Unity UM AD Objects

[jcarr]

Unity creates several AD objects when it is installed: Unity_<servername> and UnityXXXXXX (where XXXXXX are 6 hex digits). What is the purpose of these objects? Is it possible to rename them (they don't match our AD object naming standards)? How are the passwords set & can they be changed? Is there a CCO link that explains these (and any other AD objects I may have missed)? Thanks.

[kechambe]

The Unity_ account is use by Unity to logon to Exchange and it can't be deleted. The UnityXXXXXX is the location object. It is used to represent the Unity server in the directory for Digital Networking and it too can't be deleted even if you aren't using any of the features of Digital Networking.

Only the Unity_ account gets a password and it can't be changed if you like. I can't explain exactly how the password is created but I can tell you it is very log, totally random, uses obscure symbols and is highly secure. If you want you can disable the account as well since it isn't used to logon with.

As far as renaming the objects -- that isn't something we have tested and thus wouldn't support it. It's possible that it might be ok but I wouldn't bet the farm on it.

Thanks,

Keith

[jcarr]

Thanks. Just to clarify...

"Only the Unity_ account gets a password and it can't be changed if you like." This acct password CAN or CAN NOT be changed?

[kechambe]

Oops! It CAN be change. Sorry.

[jcarr]

OK. IF we were to change the Unity_ password, how would we tell Unity the new PW? Or does one of the service accts use send as or something else?

And, can we set a PW on Unity?

We have a policy requiring ALl accounts to have PWs and service acct PWs have to be changed periodically.

[kechambe]

Unity doesn't know the password of that account so you don't need to do anything other than change it. We use our rights on the store to get access to it. Remember you can disable it as well.

The location object isn't a user account. It has no security context and thus does not have a password.

Thanks,

Keith