Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Attention: The Cisco Support Community site will be in read only mode on Dec14, 2017 from 12:01am PST to 11:30am for standard maintenance. Sorry for the inconvenience.

New Member

domain security policy

If the unity is not a DC and a domain security policy is in effect, where do I grant the installation and services accounts the rights to act as a part of the operating system and log on as service. The reason I ask this is from installation guide it says on Unity server, but actually in customer site, unity server is not able to do this? I guess it has to be done on the the existing DC server?

5 REPLIES
Cisco Employee

Re: domain security policy

Yes, you can make the changes from an existing DC server. I am not sure why you cannot access the Domain Sercurity Policy from Unity - could it possibly be hidden?

Gold

Re: domain security policy

It depends on the OU that Unity is in any their GPO design. By default you just need to change it in the domain security policy. Most customers don't change the default.

Keith

New Member

Re: domain security policy

But I only can see local security policy under program>Admin tool. Initially I thought the customer didn't deploy domain security policy, so I went into local policy and tried to assign domain/administrator(which is the install ,service and admin account)to those two services, however,I found the"look in" space bar is greyed out except for the local server when I click add button. So I guess customer deployed domain security policy. How can I verify whether they had domain security policy or not?

New Member

Re: domain security policy

The Domain Security Policy tool may not be present because no one installed all of the administrative tools. Run C:\Winnt\System32\adminpak.msi.

adam

New Member

Re: domain security policy

"The Domain Security Policy tool may not be present because no one installed all of the administrative tools. Run C:\Winnt\System32\adminpak.msi."

not required in his case

start>run> dompol.msc

169
Views
0
Helpful
5
Replies
CreatePlease to create content