Using LcsCmd to Run Domain Preparation
Topic Last Modified: 2009-01-23
Domain preparation is the final step in preparing Active Directory Domain Services (AD DS) for Office Communications Server 2007 R2. You can run domain preparation on any computer in the domain where you are deploying Office Communications Server. You must prepare every domain that will host Office Communications Servers or users.
If permissions inheritance is disabled or authenticated user permissions are disabled in your organization, you must perform additional steps during domain preparation. For details, see Preparing a Locked Down Active Directory Domain Services.
Tip
For details about the access control entries (ACEs) created on the domain root and in the Users, Computers, and Domain Controllers containers, see Changes Made by Domain Preparation.
Important
If you are currently using Office Communications Server 2007 and the domain preparation for Office Communications Server 2007 R2 fails, the rollback might remove access control lists (ACLs) that are required for Office Communications Server 2007 to work properly. If this problem occurs, run Office Communications Server 2007 domain preparation again to restore the missing ACLs, and then run domain preparation for Office Communications Server 2007 R2.
To prepare the domain
Log on to any server in the domain as a member of the DomainAdmins group.
Open a command prompt and then run:
LcsCmd.exe /domain[:<DomainFQDN>] /action:DomainPrep
For example, if corp.woodgrovebank.com is the domain that you are preparing for Office Communications Server, use the following command:
LcsCmd.exe /domain:corp.woodgrovebank.com /action:DomainPrep
Note
If you use /domain without specifying the parameter <DomainFQDN>, the value defaults to the local domain.
To verify that domain preparation was successful
Log on to a computer that is joined to a domain and on which you have the appropriate administrative rights.
Open a command prompt and then run:
LcsCmd.exe /domain[:<domainFQDN>] /action:CheckDomainPrepState
For example, if corp.woodgrovebank.com is the domain that you want to verify, use the following command:
LcsCmd.exe /domain:corp.woodgrovebank.com /action:CheckDomainPrepState