Hi -
The permissions to allow Unity to create AD user objects, groups, and distribution lists are performed by running the Unity permissions wizard as well as configured when you install Unity (for example you specify whether you want to create user objects or just import subscribers, which is how we do it). The default password for the AD user's Windows account is listed in the Default Subscriber's template under the Passwords section, field Windows Password Settings. For security reasons, it should be changed to follow your organization's strong password policies. You can modify this by creating a new template, based on the Default Subscriber, with a new Windows Password Settings which then gets applied to new subscribers as they are created or imported. Unity doesn't have an LDAP database, it uses Active Directory's database. Unity's SQL database is synchronized with the information in AD. CallManager either uses its own directory for phone and user information or can use AD. We have elected NOT to integrate CCM with AD. This is a personal choice for us - we did not want either CCM or Unity creating user objects. That may be a different consideration for a voicemail only implementation rather than unified messaging. I cannot address your question about integration of the Cisco and Unity databases.
Best wishes,
Ginger
