Lync Server 2010 Control Panel "Insufficient access rights to perform the operation"

Active Directory operations failed on "lyncfe.server.local".  You cannot retry this operation: "Insufficient access rights to perform the operation 00002098: SecErr: DSID-03150E8A, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0"



The resolution is to open the user account using Active Directory Users and Computers.
Remember to turn on Advanced Features in AD Users and Computers.
Locate the user and select the security tab, click advanced and select "Include Inheritable Permissions from this object's parent" on the user object:




Now you should be able to change the Lync settings for this user.