Solution 3: Enable Propagation Of The Ad To The Global Catalog; Accessing Permissions For The Ad Object Properties - Nortel 1000 Fundamentals

222 Troubleshooting

Accessing permissions for the AD object properties

Step
1
2
3
4
5
6
7
8
9
10
11
12

Solution 3: Enable propagation of the AD to the Global Catalog

Enable propagation of the Active Directory field to the Global Catalog. Be
sure to specify a Domain Controller LDAP server (port 389) to reduce
the search scope to only one domain. Follow the procedure in
propagation of the Active Directory field to the Global Catalog" (page
Nortel Converged Office Fundamentals — Microsoft Office Communications Server 2007
Copyright © 2005–2008, Nortel Networks
.
Action
Install the Operating System Support Tools on the server (usually
the Tools setup is on the MS Windows 2003 Server setup disk).
Run the ADSIEdit tool (%ProgramFiles%\Support Tools\ad-
siedit.msc).
Navigate to the users object container or the specific user's object.
Right-click the item and open Properties.
Go to the Security tab and click the Advanced button.
Search for the permission entry specific for the msRTCSIP
properties group or RTCPropetySet. If there is a specific
user group that has access rights to that property group,
then the best solution is to add the MCM service account to
this user group. Otherwise, you have to allow MCM Service
account to read the properties msRTCSIP-UserEnabled,
msRTCSIP-PrimaryUserAddress, msRTCSIPOptionFlags,
msRTCSIP-Line, and msRTCSIP-LineServer.
Click Add.
Choose the MCM service account and click OK.
Go to the Properties tab.
Select User objects in the field Apply onto.
In the Permissions list box select the Allow check boxes across the
Read permission of necessary properties and RTCPropetySet.
Click OK.
Nortel Communication Server 1000
NN43001-121 01.03 Standard
Release 5.0 30 April 2008
—End—
"Enabling
223).