[This is pre-release documentation and subject to change in future releases. This topic's current status is: Milestone-Ready]

Topic Last Modified: 2010-07-19

If you do not want to grant membership in the DomainAdmins group to users or groups who are deploying Microsoft Communications Server 2010, you can delegate setup to grant specific users or groups the subset of permissions required to install and activate Communications Server 2010 servers. You grant permissions to deploy Communications Server by using the Grant-CsSetupPermission command.

To delegate setup permissions to users who are not members of the DomainAdmins group

  1. Log on to a server as a member of the DomainAdmins group for the domain on which the delegated user will install Communications Server 2010.

  2. Open Active Directory Users and Computers.

  3. Right-click the domain name, click New, then click Organizational Unit.

  4. Specify a descriptive name for the organizational unit, and then click OK.

  5. Create or add users to this organizational unit to which you want to delegate setup permissions.

  6. Open the Communications Server Management Shell. The Communications Server Management Shell is automatically installed on each Front End Server. For details about the Communications Server Management Shell, see Communications Server Management Shell in the Planning section of this documentation.

  7. Run the following cmdlet from the Communications Server Management Shell:

    Copy Code 
    Grant-CsSetupPermission –ComputerOU <DN of the OU> -Domain <Domain FQDN>

    In the following example, the organizational unit is Marketing and is in the Contoso.com domain.

    Copy Code 
    Grant-CsSetupPermission –ComputerOU “OU=Marketing” –Domain contoso.com