Enterpise manager and integration with Active Directory 1

[whykap]

Is enterprise manager capable or integrating with Active directory? What I am trying to achieve is if a Mitel phone does a directory look up or search to able to see any user that is in Active directory although it might not be a Mitel user.

This is an environment where multiple Mitel systems (sx2000 and 3300 ICP) are connected to enterprise manager. there are also other vendor systems integrated in the mix.

The ultimate goal is a unified directory for any phone user regardless of what type phone they have.

 

[whykap]

OK so a little more research and I found that OPS manager and AD can integrate and it can pull directory data from AD.

My question is has anyone done this and what was the overall experience you had with this?

 

[kwbMitel]

Here is my limited understanded for what it is worth. I have not implemented this solution so take it for what it is worth.

First - My instructor in OPSman told me that OPSman needs admin rights to the schema for AD. I have since heard otherwise from other sources but this item is the scariest.

Second - I do not believe there is any synchronization with the Mitel "looking" for things it does not already know. Updates (ie Name changes) in the Mitel are pushed to AD via LDAP and AD pushes info to the Mitel when users are created and the appropriate check boxes are enabled.

Third - Documentation is extremely scarce on this subject. I've asked, begged, pleaded for more information to increase my understanding of the AD side requirements and I've found absolutely nothing.

As I said at the beginning, take it for what it's worth.



*******************************************************
Occam's Razor - All things being equal, the simplest solution is the right one.

 

[whykap]

kwbMitel,
Thank you for your input. Needing admin rights to the AD would make sense since OPS will be writing to it.

It still sounds like this is a viable solution to what the customer is requesting. It will be painful and they will have to give us access to their AD but if that's what it takes so be it.

Anyone else has input on this is always welcome.

 

[nappyshock]

If your talking about using IDS check the version of Microsoft the customer is running,it's not compatible with server 2008. I found this out the hardway after struggling for a couple of days and then finding some tiny inobscure reference in the poor documentation.

 

[cer2225]

I too would like to see some documentation for implementation. I am using both Mitel sets and Polycom sets. Since each has their won Directory methods, AD integration is the way to go. I already have my Polycoms integrated (Polycom Productivity Suite) but now I need to do the Mitel side. Once thats complete all devices will use AD for their directory.

Any docs would be appreciated.

Thanks

 

[whykap]

That is correct, it is only compatible with MS 2000 and 2003. Not 2008. That was well documented in the engineering guidelines.

 

[slapin]

I have implemented it with a copy of company AD. It actually works fine to me BUT... It is not real-time, at least I couldn't figure this out. You make change in AD and it will be propagated by next scheduled sync job. And what if there is any sort of problems, you fix them in AD and then wait for next sinc. I have a custom script which populates AD with extension numbers, so Windows admins don't need to maintain this information.

 

[gotrojans]

IDS didn't work in our AD environment. We have separate OU's for each city, and below each City OU is a Users OU.

IDS can handle only one OU and sub-OU's. It can't handle separate OU's like our environment unless Mitel's partner upgraded the application.

Ron