This section describes the domain-specific actions you can use to assign, check, or remove permissions from a domain group.
For details about delegating permissions, including syntax
examples, see
Delegate Permissions on a Domain
In Office Communications Server 2007 R2, you can use
the
The
|
|
---|---|
|
Specifies the type of permissions granted to the trustee group. The options for this parameter are:
|
|
Specifies the domain group to which you are granting permissions. |
|
Specifies the FQDN of the domain in which the trustee group resides. |
|
Specifies the RTC service account name. |
|
Specifies the RTC component service account name. |
|
Specifies the distinguished name (DN) of the organizational unit
(OU) that contains the computers running Office Communications
Servers. The organizational unit that is specified by the
If you want to delegate the administration of users in a domain
other than the domain where Office Communications Server is
installed, the organizational unit that is specified by the
|
|
Specifies the DN of the organizational unit containing the users
that the trustee group will administer. The organizational unit
that is specified by the
|
|
Specifies the type of the user object on which to create, check, or remove delegations. The options for this parameter are User, Contact, InetOrgPerson, or Computer. |
|
New in Office Communications Server 2007 R2. Specifies a list of permissions to grant. This is a comma-separated list, with possible values of Read and Write. The default is Read. |
|
Specifies the name of the Standard Edition server or Enterprise pool in which the trustee group can administer users or servers, and adds the trustee group to the Local Administrators group of each computer in the pool and to the ReadOnlyRole on the Microsoft SQL Server back-end databases. |
|
Specifies a comma separated list of FQDNs of computers to which the group requires access but are not part of the pool. You can enter the FQDN of Archiving Servers, Mediation Servers, or the internal FQDN of Edge Servers. |
Checking Delegation
Use the
The
|
|
---|---|
|
Specifies the group to which you are granting permissions. |
|
Specifies the FQDN of the domain in which the trustee group resides. |
|
Specifies the RTC service account name. |
|
Specifies the RTC component service account name. |
|
Specifies the DN of the organizational unit containing the
computers running Office Communications Server servers. The
organizational unit that is specified by the
|
|
Specifies the DN of the organizational unit containing the users
that the trustee group administers. The organizational unit that is
specified by the
|
|
Specifies the type of the user object on which to create, check, or remove delegations. |
|
Specifies the name of the Standard Edition server or Enterprise pool in which the trustee group can administer users or servers, and adds the trustee group to the Local Administrators group of each computer in the pool and to the ReadOnlyRole on the SQL Server back-end databases. |
|
Specifies a comma separated list of FQDNs of computers to which the group requires access but are not part of the pool. You can enter the FQDN of Archiving Servers, Mediation Servers, or the internal FQDN of Edge Servers. |
The following command runs the
Copy Code | |
---|---|
LCSCmd.exe /domain[:<Domain FQDN>] /action:CheckDelegation /TrusteeGroup:<name of the universal group with delegated permissions> |
Such as:
Copy Code | |
---|---|
LCSCmd.exe /domain /action:CheckDelegation /TrusteeGroup:MyDomainGroup |
Removing Delegation
Use the
Copy Code | |
---|---|
LCSCmd.exe /domain[:<Domain FQDN>] /action:RemoveDelegation /TrusteeGroup:<name of the universal group with delegated permissions> |
Such as:
Copy Code | |
---|---|
LCSCmd.exe /domain /action:RemoveDelegation /TrusteeGroup:MyDomainGroup |
The following optional parameters exist to augment the
Parameter | Description |
---|---|
|
Specifies the domain group to which you are granting permissions. |
|
Specifies the FQDN of the domain in which the trustee group resides. |
|
Specifies the RTC service account name. |
|
Specifies the RTC component service account name. |
|
Specifies the DN of the organizational unit containing the
computers running Office Communications Servers. The organizational
unit that is specified by the
|
|
Specifies the DN of the organizational unit containing the users
that the trustee group administers. The organizational unit that is
specified by the
|
|
Specifies the type of the user object on which to create, check, or remove delegations. |
|
Specifies the name of the Standard Edition server or Enterprise pool in which the trustee group can administer users or servers, and adds the trustee group to the Local Administrators group of each computer in the pool and to the ReadOnlyRole on the SQL Server back-end database. |
|
Specifies a comma separated list of FQDNs of computers to which the group requires access but are not part of the pool. You can enter the FQDN of Archiving Servers, Mediation Servers, or the internal FQDN of Edge Servers. |