When Cisco CallManager is integrated with the Active Directory (AD) through the Directory Configuration plugin, CallManager Admin pages are inaccessible to the CallManager Administrator (Multilevel Administration [MLA] is enabled).
When Cisco CallManager Password Changer is used to set the password for the CallManager Administrator account, the User ID CCMAdministrator is not valid error message is displayed.
Similar errors are also generated when an attempt is made to set the password for a Cisco CallManager SysUser or a Cisco IP Manager Assistant (IPMA) SysUser.
When the Cisco CallManager Administrator, CallManager SysUser and IPMA SysUser accounts are created within the User Creation Base, any user that is created through CallManager Administration resides under the User Creation Base node in the directory.
Make sure the User Creation Base is the same as the User Search Base, or a subtree under the User Search Base. If this is not ensured, users created in the CallManager Administration cannot be found.
The User Search Base stores the Microsoft AD user information. The User Search Base is the common denominator of all the containers where user data is stored. By default, all user data is stored in the user folder. If other organizational units (OUs) are set up, the common denominator must be specified.
For further information, refer to these documents: