Domain Manager- UCCE install

[iptuser55]

We are looking to have UCCE installed at our company by an external supplier but I`m keen to understand the AD implementation part. I understand that UCCE can use a firms existing AD function for permissions  but does it change the structure? Where does the Domain Controller fit in ?

thanks

[Omar Deen]

Are you asking if having Cisco Contact Center change the structure of your Active Directory environment? If so, then no, it does not. It irritates some AD administrators that an OU has to literally be named Cisco_ICM, but that has no impact an on organizations AD environment.

Straight from the Staging Guide: https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cust_contact/contact_center/icm_enterprise/icm_enterprise_11_6_1/Installation/Guide/ucce_b_staging-guide_11_6/ucce_b_staging-guide-for-cisco-unified_chapter_01.html

Unified ICM uses AD to control user access rights to perform setup, configuration, and reporting tasks. AD also grants permissions for different components of the system software to interact; for example, it grants permissions for a Distributor to read the Logger database.

Not to mention the new Single Sign On capabilities that were introduced in 11.5

[iptuser55]

Thanks

So doe the install create a new OU Cisco_ICM ? Where does it sit in a companies structure?

[Omar Deen]

Someone with write access to Active Directory would create the Cisco_ICM OU. I prefer to have it sit on the root of the domain, but it can be a sub OU of another OU. The most important thing is that the OU must be called Cisco_ICM. When you run the domain manager application on the CCE server, it's going to automatically look for the Cisco_ICM OU. This is where you create your instance and facility. The domain user you login and run as for the domain manager application must have write access to the Cisco_ICM OU because the domain manager will create two OUs, one for the instance and one for the facility, and it will also create security groups. 

[iptuser55]

Thanks

So the new OU for Cisco_ICM is created manually and then the Domain Manager app is used to create the instances under the manually created Cisco_ICM???

[Omar Deen · Accepted solution]

---

@iptuser55 wrote:
Thanks

So the new OU for Cisco_ICM is created manually and then the Domain Manager app is used to create the instances under the manually created Cisco_ICM???

---

I deleted my old message...

Let me re-phrase. You CAN use the domain manager tool to create the Cisco root folder of Cisco_ICM, but I'm yet to find a customer that has allowed that to happen. Creating the root OU is different than creating the sub OUs from a permission perspective. I've simply found it to be easier both technically and politically if I simply worked with the AD team and had them create the OU and explain the whole OU structure.

https://supportforums.cisco.com/t5/contact-center/cisco-icm-active-directory-ou/td-p/2445316

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cust_contact/contact_center/icm_enterprise/icm_enterprise_11_6_1/Installation/Guide/ucce_b_staging-guide_11_6/ucce_b_staging-guide-for-cisco-unified_chapter_0111.html

[Claudio Costa]

Hello guys,

After deploy a Cisco PCCE environment with single domain, the end-customer required to deploy a multi-domain scenario. Can I just add a new domain into a deployed domain without any impact or need I do a new deployment?

Thank you so much everyone.

Best Regards,

Cláudio Costa