active directory sync

[Maheshwar Tayal]

As per documentation for CUCM and AD Syncronization,

All existing Cisco Unified CM end-user accounts are deactivated.

---

Will this be happening on every sync cycle or only first time.

Can we define Multiple synchronization cycles in a day say 4 at interval of 6 hours.

[Ayodeji Okanlawon]

The very first time you enable AD sync, all end users will be deactivated. This happens only once you enabled AD sync. Once AD sync is enabled you will not be able to add end users in CUCM, rather all users will be imported from AD.

You can define your syncronisation interval under the LDAP directories

Please rate all useful posts

"'Nature is too thin a screen, the glory of the omnipresent God bursts through it everywhere"-Ralph Waldo Emerson

[Jaime Valencia]

Unless you're running CUCM 9, on which you can have AD and still create users.

HTH

java

if this helps, please rate

www.cisco.com/go/pdihelpdesk

[Ayodeji Okanlawon]

Jamie, (+5),

I dint know this is now available on CUCM 9.0. Thats nice to know

Please rate all useful posts

"'Nature is too thin a screen, the glory of the omnipresent God bursts through it everywhere"-Ralph Waldo Emerson

[Maheshwar Tayal]

Hi

Do we have CUCM 9.0 document which can provide some details, what is supported as answer is not very clear

Thanks

[Ayodeji Okanlawon]

You can find this information here. before CUCM 9.0 once you have AD sync enabled, you cant add users locally. However in CUCM 9.0, you can add users locally and also have AD sync. That means that when AD sync is enabled, CUCM will not mark your users inactive

LDAP and Manual User Support

Prior to CUCM 9.0

 Enabling LDAP sync would prohibit adding local users

 End user to be used by CUCM must be defined on AD and synched

 Extra users could trigger extra CAL’s on the MS AD

With CUCM 9.0

 Administrator can have both LDAP sync users and locally defined users

 Ability to modify local users and roles assigned to LDAP users

 Deleting LDAP synch will mark users synced for deletion (garbage collection)

 Administrator can convert an LDAP user to a local user

 User status field is used to differentiate between the Local user and LDAP Synchronized users

https://learningnetwork.cisco.com/servlet/JiveServlet/previewBody/15753-102-1-60993/CUCM%209%20New%20Features.pdf

Please rate all useful posts

"'Nature is too thin a screen, the glory of the omnipresent God bursts through it everywhere"-Ralph Waldo Emerson