See Also
11/11/2008
If you plan to enroll devices in an organizational unit (OU) other than the default OU, SCMDM2008 Managed Devices, then before you can enroll the first Windows Mobile device, you must use the Set-EnrollmentPermissionscmdlet to grant Mobile Device Manager (MDM) Enrollment Server permission to create computer objects for managed Windows Mobile devices in the appropriate Active Directory container. You must run this cmdlet before you can use the New-EnrollmentRequestcmdlet to enroll a new device. You only have to run this cmdlet one time for each Active Directory container.
If you use the default OU, then you do not need to run the Set-EnrollmentPermissionscmdlet.