Skype Online cutover migration


Sometimes we are asked for a strategy to do a cutover Skype migration, meaning that all the users would be enabled in Skype Online a single pass. Leaving whatever they have in Lync/Skype on-premises behind. That is a great strategy for a lot of customers, but not all. If that is what you are planning to do, please take a look at the implications:

  • Contacts cannot be exported, so users will have to repopulate their contact lists manually in Skype for Business Online.
  • Invitation for the existent meetings (Sent from on-premises Lync/Skype for Business) will need to be resent.
  • There will be downtime. There are several steps for you to go through, from disabling on-premises services to accessing the Skype for Business Online for the first time. Please plan accordingly.
  • It is recommended to have a good backup/restore plan for the (the main steps are covered later in this blog post).

Skype for Business On-Premises contact Backup

Using this procedure you will be able to export a list of all Skype for Business enabled users and theirs contacts.

     

  1. Log on to one of your Front End servers with an administrative account and open "Skype for business Server Management Shell".
     


  2. Get the pool name
     

    Get-CsPool


  3. Backup user contact lists
     

    Export-CsUserData -PoolFqdn "Server903.contoso.com" -FileName "C:\S4bBackup\ExportedUserData.zip"



     
    Note: Before running this command, make sure the specified path was created. In addition, you can export the list of contacts per user. To do that check available documentation on Export-CsUserData cmdlet.


    If required, you can follow the steps documented Import-CsUserData to restore data.


Deleting all S4b attributes from users

  1. Make sure you still have the "Skype for business Server Management Shell" open.
  2. To remove all S4b users run:
     

    Get-CsUser | Disable-CsUser -Verbose



     
    IMPORTANT: If you use the command "Get-CsUser | Disable-CsUser", all users in whole topology will be disabled for Skype for Business Server 2015/Lync Server 2013.
     


  3. Remove shared configuration and hosting provider:
     

    Set-CsAccessEdgeConfiguration –AllowOutsideUsers $false –AllowFederatedUsers $false
    Remove-CsHostingProvider –Identity "Skype for Business online"



     

Removing Topology / Servers

  1. Log on in your Front End Server and open the Topology Builder
     

  2.  

  3. Click Action, point Topology
  4. Click on Remove Deployment...
     

  5.  

  6. Click on Next
     

  7.  

  8. Click on Finish
     

  9.  

  10. Click Action, point Topology, and then click Publish...
     

  11.  

  12. Click on Next
     

  13.  

  14. Review results and click on Finish
     



    Note: Wait the replication to Central Management Store, servers and services
  15.  

  16. Now open the Lync PowerShell and list existent Conference Directories:
    Get-CsConferenceDirectory




  17. Remove all Directory Conference:
    Get-CsConferenceDirectory | Remove-CsConferenceDirectory

    Publish-CsTopology -FinalizeUninstall




  18. Remove the Configuration Store Location from Active Directory:
    Remove-CsConfigurationStoreLocation




  19. Unprep domain and forest:
    Disable-CsAdDomain -Domain contoso.com -GlobalSettingsDomainController Server902.contoso.com -Force

    Disable-CsAdForest -Force -GroupDomain contoso.com



    Note: Red information needs to be replaced by your internal domain and FQDN of your domaincontroller


Changing your DNS Records (External)

  1. Open your web browser, access http://portal.office.com and log on using a Global Admin credential.
  2. Click on Settings\Domains.
  3. Click on your custom domain.
  4. Click on Check DNS


  5. Take note on all DNS records related to Skype for business on-line.

    Note: Write down these information, it will be required later on this document.


  6. On your external DNS Server, delete the following records
     

    Record name Type
    isweb A
    dialin A
    meet A
    lyncweb A
    _xmpp-server SRV

     

  7. On your external DNS Server, modify/create the following records
     

    Record Type Port TTL Destination
    sip CNAME N/A N/A sipdir.online.lync.com
    lyncdiscover CNAME N/A N/A webdir.online.lync.com
    _sipfederationtls._tcp SRV 5061 3600 sipfed.online.lync.com
    _sip._tls SRV 443 3600 sipdir.online.lync.com

     

Changing your DNS Records (Internal)

If your company has a different DNS Server resolving your external domain name with different IPs (also known as "split DNS") you will need to change internal records too. If you do not have a split DNS scenario you can skip these steps.

  1. On your internal DNS Server, delete the following records
     

    Record name Type
    isweb A
    lyncdiscoverinternal A
    dialin A
    meet A
    lyncweb A
    _xmpp-server SRV

     

  2. On your internal DNS Server, modify/create the following records
     

    Record Type Port TTL Destination
    sip CNAME N/A N/A sipdir.online.lync.com
    lyncdiscover CNAME N/A N/A webdir.online.lync.com
    _sipfederationtls._tcp SRV 5061 3600 sipfed.online.lync.com
    _sip._tls SRV 443 3600 sipdir.online.lync.com

     

Validating your DNS records (optional)

After changing all required DNS records, you can connect to O365 portal and check if your records are correct.

  1. Open your web browser, access http://portal.office.com and log on using a Global Admin credential.
  2. Click on Settings\Domains.
  3. Click on your custom domain.
  4. Click on "Check DNS".
     
    Note: If all the records are correct, you should see a message like the one bellow:
     

Check if SharedSipAddressSpace is disabled

  1. Connect to Skype for Business Online using PowerShell using your tenant Global Admin account.
     
    Import-Module LyncOnlineConnector
    $cred=Get-Credential
    $session = New-CsOnlineSession -Credential $cred -verbose
    Import-PSSession $session -AllowClobber -Verbose
     
  2. Disable the "SharedSipAddressSpace".
     
    Set-CsTenantFederationConfiguration -SharedSipAddressSpace $False
     

Federation

Configure federation on Skype for Business Online

Before decommissioning your on-premises environment, make sure your on-line federations configuration is already done.

  1. Open your web browser and access http://portal.office.com and log on using a Global Admin credential.
  2. Open the Skype for Business admin center.
     

     
  3. Click on organization.
  4. Click on external communications.
  5. Select the configuration for your company.
  6. Add domains to the list if necessary.
  7. Click the save button.
     

     
  8. Inform your federated partners to remove the Edge server information on the federated domain on their Lync/Skype on-premises servers.

 

Provision public IM federation (optional)

If you want to enable federation with Skype consumer (public instant messaging), follow que procedure bellow:

  1. Open the Microsoft Lync Server and Skype Connectivity Provisioning portal and click the Sign In button.
  2. Logon using the Microsoft Account related to your contract.
     

     
  3. Select your contract type
  4. Read the terms and, if you agree with them, click on "by checking this box..."
  5. Inform your contract number and click on Remove service
  6. After 24 hours, validate the line Being discontinued has changed from 1 to 0
    Note: Wait for 24 hours before moving with the remaining steps.
     

     
  7. Open your web browser
  8. Access http://portal.office.com and log on using a Global Admin credential.
  9. Open the Skype for Business admin center.
  10. Click on organization.
  11. Click on external communications.
  12. On External communication uncheck "Let people use skype...".
  13. Click the save button.
  14. Wait for 5 minutes and check the "Let people use skype..." box again.
  15. Click the save button.
     
    Note: Wait for 4 hours to validate the configuration.
     

 

Update changed objects in the cloud

After you have changed all required objects on your on-premises Active Directory forest, you will need to wait the replication to the Azure Active Directory.
The the most current version of ADConnect (1.1 or newer) the standard schedule is for every 30 min. For the older versions, the standard schedule is every 3 hours.
You can choose to wait the next cycle or you can force the synchronization. For that, follow steps below:

  1. On your ADConnect server, open an elevated Windows PowerShell session.
  2. Force a delta sync:
    Import-Module ADSync

    Start-ADSyncSyncCycle -PolicyType Delta




Enabling accounts (Licensing)

For more information, click here.

  1. Open your web browser and access http://portal.office.com and log on using a Global Admin credential.
  2. Click on Users, Active Users
  3. Select all users that you want to enable
  4. Click on Edit product licenses


  5. Select the option that best suits you:
    • Replace existing product license assignments
    • Add to existing product license assignments
  6. Click Next.


  7. Expand the group of licenses you want to assign to the users

    Note: If the user has no previous country location (e.g. New user), you must select a country from the Location dropbox at this time.
  8. Select the licenses you want to assign to the users. Make sure you assign Skype for Business licenses.
  9. Click Add (or Replace, according to the option selected on step 6) button.

  10. Check if the operation was successfull and click Close.

Comments (1)

  1. turbomcp says:

    Great stuff
    Thanks

Skip to main content