Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Cisco_ICM Active Directory OU

Hello,

The IT Department has stated that we cannot create the 'Cisco_ICM' OU structure using the UCCE Domain Manager tool. They do not allow 3rd party applications to modify Active Directory.  

Researching possibilities, the ICM/UCCE Staging Guide states 'Microsoft AD tools or Domain Manager are the only supported tools for provisioning AD.'

Does this mean that the entire OU structure can be created using 'Active Directory Users and Computers', and if so, would it be supported by TAC? 

We'll be using UCCE v10

Thanks,

Everyone's tags (2)
1 ACCEPTED SOLUTION

Accepted Solutions
Silver

Re: Cisco_ICM Active Directory OU

No, you cannot manually make the OUs, you must use Domain Manager. This tool does so much more behind the scenes that paves the way for your contact center deployment.

The Cisco_ICM OU

  • Is going to contain all the domain resources that ICM creates
  • It'll define permissions for all ICM resources
  • It'll automatically create two child OUs, Facility and Instance

Facility OU will create configuration security groups for the following:

  • ICM config manager
  • ICM script editor
  • Internet script editor
  • Database access for AW-HDS, not logger. This may have changed in 10, not sure
  • CCE Web admin

And with the OUs created, ICM will automatically create service accounts for you and place said accounts in their respective OUs. The service accounts can later be seen in action when you launch Service Account Manager - some customers use their own, which is okay. More importantly, this is where you create your instance. When you go through Web Setup and click on Instance Management, you'll be selecting your facility and instance as well as your instance number - those don't exist without domain manager. When you're done with the setup, you'll notice the importance of all this when you launch the registry and see HKEY_LOCAL_MACHINE\SOFTWARE\Cisco Systems, Inc.\ICM\ - so yea, it does more than create OUs.

Your IT Department is going to have to make an exception.This is a lot of money to invest only to be road blocked by the IT Department that more than likely have no idea what they're talking about to begin with - at least with my experience.

5 REPLIES
Silver

Re: Cisco_ICM Active Directory OU

No, you cannot manually make the OUs, you must use Domain Manager. This tool does so much more behind the scenes that paves the way for your contact center deployment.

The Cisco_ICM OU

  • Is going to contain all the domain resources that ICM creates
  • It'll define permissions for all ICM resources
  • It'll automatically create two child OUs, Facility and Instance

Facility OU will create configuration security groups for the following:

  • ICM config manager
  • ICM script editor
  • Internet script editor
  • Database access for AW-HDS, not logger. This may have changed in 10, not sure
  • CCE Web admin

And with the OUs created, ICM will automatically create service accounts for you and place said accounts in their respective OUs. The service accounts can later be seen in action when you launch Service Account Manager - some customers use their own, which is okay. More importantly, this is where you create your instance. When you go through Web Setup and click on Instance Management, you'll be selecting your facility and instance as well as your instance number - those don't exist without domain manager. When you're done with the setup, you'll notice the importance of all this when you launch the registry and see HKEY_LOCAL_MACHINE\SOFTWARE\Cisco Systems, Inc.\ICM\ - so yea, it does more than create OUs.

Your IT Department is going to have to make an exception.This is a lot of money to invest only to be road blocked by the IT Department that more than likely have no idea what they're talking about to begin with - at least with my experience.

Cisco_ICM Active Directory OU

Hi,

did you consider setting up a separate domain for ICM use only?

G.

New Member

Cisco_ICM Active Directory OU

Omar, Gergely

Thanks for the quick replies.

We're putting a list of options together, a separate domain being one of them.

I wanted to close off the question they asked about 'manually' creating the AD structure. One of my concerns was what Domain Manager did in the background while creating OUs, which Omar has answered.

Regards

Hall of Fame Super Silver

Cisco_ICM Active Directory OU

+5 for Omar and Gergely, in addition please check out the ICM staging guide for good explanation of it and AD requirements, etc:

http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cust_contact/contact_center/icm_enterprise/icm_enterprise_10_0_1/Installation/Guide/UCCE_BK_SE65C903_00_staging-guide.html

HTH,

Chris

Re: Cisco_ICM Active Directory OU

I third this, they only need to run it once, so just ask them to use an account and then revoke access after initial provisioning if they are that concerned.  Your going to need a domain account for managing it anyways.

Chad

492
Views
10
Helpful
5
Replies
CreatePlease to create content