Minimum Permission Required to Operate Unity

[timforehand]

I work in a very restricted AD environmnet where getting permissions to do things such as integrate Unity is very difficult. I am trying to determine the absolute minimum permissions required to run Unity 4.0(2) with a Exchange 2000 environment and/or an Exchange 2003 environment as soon as that is supported (Side question is when will it be supported).

Thanks,

Tim

[lindborg]

First, Exchange 2003 is supported with Unity 4.0(3) that is currently shipping.

Second, the help files for the Permissions Wizard (as well as the install guides for Unity) list out the permissions granted to the accounts necessary to run Unity (specifically the directory facing account and the messaging facing account). You can find the latest version of Permissions Wizard that ships with 4.0(3) on its home page here:

http://www.ciscounitytools.com/App_PW_403.htm

TAC requires that you run the permissions wizard (which is required by setup) to be supported - as such the rights granted by that tool are the minimum set supported.

[kechambe · Accepted solution]

Exchange 2003 is supported with the 4.0(3), which has been out for a while now.

The Permissions Wizard sets the absolute minimum permissions required for Unity. The permissions that it sets are documented here:

http://www.ciscounitytools.com/HelpFiles/PW403+/PWHelpPermissionsSet.htm

In addition, if users will be created from Unity Exchange Full Admin rights will need to be delegated to the Directory Monitor accounts. If users will only be imported from AD when only Exchange View Only rights are required. These aren't noted in the above URL because the permissions wizard does not set them.

Just as a general note to all – Cisco will not support installation that deviate from these permissions. We understand what they are probably a 100 different ways to made Unity work but supporting each custom strategy isn’t possible. Great effort has been made to define a highly secure and supportable permissions model, which isolates Unity from unannounced permissions changes such as those introduced with Exchange 2003 ForestPrep.

Hope this helps...

Keith