Hey Brad,

thanks for ur quick reply. The AD Forest is running on a 2008 level yes. The patch would only apply if I would have installed Unity already right? Thats not the case yet.

I am not able to run the Permission Wizard, which sets the necessary permissions in the AD. Is this a problem of the 2008 AD as well??

Thanks,

Sebastian

Sounds like either the account you're logged in as really doesn't have the permissions it thinks, or your domain controller is read-only and doesn't allow any writing.

Brad

Brad could you give me some hints what permission the Installation account actually need to be able to run the Permission Wizard? Regarding the Properties of the Unity Installation user, this user belongs to the Damin-Admin, Schema-Admin, and Exchange-Admin group. And if I remember correct as well to the Administrator group. I'm able to create OUs on the DC directly but I can't delete those OUs.

What permissions does the account need to be able to delete and create OUs under the Domain OU and more important where do I have to configure those permissions? Globally, on the DC, or somewhere else?

A document or step by step describtion would be much apprecited.

Thanks in advance,

Sebastian Jeuk

The UnityInstall account has all of the correct permissions it needs according to the documentation:

http://www.cisco.com/en/US/customer/docs/voice_ip_comm/unity/5x/installation/guide/vmexnofo/5xcuigvmenofo070.html#wp1551398

Make sure you have the latest version of Permissions Wizard.  I would recommend you run the Permissions Wizard in Report Mode which may help narrow down where it may be lacking permissions:

http://www.ciscounitytools.com/HelpFiles/PW501/PWReportHelp_ENU.htm

Brad

Hey Brad,

thanks for the info. Unfortunately I can't access the first Link with my CCO account. Could you send me the linked file.

Thanks in advance,

Sebastian Jeuk

Here's google's results, it's just the installation guide for Unity 5.x (also applies to 7.x) with the section containing "Creating the Accounts Required for the Cisco Unity Installation"

http://www.google.com/search?hl=en&q=Creating+the+Accounts+Required+for+the+Cisco+Unity+Installation&btnG=Google+Search&aq=f&oq=

Brad

Unfortunately I'm still not able to run the Permission Wizard. I followed the instructions on the guide you recommended, Brad, but nothing changed.

Any help is much appreciated as I don't know what else I could try. I guess I'm missing some user permissions in the windows 2008 domain. But I'm not sure which ones and where I should grant them.

Thanks again for your help,

Sebastian

Unfortunately I'm still not able to run the Permission Wizard. I followed the instructions on the guide you recommended, Brad, but nothing changed.

Any help is much appreciated as I don't know what else I could try. I guess I'm missing some user permissions in the windows 2008 domain. But I'm not sure which ones and where I should grant them.

Thanks again for your help,

Sebastian

Hey gents,

I still have the problem and I dunno what I could do. I have found the follow log in the PWdiag.log file:

2009-02-04 13:46:50 Log opened 02/04/09 13:46:50

2009-02-04 13:46:50 Permissions Wizard Version 3.0.0.1

2009-02-04 13:46:50 Unity Version: Unknown

2009-02-04 13:46:50 CRegKey::RecurseDeleteKey() failed Error=[00000002] PWRegInfo.cpp:line(684)

2009-02-04 13:46:50 Setting domain controller to [\\FYP-DC.ad.fyp.ac.uk] for PW binding operations Wiz.cpp:line(662)

2009-02-04 13:46:50 Setting domain controller to [FYP-DC.ad.fyp.ac.uk] for PW ADSI operations Wiz.cpp:line(664)

2009-02-04 13:46:52 LDAP://FYP-DC.ad.fyp.ac.uk/CN=cisco-Ecsbu-UM-Schema-Version,CN=Schema,CN=Configuration,DC=ad,DC=fyp,DC=ac,DC=uk (null):line(14860616)

2009-02-04 13:46:52 CreateUnityOrgUnit() begin WizIntroPage.cpp:line(627)

2009-02-04 13:46:52 IADs::SetInfo() failed Error=[80072037] WizIntroPage.cpp:line(765)

2009-02-04 13:46:52 CreateUnityOrgUnit() failed Error=[80072037] WizIntroPage.cpp:line(478)

Unfortunately I dunno what this exactly means.

Any help would be much appreciated.

Thanks,

Sebastian