when users log into their user profile on the CUCM and instead of the system loading the user profile only it automatically loads the CUCM administration page. which is not meant to be.
the CUCM is fully inregrated with LDAP and extension mobility is enabled for users to log in to get their profile.
Regardless of LDAP sync or not, the users should get no access unless they are added to groups in the End User config page on CCMAdmin.
If you are absolutely certain that they are being redirected to ccmadmin when logging into ccmuser, AND that they are not in the groups which grant them access, then you have a problem with your server.
You could try restartint Tomcat (SSH to the server and enter 'utils service restart Cisco Tomcat') or raise a case with Cisco.
Please rate helpful posts and mark answered questions that you've got a satisfactory response from to help identify useful content in the forums...