When restricting permissions for domain users on the default containers for Users and Computers in Active Directory, the following errors can occur.
Error in the installer during Exchange integration:
Error when attempting to browse to the Workspace(Desktop) site after installation:
Error when attempting to browse to the Designer site after installation:
The errors above may not always be the same, but they will always reference to an error with the DirectoryServices.
Resolution:
In order for the product to function properly, service accounts require the List contents and Read all properties permissions to be granted on the root of the domain. Follow these steps to achieve this:
- Open Active Directory Users and Computers
- Click View
- Click Advanced Features (if it is not already selected)
- Select the domain root, Properties

- Select the Security tab
- Click Advanced
- Select Authenticated Users (or add a new set of permissions for a group containing the service account if you don't want to edit an existing set)
- Click Edit
This should apply to This object and all descendent objects to ensure permissions are allowed for all containers in the domain.