Adding Microsoft Office Communications Server 2007 R2 to a Pool on a Subdomain
Written by: Lee Kohn
Let’s say you want to install Office Communications Server (OCS) 2007 R2 onto a subdomain (i.e. installing OCS onto a domain such as lab.domain.net instead of domain.net). If you are logged in as a domain administrator on the subdomain, you will get access denied errors when the installer attempts to write information into the top-level domain.
A simple solution to this is to temporarily give the sub-domain’s administrator write access to the objects in active directory (AD) which it needs to write to, which is usually:
CN=RTC Service,CN=Microsoft,CN=System,DC=[TOP LEVEL DOMAIN IN THE FOREST]
NOTE: The OCS installer error log will tell you exactly which objects it needs access to.
This can be accomplished using a tool called ADSI edit which is designed for editing objects inside of AD. Screen shots can be seen below:
ADSI Edit (Click on image for larger view)
CN=RTC service (Click on image for larger view)
If you have any questions or comments, please post them in the comments section below.
Thanks,
Lee
