In some cases, permissions to Active Directory containers or objects may not have been created or updated properly during the preparation process for AD DS. With the following actions, a user can establish permissions directly on a container for any specified object.

Create Office Communications Server Permissions

The CreateLcsOuPermissionscommand creates permissions for Office Communications Server groups directly on a specified container, or organizational unit, for a user, contact, InetOrgPerson, or a specific object in the container. The command requires two parameters:

  • /OUThe containers distinguished name relative to the domain root container distinguished name.

  • /ObjectTypeThe type of Office Communications Server object for which to create permissions. Options are User, Contact, AppContact, InetOrgPerson, and Computer.

Before starting this task, you must be logged on to the domain computer by using Domain Admins credentials for the domain with the organizational unit containers that will receive permissions. Use the following syntax and parameters examples.

Copy Code 
LCSCmd.exe /Domain[:{Domain FQDN}] /Action:CreateLcsOuPermissions
/OU:<CN=name> /ObjectType:{User | InetOrgPerson | Computer |
Contact | AppContact}

Such as:

Copy Code 
LCSCmd.exe /Domain /Action:CreateLcsOuPermissions
/OU:"OU=Dept1Users,OU=UsersOU" /ObjectType:user

Check Office Communications Server Permissions

The CheckLcsOuPermissionscommand ascertains whether the CreateLcsOuPermissionsaction was successful. This action also requires the /OUand /ObjectTypeparameters. Syntax for the CheckLcsOuPermissionsaction is as follows.

Copy Code 
LCSCmd.exe /Domain[:<Domain FQDN>]
/Action:CheckLcsOuPermissions /OU:<distinguished name of
container relative to the domain root> /ObjectType:{User |
InetOrgPerson | Computer | Contact | AppContact}

Such as:

Copy Code 
LCSCmd.exe /Domain /Action:CheckLcsOuPermissions
/OU:"OU=Dept1Users,OU=UsersOU" /ObjectType:user

Remove Office Communications Server Permissions

Use the RemoveLcsOuPermissionsaction to take away permissions for Office Communications Server groups on the specified container for user, contact, InetOrgPerson, or computer objects. This action requires /OUand /ObjectTypeparameters. Use the following as an example.

Copy Code 
LCSCmd.exe /Domain[:<Domain FQDN>]
/Action:RemoveLcsOuPermissions /OU:<CN=name>
/ObjectType:{User | InetOrgPerson | Computer | Contact |
AppContact}

Such as:

Copy Code 
LCSCmd.exe /Domain /Action:RemoveLcsOuPermissions /OU:"OU=MyUsers"
/ObjectType:user