Repost to capture the key takeways of the post in this thread.
Reference the CLI documentation here:
http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/cucos/6_1_1/cucos/iptpappa.html
* The ui_administrator_name and password is used to log into the CUCM administration web page. In order to change the CCMAdministrator name or password, use the following commands from the CLI:
utils reset_ui_administrator_password
utils reset_ui_administrator_name
The output of the utils reset_ui_administrator_name command appears as follows (in this case the name is being set to ccmadmin):
admin: utils reset_ui_administrator_name
New administrator user name:
Administrator user name has been successfully updated to ccmadmin
-------------------- utils reset_ui_administrator_name --------------------
Reset user interface administrator user name
admin:
Note that there can only be one CCMAdministrator account. Also note that the CCMAdministrator name is not case sensitive. So in the example above, ccmadmin and CCMAdmin are the same and either could be used to log into the CUCM administration web page.
* The OS administrator username and password is used to log into the CLI, and also to log into the OS administration web page.
* If you would like to change the OS administrator password, which is the password used to log into the CLI as well as the OS administration web page, you can use the CLI commands: 'set password admin' command.
* If you would like to create additional OS admin accounts use the 'set account' CLI command. For example, to create a new account called 'newadmin, enter 'set account newadmin'. The output should appear as follows:
admin:set account newadmin
Privilege Levels are:
Ordinary - Level 0
Advanced - Level 1
Please enter the privilege level :1
Please enter the password :*********
re-enter to confirm :*********
Account successfully created
* If you would like to delete an OS admin account that was created using the 'set account' command, use the 'delete admin' command. For example, to delete the account called 'newadmin', one would execute the command 'delete account newadmin'.
Notice that while creating the new OS admin account, one is prompted to specify a privilege level associated with the account. For every command available on the IPC Platform CLI, there is a corresponding privilege level. This is the privilege level at which each particular command is executed. An OS admin account with the privilege level “n†can execute all commands at level N, N-1, N-2 … 0. Any new admin accounts created can only have privilege levels of 0 and 1. They can therefore only see and execute commands at those levels. The original admin account has a privilege level of 4 which is hard coded and cannot be changed.
The two CLI commands that require a privilege level higher than 1 are the 'show accounts' and 'delete accounts' commands, which have a privilege level of 4. These commands can therefore only be executed by the original OS admin account that was created at install. Only the original OS admin account can create or delete additional OS admin accounts.
* If you have lost the OS administrator password and cannot access the system via the CLI, you can use the procedure described here to recover the OS administrator password: http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/cucos/6_1_1/cucos/iptpch2.html#wp1040303
Hope this helps:
Regards,
Michael.
