AD ACL's?

[slc2]

UM 4.04 sr1

We use one account to run Unity and a separate one to install.

The account to run Unity has the following ACL:

SPECIAL ACCESS for organizationalUnit

Create Child

We do not allow accounts or DL to be created from the Unity SA side.

Is the above ACL needed given our account creating policy?

TIA

Sabas

[kechambe]

It sounds like you are using an unsupported permissions model. The only supported model is to use the Permissions Wizard we ship with Unity.

If you were using the Permissions Wizard it would have set the following rights:

Where imported objects are imported from:

Applied onto User objects

· Read properties

· Write properties

· List contents

Applied onto Group objects

· Read properties

· Write properties

· List contents

Applied onto Contact objects

· Read properties

· Write properties

· List contents

This data is available here:

http://www.ciscounitytools.com/HelpFiles/PW403+/PWHelpPermissionsSet_ENU.htm#_Toc40841620

Thanks,

Keith