Users in a secured organizational unit (OU) named "Blocking Inheritance" cannot use the Group Chat Admin Tool

During the installation of Microsoft Office Communications Server 2007 R2 Group Chat Server, you have to specify an initial set of one or more users who are granted administrative permissions. Then, these users have the required security clearance to log on to the Group Chat Admin Tool, and perform additional configuration and provisioning. However, if the specified users are members of a secured organizational unit (OU) that is named "Blocking Inheritance," the users cannot fulfill this function.

To avoid this problem, use one of the following methods:

• Assign administrative permissions during installation to one or more users who are not in a secure OU that is named "Blocking Inheritance."
• Temporarily remove the security restrictions from the selected Group Chat administrators. Then, use the accounts to run the Group Chat Admin Tool. Afterward, assign administrative permissions to other users who permanently assume these responsibilities and who do not have a security restriction that blocks their access to the system.

To resolve this issue, apply the following update:

• 969819  (http://support.microsoft.com/kb/969819/ ) Update for Office Communications Server 2007 R2, Group Chat Server and Group Chat Compliance Servers: July 2009