Guest

Cisco Unity

Unity 7.x: Unable to Import a Subscriber into Unity

Cisco - Unity 7.x: Unable to Import a Subscriber into Unity

Document ID: 111511

Updated: Jul 13, 2010

   Print

Introduction

This document describes how to troubleshoot the issues which occur while trying to import a subscriber into Cisco Unity.

Prerequisites

Requirements

There are no specific requirements for this document.

Components Used

The information in this document is based on the Cisco Unity version 7.0(2.0) integrated with Active Directory (AD).

The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, make sure that you understand the potential impact of any command.

Conventions

Refer to Cisco Technical Tips Conventions for more information on document conventions.

Error: The Cisco Unity service that monitors Active Directory (AvDSAD) failed to modify object.

Problem

When you attempt to import a user into Cisco Unity, you receive this error message:

unity-import-user-01.gif

The Event viewer on Cisco Unity Server generates this event:

Event Type:       Error
Event Source:    CiscoUnity_DSAD
Event Category: Error 
Event ID:           1046
----
Description:
The Cisco Unity service that monitors Active Directory (AvDSAD) failed to modify object.

Type: AVOBJECTTYPE_MAILUSER
-----

Possible causes include: 
1) Network connectivity to the Domain Controller.
2) Insufficient rights for The Cisco Unity service that monitors Active Directory 
(AvDSAD) account. Ensure that The Cisco Unity service that monitors Active Directory 
(AvDSAD) can contact the Domain Controller and has sufficient rights to modify 
objects. If the problem persists, enable all the micro traces for The Cisco Unity 
service that monitors Active Directory (AvDSAD) in the Unity Diagnostic Tool. Report 
the problem to Cisco TAC and include the diagnostic log.

Solution

Complete these steps in order to resolve the error:

  1. Run the Permissions Wizard on the organizational unit (OU) from which the subscribers are imported.

    When you run the Permissions Wizard for the Choose Active Directory Containers for Import option, make sure that the OU from which you are importing users is listed there. If not, click Add, search for the OU, and add it.

    unity-import-user-02.gif

    Note: The Permissions Wizard can be found in the Tools Depot. In order to go to the Cisco Unity Tools Depot, double-click the Tools Depot icon on the Cisco Unity server desktop. Download the latest version from Cisco Unity Tools.

  2. Make sure the user account in the Active Directory has inherited permissions from the OU.

    1. Choose Active Directory Users and Computers.

    2. Choose View > Advanced Features in order to open the Security window in the account properties of the user.

      unity-import-user-03.gif

    3. Navigate to the OU, and double-click the user account that generated the error when you tried to import the subscriber to Cisco Unity. The Properties page for that user appears.

    4. Click the Security tab.

    5. Click Advanced, and check the Allow inheritable permissions from parent to propagate to this object and all child objects check box.

      unity-import-user-04.gif

      Note: Make sure that Cisco Unity main accounts have the Allow inheritable... option checked (Unityinstall, UnitydirSvc, UnityMsgStoreSvc).

  3. Add Unityadmin (UnityInstall) to the Domain Admins group.

  4. Ensure that the services AvDSAD and AvDSGlobalCatalog services are running as the UnityDirSvc account.

    Note: The permissions issue occurs when these services run under UnityInstall.

  5. Match the missing permissions by comparing the AD account properties under the Security tab for a subscriber who was already imported with an AD user account that failed to import.

Note: If you are unable to import any users once you complete these steps, go to ciscounitytools.com , download the latest version of the Permission Wizard , and run it.

Error: An unrecognized error 0x8004480E has occurred

Problem

When you attempt to import a user into Cisco Unity, you receive this error message:

An unrecognized error 0x8004480E has occurred: E_AV_DC_DOMAIN_NEEDS_RESYNCH The new subscriber was not successfully added.

Solution

Complete these steps in order to resolve the issue:

  1. Go to Start > Run, and type regedit in order to open the Registry Editor.

  2. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Active Voice\Commserver Setup\1.0\Private, and complete these steps:

    1. Delete the MailStore Type key.

    2. Close the Registry Editor

  3. Go to Start > Programs > Microsoft SQL Server > Enterprise Manager, and complete these steps:

    1. Expand Microsoft SQL Servers > SQL Server Group > <server_name> > Databases > UnityDb > Tables.

    2. Right-click, and choose Subscriber > Open Table > Return all rows.

    3. Click the SQL graphic at the top, and type:

      Select * 
      FROM Configuration
      Where (NodeName = 'defaultdomain')

      Two rows should be returned.

    4. In Enterprise Manager, delete nodevalue (that is, <domain.com> ) from the first row.

  4. Run again the Message Store Configuration Wizard (MSCW).

Error: An unrecognized error 0x8007200A has occurred: The specified directory service attribute or value does not exist.\x0D\x0A.The new subscriber was not successfully added.

Problem

This error message appears when user trying to add user into Unity.

An unrecognized error 0x8007200A has occurred: The specified directory service attribute or value does not exist.\x0D\x0A. The new subscriber was not successfully added.

Solution

Complete these steps in order to extend the Active Directory schema for Cisco Unity:

  1. Confirm that all domain controllers are online. (The Active Directory schema extensions replicate only when all domain controllers are online.)

  2. On the computer that has the schema master role (typically the first DC/GC in the forest), log in to Windows as a user who is a member of the Schema Admins group.

  3. On Cisco Unity DVD 1, browse to the ADSchemaSetup directory, and double-click ADSchemaSetup.exe.

  4. In the Active Directory Schema Setup dialog box, check the Exchange Directory Monitor check box.

  5. If you plan to use VPIM Networking or Cisco Unity Bridge Networking, check the applicable check box(es).

  6. Click OK.

  7. When the schema extension has finished, Ldif.log and Ldif.err files are saved to the desktop. View the contents of the files to confirm that the extension completed successfully.

Error: [CONFLICT] Alias of subscriber in the global directory.

Problem

After migrating to a new Cisco Unity server, importing subscribers into Cisco Unity fails with the error message:

[CONFLICT] The alias of a user in the global directory marked as a unity subscriber on another server.

Solution

This issue can happen when the subscriber properties are not properly removed from the Active Directory (AD), even if the subscriber is deleted. Delete the subscriber from AD using the Remove Subscriber Properties Tool as described in the document Remove Unity Subscribers from Active Directory. Also, make sure that the Recipient Update Service(RUS) on the exchange server is running properly.

If the issue persists even after removing the subscriber, check the Global Subscriber Manager to see if it still shows all the subscribers under the old Cisco Unity server. If so, use this command to remove global subscribers with old locationid.

SELECT LocationObjectId FROM Subscriber WHERE (Alias LIKE '%Unity_%')
SELECT * FROM GlobalSubscriber WHERE (LocationObjectId not LIKE '***new server's
locationid***')
DELETE FROM GlobalSubscriber WHERE (LocationObjectId LIKE
'***old server's locationid***')

Error: An unrecognized error 0x80070005 has occurred: E_ACCESSDENIED'

Problem

Importing a user to Cisco Unity fails with this error message:

An unrecognized error 0x80070005 has occurred: E_ACCESSDENIED.

Solution

Complete these steps in order to resolve the issue:

  1. Make sure the account in the AD has inherited permissions from the OU, and then complete these steps:

    1. From the desktop of the Cisco Unity server, click Tools Depot, and then run the Permissions Wizard on the OU from which users are to be imported.

    2. Go to Active Directory Users and Computers.

    3. Choose View > Advanced Features in order to open the Security window in the account properties.

    4. Go to the OU, and double-click the user account in order to bring up the Properties page.

    5. Click the Security tab.

    6. Make sure that the Allow inheritable permissions from parent to propagate to this object check box is checked.

  2. Click the Properties tab of the affected user in the AD.

  3. Click the Security tab, and verify that the Allow inheritable permissions from parent to propagate to this object check box is checked for the user as well.

  4. Go to Start > Settings > Control Panel > Administrative Tools > Services, and note to which accounts the Av* Services have LogOnAs.

    The AvDSAD and AvDSGlobalCatalog services must be running as accounts that are in the Domain Admin group, as well as have the other permissions shown in this document. The AvMsgStoreSvc service must not be in the Domain Admin group, and must be an Exchange Full Administrator.

  5. Restart the AvDSAD and AvDSGlobalCatalog services.

Related Information

Updated: Jul 13, 2010
Document ID: 111511