Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Minimum Permission Required to Operate Unity

I work in a very restricted AD environmnet where getting permissions to do things such as integrate Unity is very difficult. I am trying to determine the absolute minimum permissions required to run Unity 4.0(2) with a Exchange 2000 environment and/or an Exchange 2003 environment as soon as that is supported (Side question is when will it be supported).

Thanks,

Tim

1 ACCEPTED SOLUTION

Accepted Solutions
Gold

Re: Minimum Permission Required to Operate Unity

Exchange 2003 is supported with the 4.0(3), which has been out for a while now.

The Permissions Wizard sets the absolute minimum permissions required for Unity. The permissions that it sets are documented here:

http://www.ciscounitytools.com/HelpFiles/PW403+/PWHelpPermissionsSet.htm

In addition, if users will be created from Unity Exchange Full Admin rights will need to be delegated to the Directory Monitor accounts. If users will only be imported from AD when only Exchange View Only rights are required. These aren't noted in the above URL because the permissions wizard does not set them.

Just as a general note to all – Cisco will not support installation that deviate from these permissions. We understand what they are probably a 100 different ways to made Unity work but supporting each custom strategy isn’t possible. Great effort has been made to define a highly secure and supportable permissions model, which isolates Unity from unannounced permissions changes such as those introduced with Exchange 2003 ForestPrep.

Hope this helps...

Keith

2 REPLIES
Cisco Employee

Re: Minimum Permission Required to Operate Unity

First, Exchange 2003 is supported with Unity 4.0(3) that is currently shipping.

Second, the help files for the Permissions Wizard (as well as the install guides for Unity) list out the permissions granted to the accounts necessary to run Unity (specifically the directory facing account and the messaging facing account). You can find the latest version of Permissions Wizard that ships with 4.0(3) on its home page here:

http://www.ciscounitytools.com/App_PW_403.htm

TAC requires that you run the permissions wizard (which is required by setup) to be supported - as such the rights granted by that tool are the minimum set supported.

Gold

Re: Minimum Permission Required to Operate Unity

Exchange 2003 is supported with the 4.0(3), which has been out for a while now.

The Permissions Wizard sets the absolute minimum permissions required for Unity. The permissions that it sets are documented here:

http://www.ciscounitytools.com/HelpFiles/PW403+/PWHelpPermissionsSet.htm

In addition, if users will be created from Unity Exchange Full Admin rights will need to be delegated to the Directory Monitor accounts. If users will only be imported from AD when only Exchange View Only rights are required. These aren't noted in the above URL because the permissions wizard does not set them.

Just as a general note to all – Cisco will not support installation that deviate from these permissions. We understand what they are probably a 100 different ways to made Unity work but supporting each custom strategy isn’t possible. Great effort has been made to define a highly secure and supportable permissions model, which isolates Unity from unannounced permissions changes such as those introduced with Exchange 2003 ForestPrep.

Hope this helps...

Keith

107
Views
0
Helpful
2
Replies