Issue

While running ‘Enable-CsTopology’ you get an error stating that you dont have permission, refer below error.

Error: An error occurred: "Microsoft.Rtc.Management.ADConnect.ADOperationException" "Active Directory operation failed on "server.domain.com". You cannot retry this operation: "Access is denied
00000005: SecErr: DSID-031521D0, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

Solution

Found that its because the account which is running Enable-cstopology doesn’t have permission to run this command fist time as the account should have AD permission to run it fist time. So, run the command with an account which has Domain Admin permission and the issue got fixed.