Restoring Permissions to the Devices OU

  • Article

2/9/2009

You do not need to restore permissions to the SCMDM Managed Devices organizational unit (OU) since it has the appropriate access control lists from when you recreated it with the Active Directory Configuration Tool (ADConfig). However, you need to grant permissions on MDM Enrollment Server to access any custom OUs that exist.

Run the following cmdlet to grant MDM Enrollment Server access to the Devices OU:

Set-EnrollmentPermissions -container <device container>

For more information about modifying the MDM service connection point (SCP), see Modify an MDM Active Directory Service Connection Point.