Revokes the Microsoft Communications Server 2010 setup permissions that have been granted on an Active Directory organizational unit.
Syntax
Revoke-CsSetupPermission -ComputerOu <String> [-Confirm [<SwitchParameter>]] [-Domain <Fqdn>] [-DomainController <Fqdn>] [-Force <SwitchParameter>] [-GlobalCatalog <Fqdn>] [-Report <String>] [-WhatIf [<SwitchParameter>]] |
Parameters
| Parameter | Required | Type | Description |
|---|---|---|---|
|
ComputerOU |
Required |
Active Directory distinguished name |
Distinguished name of the OU which contains the accounts for the computers where Microsoft Communications Server will be (or has been) installed. For example: "ou=CsServers,dc=litwareinc,dc=com". |
|
Domain |
Optional |
String |
Name of the domain where the OU is located. If this parameter is not included, then Revoke-CsSetupPermission will look for the OU on the current domain. |
|
DomainController |
Optional |
String |
|
|
GlobalCatalog |
Optional |
String |
|
|
Report |
Optional |
String |
Enables you to specify a file path for the log file created when the cmdlet runs. For example: -Report "C:\Logs\OUPermissions.xml" |
|
Force |
Optional |
Switch Parameter |
|
|
WhatIf |
Optional |
Switch Parameter |
Describes what would happen if you executed the command without actually executing the command. |
|
Confirm |
Optional |
Switch Parameter |
Prompts you for confirmation before executing the command. |
Detailed Description
If you have locked down your Active Directory domain (that is, if you have disabled permission inheritance) then the domain preparation which takes place when you install Microsoft Communications Server will not be able to add the permissions needed to do future installation of Communications Server or any of its components. (Domain administrators will still be able to perform these installation tasks, but members of the RTCUniversalServerAdmins group will not.) In that case, you will need to use the Grant-CsSetupPermission to grant RTCUniversalServerAdmins the appropriate permissions. In addition, you will need to do this on a container-by-container basis.
Permissions granted by using Grant-CsSetupPermission can later be removed using Revoke-CsSetupPermission. If you run that cmdlet then the RTCUniversalServerAdmins will no longer have setup permissions for Communications Server (at least not for the specified Active Directory container). In that case, you will need to be an enterprise administrator or a domain administrator in order to install Communications Server or one of its components.
Return Types
Examples
-------------------------- Example 1 ------------------------
 Copy Code |
|
|---|---|
Revoke-CsSetupPermission -ComputerOU "ou=CsServers,dc=litwareinc,dc=com" |
|
The command shown in Example 1 revokes the setup permissions applied to the CsServers OU in the domain litwareinc.com.