Domain preparation is the final step in preparing Active Directory Domain Services (AD DS) for Office Communications Server 2007 R2. You can run domain preparation on any computer in the domain where you are deploying Office Communications Server. You must prepare every domain that will host Office Communications Servers or users.

If permissions inheritance is disabled or authenticated user permissions are disabled in your organization, you must perform additional steps during domain preparation. For details, see Preparing a Locked Down Active Directory Domain Services.

Tip:
For details about the access control entries (ACEs) created on the domain root and in the Users, Computers, and Domain Controllers containers, see Changes Made by Domain Preparation.
Important:
If you are currently using Office Communications Server 2007 and the domain preparation for Office Communications Server 2007 R2 fails, the rollback might remove access control lists (ACLs) that are required for Office Communications Server 2007 to work properly. If this problem occurs, run Office Communications Server 2007 domain preparation again to restore the missing ACLs, and then run domain preparation for Office Communications Server 2007 R2.

To prepare the domain

  1. Log on to any server in the domain as a member of the DomainAdmins group.

  2. Open a command prompt and then run:

    Copy Code 
    LcsCmd.exe /domain[:
<DomainFQDN>] /action:DomainPrep

    For example, if corp.woodgrovebank.com is the domain that you are preparing for Office Communications Server, use the following command:

    Copy Code 
    LcsCmd.exe /domain:corp.woodgrovebank.com /action:DomainPrep
    Note:
    If you use /domainwithout specifying the parameter <DomainFQDN>, the value defaults to the local domain.

To verify that domain preparation was successful

  1. Log on to a computer that is joined to a domain and on which you have the appropriate administrative rights.

  2. Open a command prompt and then run:

    Copy Code 
    LcsCmd.exe /domain[:
<domainFQDN>] /action:CheckDomainPrepState

    For example, if corp.woodgrovebank.com is the domain that you want to verify, use the following command:

    Copy Code 
    LcsCmd.exe /domain:corp.woodgrovebank.com
/action:CheckDomainPrepState