Permissions Wizard not adding message store rights
I'm adding a new message store to a Unity 4.0.5 system. Currently the system uses an off box Win2k/Exch2k server. I'm adding a Win2003/Exch2003 server and will be moving all the mailboxes. I've installed the latest permissions wizard from ciscounitytools and when I run it, it completes without error but when I look at the security tab on the new message store, I can see it is not adding the msgstoresvc account's rights (send as, receive, etc)... I've run the wizard multiple times with the same results. The detailed results log says its adding these rights to the new message store successfully but it isn't.
If I add the rights manually everything works but I'm a little concerned that something might be amiss in my environment.
Re: Permissions Wizard not adding message store rights
sounds like the account you are using to run the permissions does not have enough rights to grant the permissions.
The other problem could be is AD replication. If your domain is large or a large number accounts, it could take a little time for the accounts to be updated. Typically, it's 15 minutes for replication to take effect. (small domains too!)
I would run the permissions, let it sit, then refresh the OU with the accounts and check the permissions.
You also could have some kind of Domain Security policy blocking this. But it's hard to say without knowing your enviroment.
# Log on to the Cisco Unity server by using an account that:
* Is a member of the Domain Admins group in the domain in which the Cisco Unity server is being installed, or that has permissions equivalent to the default permissions for the Domain Admins group.
* Is either an Exchange Full Administrator or a member of the Domain Admins group in the domain that contains all of the domains from which you want to import Cisco Unity subscribers.
Caution! If you try to run Permissions Wizard using an account that has less than the default permissions for a Domain Admin, Permissions Wizard may not be able to set all of the permissions required by the installation account and the services accounts. If Permissions Wizard cannot set all of the required permissions, either the Cisco Unity installation will fail, or Cisco Unity will not run properly after it has been installed.
also make sure you have checked the 'Allow Inheritable Permissions from Parent to Propagate to This Object' check box on the Security tab for the user
Are you getting this error “Installer User Interface Mode Not Supported. The installer cannot run in this UI mode. To specify the interface mode, use the -i command-line option, followed by the UI mode identifier. The value UI mode identifiers...
The below trick might come handy when you have to add a new node to a cluster but you don't have or is unsure of the security password for the publisher. This procedure has been around for ages.
1) Login into the CLI of the Publisher.