This group must be a universal group or a global group. It cannot be a domain local group.
10.On the Location of Computer Objects for Deployment page, type the distinguished name (DN) of the organizational unit (OU) or container that hosts the computer objects on which Office Communications Server will be deployed.
You can use the ADSI Edit tool to navigate to the properties of the group, and then copy and paste the DN of the group into the wizard.
11.On the Service Account page, type the Session Initiation Protocol (SIP) service account and component service account that will be used by Office Communications Server.
12.On the Ready to Perform Setup Delegation page, verify your settings, and then click Next.
13.When the wizard is complete, click Finish.
14.Add the new trustee group to the Local Administrators group of each server where you want to install Office Communications Server and the computer running the SQL Server back-end database server for any Enterprise pools.
15.If, in your organization, Authenticated Users security group permissions have been removed from Active Directory, you must either add the new trustee group for setup tasks to RTCUniversalServerAdmins or manually grant Read permissions to the trustee group for the following containers in the forest root:
Forest root domain
Forest root domain System container
Root of the domain where permissions is delegated
Parent containers of computer objects and service account objects
16.Open a command prompt, and then type whoami.exe /all to verify that the user has appropriate permissions. The output should be similar to the following:
Everyone Well-known group S-1-1-0 BUILTIN\Administrators Alias S-1-5-32-544 BUILTIN\Users Alias S-1-5-32-545 NT AUTHORITY\INTERACTIVE Well-known group S-1-5-4 NT AUTHORITY\Authenticated Users Well-known group S-1-5-11 NT AUTHORITY\This Organization Well-known group S-1-5-15 LOCAL Well-known group S-1-2-0 CONTOSO\RTCUniversalUserReadOnlyGroup Group S-1-5-21-4264192570- CONTOSO\RTCUniversalGlobalWriteGroup Group S-1-5-21-4264192570- CONTOSO\RTCUniversalGlobalReadOnlyGroup S-1-5-21-4264192570- CONTOSO\RTCUniversalServerReadOnlyGroup