Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Lost access permissions

Somehow my permissions have changed. I am unable to use the Unity system administration tool. It states "Access denied, your windows account is not associated with a unity subscriber." I am using the account I used to setup Unity, I was able to use the tool fine earlier. What do I need to do to get access to this utility again?<br><br>

16 REPLIES
Gold

Re: Lost access permissions

If this is 3.0(2) you can use the GrantUnityAccess.exe CLI utility to get access again. If not you can download the 3.0(2) CD and copy the utility over.

Keith


Keith Chambers
Unity Technical Lead
Unified Voice Team, San Jose
Cisco Systems
kechambe@cisco.com

Anonymous
N/A

Re: Lost access permissions

We had this same thing happen. It had seemed that the Unity and the Exchange server were not communicating. All we did was reset the Exchange server and everything came back to normal.


Ken Benich
Network Services
School City of Hammond
Hammond, Indiana

New Member

Re: Lost access permissions

Keith, how does this utility work? I found it in the Tech Tools directory and ran it, but I'm still locked out of SA with the 'not associated with a Unity Subscriber' message?

Anonymous
N/A

Re: Lost access permissions

If you run it with no options the instructions should be displayed. The normal use of this tool is to provide the domain\alias of the account you want to give access to the SA and then which account to "copy" those rights from.

So for me I'd enter:

GrantUnityAccess -u MyDOMAIN\lindborg -s Installer -f

The Installer account is a special account that always has admin rights but isn't created in the directory itself (it's local to the SQL db only). This should always work to get you into the SA.

Jeff Lindborg
Unity Product Architect/Answer Monkey
Cisco Systems
lindborg@cisco.com
http://www.AnswerMonkey.net (new page for Unity support tools and scripts)

Anonymous
N/A

Re: Lost access permissions

Do you have to use GrantUnityAccess for every domain account you want to grant access to the SA frontend? Should the account that installs unity already have access to the SA? After installing Unity, I had to use GrantUnityAccess on the account that installed Unity before I could access the SA.

Robbie Allen

Anonymous
N/A

Re: Lost access permissions

no, you only need to use GrantUnityAccess if you can't get into the SA and you need to back door in. Normally you add subscribers to the "Administrator" class of service (or another COS you may have setup with SA access rights) and then those accounts can get into the SA.

There's some cases where the install account isn't properly added as a subscriber with admin rights on the fly as it should be and folks need to use GrantUnityAccess to gain inital access to the SA. This isn't the normal mechanism for doing this, however.


Jeff Lindborg
Unity Product Architect/Answer Monkey
Cisco Systems
lindborg@cisco.com
http://www.AnswerMonkey.net (new page for Unity support tools and scripts)

Anonymous
N/A

Re: Lost access permissions

Any steps i can take to troubleshoot why the install account didn't get the necessary access?

Robbie Allen

Cisco Employee

Re: Lost access permissions

Okay I have followed this link and got the grantunityaccess util.. ran it and I still get no access...Help please

Amy Jones
Senior Systems Analyst
AAC Associates
703-918-6394

Anonymous
N/A

Re: Lost access permissions

Make sure you're granting rights to an account that exists as a subscriber... this is the most common error I get. The Administrator account you installed Unity with may not have been automatically created as a subscriber, especially if this was an upgrade or there had been a previous installation of Unity or you've used that same account to do another Unity install elsewhere in the directory etc... several scenarios can lead to this. As such if you're running GrantUnityAccess and giving installer permissions for the Administrator account, it'll report success (since it's just twiddling with the SID history on the account, not messing with Unity's SQL tables) and you still can't get in.

another tact is to use GrantUnityAccess on an account you know is a subscriber (you can check DOHPropTest to pick one for sure) and then log in with that account. You can set IE up to prompt for login/PW and do it that way or whatever... I've done this on a few sites when in a pickle.

GrantUnityAccess definitely works every time if you're tickling an account setup as a subscriber.


Jeff Lindborg
Unity Product Architect/Answer Monkey
Cisco Systems
lindborg@cisco.com
http://www.AnswerMonkey.net (new page for Unity support tools and scripts)

Cisco Employee

Re: Lost access permissions

that makes sense...the account I used to install unity is not a subscriber..so i will use a definite subscriber. I put the grantunityacces util in the commserver directory...
I run it from a cmd prompt in that directory...

grantunityaccess -u domain\(suscriber I want to grant access to) installer -f.....right.. and then log on to the machine as this user or just make ie prompt for password...

Amy Jones
Senior Systems Analyst
AAC Associates
703-918-6394

Cisco Employee

Re: Lost access permissions

Hey one thing jeff...if i cant get the grantunityaccess to work if I upgrade to 3.1 will that help at all?

Amy Jones
Senior Systems Analyst
AAC Associates
703-918-6394

Anonymous
N/A

Re: Lost access permissions

All versions of 3.x should work the same here... an upgrade isn't going to help since this isn't really a bug to be fixed.


Jeff Lindborg
Unity Product Architect/Answer Monkey
Cisco Systems
lindborg@cisco.com
http://www.AnswerMonkey.net (new page for Unity support tools and scripts)

Cisco Employee

Re: Lost access permissions

Got it...thanks

Amy Jones
Senior Systems Analyst
AAC Associates
703-918-6394

New Member

Re: Lost access permissions

How can i get this File GrantUnityAccess.exe . The Whole 3.0(2) CD is not available for download. We are locked out, please help.

Anonymous
N/A

Re: Lost access permissions

The tool will only work on 3.0(2) and later (it required some stored procedures in SQL to work properly). If you're running 3.0(2) or later, this tool is available in the \commserver root directory itself (i.e. where you installed Unity).


Jeff Lindborg
Unity Product Architect/Answer Monkey
Cisco Systems
lindborg@cisco.com
http://www.AnswerMonkey.net (new page for Unity support tools and scripts)

Gold

Re: Lost access permissions

As for the 3.0 CD's, they are still on CCO. You need to click the 'Download Full CD Images of 3.0.2 Software' link at the top of the page and agree to the notice about upgrading with these CD's.

Keith

Keith Chambers
Unity Technical Lead
Unified Voice Team, San Jose
Cisco Systems
kechambe@cisco.com

145
Views
0
Helpful
16
Replies
CreatePlease to create content