Integrations with Other Systems
Polycom, Inc. 161
11 If, in step 9, the Total users/rooms values were significantly different from what you expected, try to
determine the reason and fix it:
a Go to User > Users and perform some searches to determine which enterprise users are
available and which aren’t.
b If there are many missing or incorrect users, consider whether changes to the LDAP filter can
correct the problem or if there is an issue with the directory integration configuration chosen.
12 If, in step 9, there were many conference room errors, try to determine the reason and fix it:
a Go to Reports > Conference Room Errors and verify that the time on the report is after the time
when you last completed step 7.
b Review the list of duplicate and invalid conference room IDs. Consider whether using a different
Active Directory attribute, increasing the conference room ID length, or editing the characters to
remove will resolve the majority of problems.
If there are only a few problems, they can generally be resolved by correcting invalid Active
Directory entries.
13 If necessary, repeat steps 4-9 and steps 11 and/or 12, modifying the integration parameters as
needed, until you get a satisfactory result.
See also:
Microsoft Active Directory
®
Integration
Adding Passcodes for Enterprise Users
Active Directory Integration Report
Conference Room Errors Report
Understanding Base DN
The Base DN field is where you can specify the distinguished name (DN) of a subset of the Active Directory
hierarchy (a domain, subset of domains, or organizational unit) to which you want to restrict the
RealPresence DMA system. It acts like a filter.
The diagram below illustrates how choosing different Base DN values affects which parts of a forest are
included in the directory integration.
Caution: Disable the service account
Leaving user roles assigned to the service account represents a serious security risk. For best
security, remove all user roles and mark this account disabled in the Polycom RealPresence DMA
system (not the Active Directory) so that this account can’t be used for conferencing or for logging into
the Polycom RealPresence DMA system management interface.
Note: LDAP familiarity
If you’re not familiar with LDAP filter syntax (as defined in RFC 2254) and knowledgeable about
enterprise directories in general and your specific implementation in particular, please consult with
someone who is.