Question

An administrator configures LDAP synchronization on Cisco UCM against a corporate Active Directory. After the first sync completes, only about 40% of the expected users appear in End User Management, and several important departments are entirely missing. The LDAP directory configuration points to the correct base DN at the domain root, and authentication to AD succeeds. What is the MOST likely cause of the incomplete user population?

Accepted Answer

An LDAP Custom Filter is applied to the LDAP Directory agreement, restricting which AD objects are imported

Answer

The LDAP Authentication configuration is pointing to a different domain controller than the LDAP Directory

Answer

The synchronized users were not assigned an Access Control Group, so UCM hides them from End User Management

Answer

The DirSync/LDAPSync service must be manually restarted after every incremental synchronization to load all users