No, where do we have to do that :)

any documentation that explain that ?

thanks

That's an AD procedure

HTH

java

if this helps, please rate

Yep, this is the procedure that I am looking for

I might be mistaken, but I believe that all AD accounts have LDAP read permissions by default.

1. Can you see any User accounts that you know came from AD (not pre-existing accounts)?

2. If yes, try restarting the DirSync service on the Publisher.

3. If none show up, recheck the LDAP config on the Publisher. Does it save with no error messages? Is the LDAP User Search Base correct?

I've built a half-dozen UCM clusters that were synced and authenticated with AD. I have yet to figure out a way to filter users via AD permissions. If anyone know how to do this (AD 2003), please let me know.

I usually wind up syncing to the root domain and editing the LDAP filter string in CallManager to restrict which user account show up in CallManager.

Randy