Hello Jan,
The PW (Permission Wizard) is found on the Tools Depot> Administration Tools> Permision Wizard. If you right click on it and select properties you will be able to see the version. If you do not have the latest vesion (v. 3.0.0.7) you should start by installing it.
Go to:
http://ciscounitytools.com/SiteList/AllDownloads/alldownloads.html
Under Title search for:
Permissions Wizard 5.0(1)+
Running the Permission Wizard is required with a Domain Admin account, usually the Unity Install account has this included, to verify, go to Start> Run> dsa.msc> Click on Find> Type Unity Install> Click on Member of tab.
Additionaly this utility does not involve any downtime to your environment. At the beginning of the Wizard confirm that the proper accounts are assigned to the services, i.e: Directory Services-> UnityDirSvc, for Message Store-> UnityMsgStore. When yo reach the point to select the Mail Stores make sure that all the proper or desired mailstores are included.
At the end if it fails for 1 item, and it is permissions to delete objects this can be expected.
To fully understand this tool and see screen shots of running the tool go to:
http://ciscounitytools.com/Applications/Unity/PermissionsWizard/Unity50/Help/PWHelp_ENU.htm
The MSCW (Message Store Configuration Wizard) is a tool used to partner and synchronize with your Exchange server and is found in Start>Control Panel> Programs> Add Remove Programs> Doble click on Message Store Configuration Wizard. Running this tool is service impacting, meaning it requires to stop Unity services.
At the end of the Wizard you are prompted for a last account, which is the Directory Service account, make sure you are using the proper one, i can't stress this enough.
It would also be good to ensure that your Unity System is able to communicate accordingly to your Domain Controllers and Global Catalog. You can check this by going to Tools Depot> Administration> DCGC Reconnect> Click on the DC tab hit Force Reconnect do the same in the GC tab (this is again NOT service impacting). After you do that go to Event viewer (eventvwr.msc)
One event will be seen with the Domain Controller:
The Cisco Unity service that monitors Active Directory (AvDSAD) completed a full
synchronization cycle with
Another will be seen with the Global Catalog:
...event global catalog (AvDSGlobalCatalog) completed a full synchronization cycle with ...
If you do not see a complete synchronization there might be issues in your network or to the DC GC's Unity is talking to and therefore not able to retrieve the proper information of the users.
If you run DBWalker does it give you any further insight?
It would be usefull if you could clarify whether this issue is
-for all users: mayor changes on either Unity or Exchange
-a set of users:random or specific to a mailstore
-single user: are there any differences in Exchange between the working users and the non-working one; is it disabled on AD?
Best regards,
David Noel Rojas Peck
Email: davrojas@cisco.com
Mon, Wed, and Fri 12:00 pm to 9:00 pm ET, Tue and Thu 8:00 am to 5:00pm ET
Cisco Worldwide Contact link is below for further reference.
http://www.cisco.com/en/US/support/tsd_cisco_worldwide_contacts.html
