LDAP doesn't work that way. You cannot specify multiple sibling elements in a single LDAP string. Also, UCM has a limit of five LDAP synchronizations so you will likely need to reorganize your AD structure to become more hierarchical. I doubt you want to synchronize EVERY user account into the corporate directory.
Example (entire domain):
Remember that UCM will synch every user object account with these OUs, including any child OUs as long as the minimum fields are populated.
You will have to develop a custom LDAP filter If you want to exclude accounts. In 7.x this is a little involved because it requires a direct SQL update (search the forum). You would need to identify a common field that you can filter by for every account.
Ok so I restructured AD to work around the issue but now I have run into a separate issue, all users are coming up as inactive. I have the UserID attribute on CM set to employeeNumber but its called EmployeeID on AD I think that might be the issue. Here's the error I get in the trace:
First, you are exposing personally identifiable information in your postings and this forum is public. You may want replace the real-life user information with something else.
Second, I'm going to assume that you mean you have created the custom LDAP filter based on the employeeNumber. You cannot set the username in the LDAP System page to this attribute. If you are filtering by an attribute, it must actually exist within LDAP.
Third, LDAP Bind Account you are using needs to be granted "Read All Attributes" rights on the LDAP objects.
I'm not able to access my old voice mail messages all of a sudden. The recording says something like 'the message is currently not available'. This has never happened before in all the years I have been using this system. I have t...
If you have 2 ISR routers, one acting as Failover, do we need to have both the same number of SRST licenses on the 2 routers?
No. You will only need the SRST licenses on the primary router. Because this feature...