nLync Server Control Panel is automatically installed on every front-end server or Standard Edition server in your deployment. In Lync Server 2013, Edge Servers are managed remotely by using the Lync Server Control Panel, which is not exposed externally to the web.<\/p>\n<p>Note: You cannot use Lync Server Control Panel to manage users who are members of the Active Directory Domain Admins group. For Domain Admin users, you can use Lync Server Control Panel to perform read-only search operations. To perform write operations on Domain Admin users, such as enabling or disabling Lync Server 2013, or changing pool or policy assignments, telephony settings, SIP address, and so on, you must use Windows PowerShell cmdlets while logged on as a Domain Administrator with appropriate RBAC credentials.<\/p>\n<p><strong>Lync Server Management Shell\u00a0<\/strong><br \/>\nThe Lync Server Management Shell is another method of administration for a Lync Server 2013<br \/>\ncommunications system. The decision to use Lync Server Control Panel or Lync Server<br \/>\nManagement Shell is up to you\u2014you can perform all Lync Server 2013 management tasks by using either tool. One advantage of the Lync Server Management Shell is that it is useful for running scripts to automate common administrative tasks.\u00a0Lync Server Management Shell is automatically installed on every Lync Server Enterprise Edition front-end server or Standard Edition server in your deployment. The Management Shell is built on the Windows PowerShell 3.0 command-line interface, and it includes more than 550 product-specific cmdlets for administering Lync Server 2013.<br \/>\n<strong>Lync Server Cmdlet Syntax<\/strong><br \/>\nEach PowerShell cmdlet (pronounced \u201ccommand-let\u201d) consists of a term (typically a verb) followed by a dash, and then followed by a noun as shown in the following example.<br \/>\n<em>New-CsUserReplicatorConfiguration<\/em><br \/>\nTyping \u201cnew\u201d conveys to PowerShell what you want to do. The dash-noun combination signifies a parameter. In this example, PowerShell creates a new collection of user replicator configuration settings.<br \/>\nThe user replicator periodically retrieves up-to-date user account information from Active Directory and then synchronizes the new information with the current user data stored by Lync Server 2013.<\/p>\n<p><strong>Using PowerShell 3.0<\/strong><br \/>\nBecause both the Lync Server Management Shell and the Lync Server Control Panel are built on the Windows PowerShell 3.0 command-line interface, being comfortable in working with the syntax and capabilities of PowerShell is important. If you are new to PowerShell, but familiar with scripting, an overview of how to use PowerShell 3.0 with Lync Server 2013 will be helpful.<br \/>\nWhy Use PowerShell?<br \/>\nPowerShell is built on the Microsoft .NET Framework common language<br \/>\nruntime (CLR), and PowerShell accepts and returns .NET Framework objects. By using product-specific commands, PowerShell gives you access to the file system on the computer and enables you to access other data stores, such as the registry and the digital signature certificate stores, just as easily as you can access the file system. It is designed specifically for systems administrators to make configuration and management tasks easier.<br \/>\n<strong>Using PowerShell Cmdlets<\/strong><br \/>\nAs previously mentioned, each PowerShell cmdlet consists of a verb followed by a dash, and then followed by a noun as shown in the following example.<br \/>\nGet-Help<br \/>\nIf you want to receive help on a specific cmdlet, type the following.<br \/>\n<em><strong>Get-Help New-CsVoicePolicy<\/strong><\/em><br \/>\nThis command returns the most commonly-sought help for creating a new voice policy.<br \/>\nFor more detailed help on a topic, you can add a parameter, preceded by a dash, as shown in the following example.<br \/>\n<em><strong>Get-Help New-CsVoicePolicy -Examples<\/strong><\/em><br \/>\nFor all available help on a topic, use the parameter \u2013Full.<br \/>\n<strong>Note:<\/strong> You can get help on each cmdlet directly from the command line and from the<br \/>\nLync Server 2013 Help file. There are two specific Help files available for cmdlets\u2014<em><strong>RTCCmdlets.chm<\/strong><\/em> and <em><strong>RGSCmdlets.chm.<\/strong><\/em><br \/>\n<strong>Using Cmdlet Parameters<\/strong><br \/>\nA parameter is a way of adding additional information to a cmdlet, and limiting the amount of<br \/>\ninformation that is returned.\u00a0For example, if you want to find all the services running on a particular server, type the following command.<br \/>\n<em><strong>Get-Service<\/strong><\/em><br \/>\nIf you want to return only the Lync Server 2013 services and their active status, type the following command. \u00a0<em><strong>Get-CsWindowsServic<\/strong><\/em><\/p>\n<p><strong>Overview of Role-Based Access Control (RBAC)<\/strong><br \/>\nTo enable you to delegate administrative tasks while maintaining high standards for security, Lync Server 2013 offers role-based access control (RBAC). With RBAC, administrative privilege is<br \/>\ngranted to users by assigning administrative roles\u00a0to them. Lync Server 2013 includes a rich set of built-in administrative roles. You can also create new roles and specify a custom list of cmdlets for each new role, and you can add scripts of cmdlets to the allowed tasks of both predefined and custom RBAC roles.<\/p>\n<div id=\"attachment_794\" style=\"width: 310px\" class=\"wp-caption alignleft\"><a href=\"http:\/\/www.davidpapkin.net\/wp-content\/uploads\/2015\/08\/predefined-RBAC.jpg\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-794\" class=\"size-medium wp-image-794\" src=\"http:\/\/www.davidpapkin.net\/wp-content\/uploads\/2015\/08\/predefined-RBAC-300x200.jpg\" alt=\"Predefined Role-Based Access Control Roles In RBAC, a role is enabled to use a list of cmdlets, designed to be useful for a certain type of administrator or technician. A scope is the set of objects that the cmdlets, defined in a role, can operate on. The objects that scope affects can be either user accounts (grouped by organizational unit) or servers (grouped by site). Predefined roles are set up during the initial Lync installation process. All predefined roles shipped in Lync Server have a global scope and cannot be modified. To follow least privilege practices, you should not assign users to roles with global scope if they are going to administer only a limited set of servers or users. To follow least privilege practices, you can create roles that are based on an existing role, but with a more limited scope.\" width=\"300\" height=\"200\" srcset=\"\/wp-content\/uploads\/2015\/08\/predefined-RBAC-300x200.jpg 300w, \/wp-content\/uploads\/2015\/08\/predefined-RBAC.jpg 670w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><p id=\"caption-attachment-794\" class=\"wp-caption-text\">Predefined Role-Based Access Control Roles<\/p>\n<p><\/p><\/div>\n<p><iframe loading=\"lazy\" src=\"https:\/\/www.youtube.com\/embed\/zWLGLD8uTnk\" width=\"420\" height=\"315\" frameborder=\"0\" allowfullscreen=\"allowfullscreen\"><\/iframe><\/p>\n","protected":false},"excerpt":{"rendered":"<p>To configure and manage users in Microsoft\u00ae Lync\u00ae Server 2013, you can use a variety of methods. Lync Server 2013 provides configuration management options, including Lync Server Control Panel and Lync Server Management Shell. You can use basic syntax for&hellip; <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3,4,32,8],"tags":[66,70,105,115,133],"class_list":["post-792","post","type-post","status-publish","format-standard","hentry","category-computers","category-david-papkin","category-lync","category-microsoft","tag-david-mark-papkin","tag-davidpapkin","tag-lync-server-2013","tag-microsoft-lync","tag-rbac"],"_links":{"self":[{"href":"https:\/\/davidpapkin.com\/index.php?rest_route=\/wp\/v2\/posts\/792","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/davidpapkin.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/davidpapkin.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/davidpapkin.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/davidpapkin.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=792"}],"version-history":[{"count":0,"href":"https:\/\/davidpapkin.com\/index.php?rest_route=\/wp\/v2\/posts\/792\/revisions"}],"wp:attachment":[{"href":"https:\/\/davidpapkin.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=792"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/davidpapkin.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=792"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/davidpapkin.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=792"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}