Receiving error: “0×80070005 has occurred: E_ACCESSDENIED” when trying to import users on a new setup of Cisco Unity 7 integrated with Exchange 2007. Further, the following is logged to the Application event log:
Event Type: Error
Event Source: CiscoUnity_DSAD
Event Category: Error
Event ID: 1046
Date: 12/23/2009
Time: 4:21:51 PM
User: N/A
Computer: HOSTNAME
Description:
The Cisco Unity service that monitors Active Directory (AvDSAD) failed to modify object.
Type: AVOBJECTTYPE_MAILUSER
Name:
Reason: ERROR_ACCESS_DENIED: Access is denied.
Domain Controller:
Possible causes include: 1) Network connectivity to the Domain Controller. 2) Insufficient rights for The Cisco Unity service that monitors Active Directory (AvDSAD) account.
Ensure that The Cisco Unity service that monitors Active Directory (AvDSAD) can contact the Domain Controller and has sufficient rights to modify objects. If the problem persists, enable all the micro traces for The Cisco Unity service that monitors Active Directory (AvDSAD) in the Unity Diagnostic Tool. Report the problem to Cisco TAC and include the diagnostic log.
Had followed the setup guide, including running the Permissions Wizard and the manual Exchange PowerShell script to create Unity’s system mailboxes.
Checked the Active Directory account of the users being imported and noticed that the UnityDirSvc and UnityMsgSvc account permissions had not been inherited to child objects. That is, they were only applied at the OU level that the user objects existed in.
Under Advanced (Security tab), selected to “Allow inheritable permissions from the parent to propogate to this object…” Tried the import again, worked perfectly.
