tag:blogger.com,1999:blog-1207784072466697878.post3251942305930108054..comments2023-03-18T12:34:05.895+00:00Comments on Hugo Picão: Move CMSHugo Picãohttp://www.blogger.com/profile/13346275360159004082noreply@blogger.comBlogger1125tag:blogger.com,1999:blog-1207784072466697878.post-19411941858276555412016-02-03T23:09:57.766+00:002016-02-03T23:09:57.766+00:00Hi there, I just hit this same issue, but Domain A...Hi there, I just hit this same issue, but Domain Admins wasn't an option in my case due to my customer's split permissions model. I discovered that the problem was that the RtcUniversalServerAdmins group needs the 'Create all child objects' permission on the 'Microsoft' container to create the new Service Control Point "under" the computer account for each Lync server:<br /><br />1. Open Active Directory Users & Computers<br />2. IMPORTANT: From the View menu, make sure that both 'Advanced Features' and 'Users, Contacts, Groups, and Computers as containers' are checked before proceeding!<br />3. Navigate to the computer account object for each Lync server and DOUBLE click OR use the triangle to expand the object.<br />4. Notice the 'Microsoft' container that is a child of the Lync server computer account object. Right click it and select Properties.<br />5. Go to the Security tab, then select RtcUniversalServerAdmins from the list at the top and check the box for 'Create all child objects' and click OK.<br />6. Repeat for each Lync server (or at least the one(s) throwing the Access Denied error).<br /><br />I hope this helps.<br /><br />- Chris<br />Anonymousnoreply@blogger.com