I am migrating ICM version 7.2 to 8.0(1a). Upgrade installation is ok. But when I click Domain Manager--> Cisco_ICM --> Expand, one error is warned:"Missing or incorrect type of security group CN=Cisco_ICM_Config, OU=Cisco_ICM,DC=IPCC,DC=Vinaphone,DC=Com,DC=VN
Missing or incorrect type of security group CN=Cisco_ICM_Setup, OU=Cisco_ICM,DC=IPCC,DC=Vinaphone,DC=Com,DC=VN
Missing or incorrect type of security group CN=Cisco_ICM_WebView, OU=Cisco_ICM,DC=IPCC,DC=Vinaphone,DC=Com,DC=VN"
(attached file is screen shot)
Any one clarify help me?
If you open Active Directory Users and Computers and click on the Cisco_ICM OU, do you see the three security groups of Cisco_ICM_Config, Cisco_ICM_Setup, Cisco_ICM_WebView ?
Are you running domain manager as a domain user that is a member of those three security groups and is also a local administrator on the server you are running domain manager from?
Hi Omar Deen,
In the Active Directory Server, I can see three security groups. And I login with Administrator Domain account. Domain Admin is also a member of local administrator group.
Any ideas help me?
If you open the three security groups and click on the Members tab, do you see the domain user listed in there? Do you also see the Domain Admins group in there?
Just to be certain, the server you are working on is in fact joined to the domain, correct? Do you see the computer in Active Directory?
I'm going to make a couple assumptions...
This is a perfect doc to follow: http://www.cisco.com/c/dam/en/us/td/docs/voice_ip_comm/cust_contact/contact_center/ipcc_enterprise/ipccenterprise8_0_1/installation/guide/icm80ug.pdf
In that case....
You need to upgrade to 8.5(2)
From the doc: If you are transitioning to a Windows Server 2008 R2 server, then you must perform a Technology Refresh and you must apply the release 8.5(2) (or later) Maintenance Release before the system is functional.
You are right. I already applied 8.5.2 patch file succesfully. Now, I am staying in version 8.5.2. My target is version 10.0. This one is first step in my plan.
I want to make sure everything is okin single step before going to version 10.0. Furthermore, Domain manager need a adding security group (<Facility name>_<Instance name>_Service) which is not supported in version 7.2.
Any advices for me?
Just make sure you follow the upgrade guide
You can go directly from 8.5.2 to 10.0 while skipping 9.x. according to the upgrade doc
One issue is ICM version 10 does not support sub-skills. So, I need to make ICM version 8.5.2 operational and then remove sub-skill before upgrading.
Actually, I just noticed the fix option... Have you tried to click "Yes" to fix the OU validation errors that ICM is prompting you about? At the bottom, there's an option to fix from your first screen shot that you posted
Within Active Directory, do you know what your domain functional level is? If you open Active Directory Users and Computer and right click on your domain, which looks like yours is ipcc.vinaphone.com.vn, and then select Properties. I'm going to guess that you are at Server 2003. Can you verify your domain functional level?
you are right. I run Active directory in Windows 2008 server. So why are Domain and Forest functional level Windows server 2003?
Yes to fix all is not working. it still happens again.
It was never increased. When migrating from Server 2003 to Server 2008, you must manually make that change and make sure that the FSMO roles are all set. None of that applies to UCCE, but just to answer your question.
You can raise the domain and forest functional level to Server 2008 R2 - but be warned, this is a irreversable process. Once you raise it, there is no going back.
Here's a guide on how to raise the domain and forest functional level. Please follow it step for step after making sure that you want to do this.
I change Group Scope for each Security Group to Domain Local. No warning happens.
Now, I can open Cisco ICM Domain Manager, expand all successfully. I can see four security groups in AD server:
But, I don't see them in Domain Manager.
The only security groups that you'll see in Domain Manager are going to be Config and Setup. So if you see Config and Setup in Domain Manager, then you're good to go :)
Thanks for reply
As i mentioned, I need to remove subskill before upgrading to version 10.
When I start Rogger services, they are started and automatically stopped.
Now, I go to wen setup and edit router and logger configuration, Click to finish, an error happens. I think there is issue with AD.
(attach screen shot)
You're reminding me why I never do Tech Refresh :)
I think AD is fine, your problem here might be your tasks, or lack there of. Go to Start > Administrative Tools > Task Scheduler... Click on the Task Scheduler Library and see if scheduled tasks show up. These tasks will probably be like At1, At2, etc... On the General tab of those tasks, make sure it's running as SYSTEM, and that the options of Run whether user is logged in or not and Run with highest privileges are selected.
Open the Services window and make sure Task Scheduler is actually running. If it is, restart the service and go through WebSetup again. In WebSetup, you did set your Instance and Facility before anything else in there, correct?
Verify your OUs one at a time. The OU structure is:
Cisco_ICM --> Facility --> Instance
Open Active Directory Users and Computers and click on the Cisco_ICM OU. In the right pane you should see three security groups:
Expand the Cisco_ICM OU. You will now see your facility OUs, If you click on your facility OUs, you should see security groups
Expand the facility OUs to see your instance OUs. You should see four security groups
If you open all the security groups, you'll want to verify that the Group scope is Domain local and the Group type is Security.