Unity moving AD accounts to on other directory

[sbeukenkamp]

Hi,

Customer wants to move AD accounts to an other ou. So say all acounts were stored in \allusers they are going to be moved to \testusers.

Using Unity 4.0 running within a Win2003 environment.

Please adviae

[Hin Lee]

Run Permission Wizard on testusers-folder to give Unity service accounts permissions, and move users.

H. M.

[sbeukenkamp]

Hi,

Thx for the quick reply.

Is Unity actually looking in specific folders on the AD server or is it just asking for a accountname in a specific domain not bothering about were the accountname physically sits ?

[sbeukenkamp]

An other question:

Do I need to run the permission wizard before the move or does it not realy matter when (ie after the move)

[kechambe]

Unity does not care which OU the accounts are in. But for Unity to be able to write to the accounts the directory service account needs to have permissions on the users objects and for identified subscriber messaging to work the message store service account needs to have send as rights on the objects. Since it isn't practical to set rights on each object the permissions wizard sets it at a user definable OU. If you chose the domain root as the location to import users from you should be fine assuming you haven’t blocked inheritance further down. If you were more granular on the OU when you might need to rerun the permissions wizard.

Hope this helps...

Keith

[sbeukenkamp]

have to fix this upcoming weekend. Keep you all posted and thanks for the help so far.

Kr

Sijbren