Set-EnrollmentPermissions
2/9/2009
The Set-EnrollmentPermissions cmdlet grants Mobile Device Manager Enrollment Server permission to create computer objects for managed Windows Mobile devices in the specified Active Directory container.
You do not need to use this cmdlet if you plan to enroll devices in the default organizational unit (OU), SCMDM Managed Devices (<instance name>). If you plan to use any other Active Directory container, you must run this cmdlet before you can use the New-EnrollmentRequest cmdlet to enroll a new device in the specified container. You only have to run this cmdlet one time for each container.
Note
To run this cmdlet, you must be an Active Directory Domain Administrator or you must have the necessary permissions to change access control lists (ACLs) on organizational unit (OU) objects.
Syntax
Set-EnrollmentPermissions [-Container] <ContainerIdParameter> [-confirm] [-whatif] [<CommonParameters>]
Parameters
The following describes the Set-EnrollmentPermissions cmdlet parameters.
- Container <ContainerIdParameter>
Specifies the container in Active Directory in which to create managed devices. If the value contains a space or other special characters, enclose the string in quotation marks.
- WhatIf
Informs you of what changes would be made if the action were to be performed (the cmdlet is not executed).
- Confirm
Prompts you for confirmation before the cmdlet executes.
- CommonParameters
This cmdlet supports the common parameters: -Verbose, -Debug, -ErrorAction, -ErrorVariable, and -OutVariable. For more information, at the MDM Shell prompt, type get-help about_commonparameters.
Input Type
None
Output Type
None
Examples
This Set-EnrollmentPermissions command example gives MDM Enrollment Server permission to create computer objects for managed devices in the Active Directory organizational unit, "OU=Devices,DC=dc1,DC=corp,DC=contoso,DC=com".
C:\PS>Set-EnrollmentPermissions -Container "OU=Devices,DC=dc1,DC=corp,DC=contoso,DC=com"
Cmdlet Help
To view this information online, at the MDM Shell prompt, type
get-help Set-EnrollmentPermissions -detailed, or get-help Set-EnrollmentPermissions -full