Script

[This is pre-release documentation and subject to change in future releases. This topic's current status is: Milestone-Ready]

Topic Last Modified: 2010-07-16

Domain preparation is the final step in preparing Active Directory Domain Services (AD DS) for Communications Server 2010. The domain preparation step adds to universal groups the necessary access control entries (ACEs) that grant permissions to host and manage users within the domain. Domain preparation creates ACEs on the domain root and three built-in containers: User, Computers, and Domain Controllers (DCs).

You can run domain preparation on any computer in the domain where you are deploying Communications Server. You must prepare every domain that will host Communication Servers or users.

If permissions inheritance is disabled or authenticated user permissions are disabled in your organization, you must perform additional steps during domain preparation. For details, see Preparing a Locked Down Active Directory Domain Services.

If your organization uses custom containers instead of the three built-in containers (that is, Users, Computers, and Domain Controllers), you must grant read access to the custom containers for the Authenticated Users group. Read access to the containers is required for domain preparation. If the Authenticated Users group does not have read access to the custom container, run the Grant-CsOuPermission cmdlet as illustrated below to grant read permissions for each custom container.

See Also