Enable or Disable Users for Lync Server 2010
Topic Last Modified: 2016-04-04
After enabling a user account in Active Directory Users and Computers, you can use the following procedures to enable a new user for Microsoft Lync Server 2010 or disable a previously enabled user account in Lync Server 2010 without losing the Lync Server 2010 settings that you configured for the user account. Because you do not lose the Lync Server 2010 user account settings, you can re-enable a previously enabled user account again without having to reconfigure the user account.
Note
Simply disabling a user account in Active Directory will not stop a user from being able to sign into or use Lync Server. This is because Lync uses certificate authentication that streamlines the authentication process, and these client certificates are valid for 180 days. If you want to stop disabled Active Directory accounts that had been enabled for Lync from having access to Lync Server, you must use the Disable-CsUser cmdlet, or use the Lync Server Control Panel as laid out in this article. Once the user is disabled in Lync and the Central Management store has been replicated in the environment the users will no longer be able to sign in. Also, users that are signed in will get disconnected.
To enable a user account for Lync Server
From a user account that is assigned to the CsUserAdministrator role or the CsAdministrator role, log on to any computer in your internal deployment.
Open a browser window, and then enter the Admin URL to open the Lync Server Control Panel. For details about the different methods you can use to start Lync Server Control Panel, see Open Lync Server Administrative Tools.
In the left navigation bar, click Users.
In the Search users box, type all or the first portion of the display name, first name, last name, Security Accounts Manager (SAM) account name, SIP address, or line Uniform Resource Identifier (URI) of the user account that you want to enable, and then click Find.
In the table, click the user account that you want to enable.
On the Edit menu, click Modify.
In Edit Lync Server User, select the Enabled for Lync Server check box, and then click Commit.
To disable or re-enable a previously enabled user account for Lync Server
From a user account that is assigned to the CsUserAdministrator role or the CsAdministrator role, log on to any computer in your internal deployment.
Open a browser window, and then enter the Admin URL to open the Lync Server Control Panel. For details about the different methods you can use to start Lync Server Control Panel, see Open Lync Server Administrative Tools.
In the left navigation bar, click Users.
In the Search users box, type all or the first portion of the display name, first name, last name, Security Accounts Manager (SAM) account name, SIP address, or line Uniform Resource Identifier (URI) of the user account that you want to disable or re-enable, and then click Find.
In the table, click the user account that you want to disable or re-enable.
On the Action menu, do one of the following:
To temporarily disable the user account for Lync Server 2010, click Temporarily disable for Lync Server.
To enable the user account for Lync Server 2010, click Re-enable for Lync Server.