Applies to: Exchange Server 2007 SP3, Exchange Server 2007 SP2, Exchange Server 2007 SP1, Exchange Server 2007
Topic Last Modified: 2007-02-23

Microsoft Exchange Server 2007 Unified Messaging requires that several Active Directory directory service objects be created and then configured for Unified Messaging (UM) to function correctly. After the Active Directory UM objects are created, you can manage them by using the Exchange Management Console or the Exchange Management Shell. 

Unified Messaging Configuration Data Management

Five Active Directory UM objects are required to implement Unified Messaging:

  • UM dial plans

  • UM mailbox policies

  • UM IP gateways

  • UM hunt groups

  • UM auto attendants

For more information about the UM objects, see the following topics:

For more information about how to create and manage UM objects, see the following topics:

How to Manage UM IP Gateways and Hunt Group Objects

In this section is an example that uses the Add-ADPermission cmdlet to add the required permissions to manage UM IP gateways and UM hunt groups. After you complete the following procedure, the UM Configuration Administrators security group can manage UM IP gateways and hunt groups in the contoso.com forest that contains the ContosoOrg Exchange organization.

Note:
The UM Configuration Administrators security group requires the Exchange View Only Administrator role.
To apply permissions by using the Exchange Management Shell
  1. Log on to a system within the forest that has the Windows Support Tools installed and use an account that is delegated the necessary permissions, such as Membership in the Domain Administrators group.

  2. Open the Exchange Management Shell and type the following commands for each container where you want to grant access.

    Note:
    Replace the domain name, Exchange organization, and accounts by using information for your organization.
    Copy Code
    Add-ADPermission -Identity "CN=UM IPGateway Container,CN=ContosoOrg,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=contoso,DC=com" -User "contoso\UM Configuration Administrators" -AccessRights GenericAll
    
  3. If the command runs successfully, it will output the access control entries that were added to the object.

How to Manage Dial plan Objects

In this section is an example that uses the Add-ADPermission cmdlet to add the required permissions to manage UM dial plans. After you complete the following procedure, the UM Configuration Administrators security group can manage UM dial plans in the contoso.com forest that contains the ContosoOrg Exchange organization.

To apply permissions by using the Exchange Management Shell
  1. Log on to a system within the forest that has the Windows Support Tools installed and use an account that is delegated the necessary permissions, such as Membership in the Domain Administrators group.

  2. Open the Exchange Management Shell and type the following commands for each container where you want to grant access.

    Note:
    Replace the domain name, Exchange organization, and accounts by using information for your organization.
    Copy Code
    Add-ADPermission -Identity "CN=UM DialPlan Container,CN= ContosoOrg,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=contoso,DC=com" -User "contoso\UM Configuration Administrators" -AccessRights GenericAll
    
  3. If the command runs successfully, it will output the access control entries that were added to the object.

How to Manage UM Mailbox Policies

In this section is an example that uses the Add-ADPermission cmdlet to add the required permissions to manage UM mailbox policies. After you complete the following procedure, the UM Configuration Administrators security group can manage UM mailbox policies in the contoso.com forest that contains the ContosoOrg Exchange organization.

To apply permissions by using the Exchange Management Shell
  1. Log on to a system within the forest that has the Windows Support Tools installed and use an account that is delegated the necessary permissions, such as Membership in the Domain Administrators group.

  2. Open the Exchange Management Shell and type the following commands for each container where you want to grant access.

    Note:
    Replace the domain name, Exchange organization, and accounts by using information for your organization.
    Copy Code
    Add-ADPermission -Identity "CN=UM Mailbox Policies,CN=ContosoOrg,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=contoso,DC=com" -User "contoso\UM Configuration Administrators" -AccessRights GenericAll
    
  3. If the command runs successfully, it will output the access control entries that were added to the object.

How to Manage Auto Attendants

In this section is an example that uses the Add-ADPermission cmdlet to add the required permissions to manage UM auto attendants. After you complete the following procedure, the UM Configuration Administrators security group can manage UM auto attendants in the contoso.com forest that contains the ContosoOrg Exchange organization.

To apply permissions by using the Exchange Management Shell
  1. Log on to a system within the forest that has the Windows Support Tools installed and use an account that is delegated the necessary permissions, such as Membership in the Domain Administrators group.

  2. Open the Exchange Management Shell and type the following commands for each container where you want to grant access.

    Note:
    Replace the domain name, Exchange organization, and accounts by using information for your organization.
    Copy Code
    Add-ADPermission -Identity "CN=UM AutoAttendant Container,CN=ContosoOrg,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=contoso,DC=com" -User "contoso\UM Configuration Administrators" -AccessRights GenericAll
    
  3. If the command runs successfully, it will output the access control entries that were added to the object.

For More Information