Unity and AD Problems

[GovTech2004]

HELP!!!

We currently have CCM 3.3.3 and Unity 4.0.3 installed and running.

Unity has Exchange 2000, and AD on the machine. It is the sole machine on the Active directory forrest. It is set up as Unity.local domain and is running fine with no issues.

However,
We are finally migrating the entire organization to Active Directory. There is already an AD structure in place and we can not set up a trust between the Unity AD and the organization AD. We need to set up a 'swing' server and import all of the users information into it so we can rebuild the current Unity system and have it connected to the new AD structure.

Normally this wouldn't be a problem, but here's where it get's tricky. Our installation is an OU, not a tree and we only have OU admin access, not enterprise or domain access. And as far as we are aware, we will NOT get anything above OU admin access. Cisco is saying that we can not install the Unity server into AD without Domain or Enterprise admin access.

Also, we are using Exchange 5.5 as our primary mail server (we were originally going to be upgrading to exchange 2000 but that is on hold for now. That's why we went with Exchange 2000 on the Unity box). Cisco is saying that we would not be able to import the user data into Exchange 5.5 from Exchange 2000.

I'm inclined to believe them about the exchange portion of it and if worse comes to worse, we will re-create the users and give them all their voice mail that they currently have as media files in their mail profiles as a .pst file.

BUT, what I'm skeptical about is this. Is there a way to install Unity into the current AD structure without having anything higher than OU admin permissions? And if so, does anyone know how to go about it?

I'm sure that someone out there somewhere has run into this problem, but I haven't heard anything. I've also seen on the Cisco forums that someone else has the same problem, but no one has figured out a workaround or 'fix'.

Can any one PLEASE PLEASE help? I would rather not have to disband the VOIP project all together because of organizational problems. And I don't think that my solution of leaving the system as it is would be given even a second thought.

ANY help that anyone could be would be greatly appreciated.

Thanks.

_______________________________
Norm White
Network Administrator / Network Security Specialist
********************************
The probability of someone watching you is proportional to the stupidity of your action.

 

[caryfields]

Unity will need rights to modify/extend the AD schema, which will need rights to the entire forest. I'd track down the guy that has those rights, and let him stand there with you when you install Unity.

 

[GovTech2004]

That's just the problem.

That person is in Arizona (I think), and after the permissions wizard runs, they're not going to let us keep the permissions.

We might have found a way around this whole issue though, I'll post the fix if/when we find it.

Thanks anyhow.

_______________________________
Norm White
Network Administrator / Network Security Specialist
********************************
The probability of someone watching you is proportional to the stupidity of your action.