Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Unity Install in child domain need to add more


The cutomer has unity 4.0 4 installed connecting to a partner server in a Child domain .us.

We need to add 2 x Unity servers to .EU & .AS child domains.

From what Ive read here we only have to update the AD schema once. What will happen if we decide to install Unity 4.1

in the .eu and .as child doamins?

Is there any schema changes required? Do all unity installations need to be at the same version when integrated into AD.


Re: Unity Install in child domain need to add more

Hi Allan -

There are no additional schema changes required for Unity 4.1. Schema changes are applied at the AD forest level, so all domains in the forest can access that same information. It appears you have three distinct domain trees in your forest (us, eu, and as). Something you may want to consider for ease of Unity server administration is to have a single set of Unity accounts (install, directory service, and message store service) for all of your Unity servers. These would be installed at the forest root (the first domain installed in your forest). A Unity administrator account is created in each domain that hosts a Unity server (this is typically a Domain Admin level account). Regarding the various Unity versions, you can have different Unity versions running in AD; where you want the same version is when specific functionality is required/supported by a minimum Unity level - cross server logon for digital networking was an example). You did not mention the Exchange version you are running, but you can follow the advice mentioned in the link you posted.

Regards, Ginger

New Member

Re: Unity Install in child domain need to add more

Thanks Ginger,

In regards to using one set of accounts.

We didnt do the first installation and hence dont have the passwords and accounts that Unity was setup with in .us. And the client wasnt provided with documentation nor kept this pwd information.

Moving forward the integration is with exchange 2000 partner servers for .eu and .as

So I imagine we would create the below accounts in the child domain?

Installation UnityInstall

Administration UnityAdmin

Account that Cisco Unity directory services log on as (directory services account) UnityDirSvc

Account that Cisco Unity message store services log on as (message store services account) UnityMsgStoreSvc

Then add UnityAdmin account the local Administrators group

From here Unity permissions wizard is run and assign rightss to the exchange 2000 server for the other accounts.

Is this correct?

Thanks Again


Re: Unity Install in child domain need to add more

Hi Allan -

You will need an account that has Domain Admin privileges and is an Exchange Full Admin (using Exchange Delegation Wizard) in order to run the Permissions Wizard. Here is a good link to reference -

We used the install account for this purpose.