Setting Exchange Permissions

Permissions Wizard grants a few Exchange permissions automatically. For more information, see Permissions Set By the Cisco Unity Permissions Wizard.

However, you need to delegate control manually to two Active Directory accounts, as shown in the following table:

You can delegate control either at the Exchange organization level or at the administrative group level. However, for ease of maintenance, we encourage you to delegate control at the organization level.

If you want to use Digital Networking, if you have multiple Cisco Unity servers, and if you want to delegate control at the administrative group level, then for all administrative groups in which Cisco Unity subscriber mailboxes will be homed, you must:

• Delegate Exchange Administrator control to the installation account for every Cisco Unity server.
• Delegate Exchange Administrator or Exchange View Only Administrator control to the directory service account for every Cisco Unity server.

Otherwise, Digital Networking is not supported.

Using Cisco Unity Bridge Networking, AMIS Networking, or VPIM Networking is supported only when you delegate control to the installation and directory services accounts at the organization level.

To Delegate Control to the Installation and Directory Services Accounts

1. If you are delegating control at the Exchange organization level, log on to the Cisco Unity server by using an account that is an Exchange Full Administrator.
   
   If you are delegating control at the Exchange administrative group level, log on to the Cisco Unity server by using an account that has the permissions that are required to delegate control to accounts for the desired administrative group.
   
   If you are setting up failover, log on to the primary server.
2. On the Cisco Unity server, on the Windows Start menu, click Programs > Microsoft Exchange > System Manager.
3. In the left pane of the Exchange System Manager MMC, right-click either the organization name at the top of the tree control or the name of an administrative group in which Cisco Unity subscriber mailboxes will be homed, and click Delegate Control.
4. In the Welcome to the Exchange Administration Delegation Wizard, click Next.
5. In the Users or Groups dialog box, click Add.
6. In the Delegate Control dialog box, click Browse.
7. In the Select Users, Computers, or Groups dialog box, in the Look In list, click the name of the domain in which the installation account was created.
8. In the list of users, computers, and groups, double-click the name of the installation account.
   
   The Delegate Control dialog box reappears. The account you selected appears in the Group (Recommended) or User box.
9. In the Role list, click Exchange Administrator.
10. Click OK to close the Delegate Control dialog box.
11. In the left pane of the Exchange System Manager MMC, right-click either the organization name at the top of the tree control or the name of the same administrative group that you chose in Step 3, and click Delegate Control.
12. In the Welcome to the Exchange Administration Delegation Wizard, click Next.
13. In the Users or Groups dialog box, click Add.
14. In the Delegate Control dialog box, click Browse.
15. In the Select Users, Computers, or Groups dialog box, in the Look In list, click the name of the domain in which the directory services account was created.
16. In the list of users, computers, and groups, double-click the name of the directory services account.
    
    The Delegate Control dialog box reappears. The account you selected appears in the Group (Recommended) or User box.
17. In the Role list, click the applicable option:
    
    

    Exchange Administrator	If you want to create Cisco Unity subscribers by using the Cisco Unity Administrator.
    Exchange View Only Administrator	If you do not want to create Cisco Unity subscribers by using the Cisco Unity Administrator (meaning that you will create Cisco Unity subscribers only by importing accounts from Active Directory).

18. Click OK to close the Delegate Control dialog box.
19. If you are delegating control at the administrative group level, repeat Step 3 through Step 18 for each administrative group in which Cisco Unity subscriber mailboxes will be homed.
20. Click Next.
21. Click Finish.
22. Close the Exchange System Manager MMC.

Revision History

1.0.0, Initial version.

1.1.0, Updated for Cisco Unity 4.0(3)

1.2.0, Updated for Cisco Unity 4.1(1)

1.3.0, Updated for Cisco Unity 4.2(1)

© 2005, 2006 Cisco Systems, Inc. -- Company Confidential