<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2524 " id="quads-ad2524" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>

<h2 class="wp-block-heading">Skype for Business Edge server deployment and Hybrid integration with Skype for Business Online</h2>



<p>In the last Skype for Business post I have upgraded my Lync 2013 to Skype for Business (Click ;<a href="https://www.moh10ly.com/blog/VoIP/skype4business/upgrading-lync-2013-to-skype-for-business" target="_blank" rel="noreferrer noopener">here</a> ;to go to that post). in this article I am going to install Edge server for Skype for Business to the same Lync Environment where I have done the Upgrade to Skype for Business.</p>
<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2528 " id="quads-ad2528" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>

<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2530 " id="quads-ad2530" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>

<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2525 " id="quads-ad2525" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>




<h2 class="wp-block-heading"><strong>Configuring Edge Server</strong></h2>



<h2 class="wp-block-heading"><strong>Setup NETBIOS</strong></h2>



<p>In order to configure Skype 4 Business Edge, we&#8217;ll have to change the Netbios to give it the name of our Domain but we won&#8217;t join it to the domain.</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-JVkzP-XEz9w/VdYhkuAGs5I/AAAAAAAAQ5Y/DjnZoSDpPx8/clip_image001%25255B8%25255D_thumb.png?imgmax=800" alt="clip_image001[8]"/> 

<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2529 " id="quads-ad2529" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>
 
</figure>



<p><a href="http://lh3.googleusercontent.com/-xbOph87jYAU/VdYhh0TzUrI/AAAAAAAAQ5Q/pM0fnkvkb4w/s1600-h/clip_image001%25255B8%25255D%25255B2%25255D.png"></a></p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-FVMSyPjzqGs/VdYhoTQELrI/AAAAAAAAQ5o/CMEL4EogEss/clip_image002%25255B8%25255D_thumb.png?imgmax=800" alt="clip_image002[8]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-rYdiPVyqNSs/VdYhmYdkmGI/AAAAAAAAQ5g/RGf1Qvp_TD0/s1600-h/clip_image002%25255B8%25255D%25255B2%25255D.png"></a></p>



<h2 class="wp-block-heading"><strong>Setup NICs</strong></h2>



<p>Edge Server must have 2 NICs, one Local NIC will point out to the Front end server but must not have Default gateway so traffic can only flow through the DMZ out to the internet and back in. but still it must be able to ping to the FE from Edge and vice versa.</p>



<p>The DMZ network could have a single DMZ address (Public Address to be pointing to) or three DMZ addresses for public IP addresses with standard https ports.</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-IXRzI-X9G18/VdYhsrCEunI/AAAAAAAAQ54/W9dkBO8IgX0/clip_image003%25255B8%25255D_thumb.png?imgmax=800" alt="clip_image003[8]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-2EpzFzO_DU4/VdYhqtGyAwI/AAAAAAAAQ5w/EhXZhnepJ-Y/s1600-h/clip_image003%25255B8%25255D%25255B2%25255D.png"></a></p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-cEe9EaUzjmo/VdYhxQG3qxI/AAAAAAAAQ6I/0gtGN0MSA3E/clip_image004%25255B8%25255D_thumb.png?imgmax=800" alt="clip_image004[8]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-pTcvpH20W1U/VdYhvZD1EaI/AAAAAAAAQ6A/Nv1GmjG7xJw/s1600-h/clip_image004%25255B8%25255D%25255B2%25255D.png"></a></p>



<h2 class="wp-block-heading"><strong>Configure Hostnames</strong></h2>



<p>Edit the Edge server&#8217;s host file to include Lync FE and DC&#8217;s IP addresses and Hostname</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-L6Bvtrwt1cY/VdYh2cHrpkI/AAAAAAAAQ6Y/zY-ZA2GuaiM/image_thumb.png?imgmax=800" alt="image"/></figure>



<p><a href="http://lh3.googleusercontent.com/-bJIX1YcmO0g/VdYhz_1QMkI/AAAAAAAAQ6Q/c4jxpyoKc1g/s1600-h/image%25255B2%25255D.png"></a></p>



<h2 class="wp-block-heading"><strong>Install Prerequisites</strong></h2>



<ul class="wp-block-list"><li>Microsoft .Net Framework 3.5</li></ul>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-n2NU6FBkm70/VdYh6ekLIxI/AAAAAAAAQ6o/nfVnJwXl2fY/clip_image001%25255B10%25255D_thumb.png?imgmax=800" alt="clip_image001[10]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-XHt5yGRDmHw/VdYh4saXNRI/AAAAAAAAQ6g/RjTmnf95ozg/s1600-h/clip_image001%25255B10%25255D%25255B2%25255D.png"></a></p>



<p>Now I will go back to Skype for Business FE server, I&#8217;ll launch the topology builder and add new Edge server</p>



<p>I will add the first Edge pool which contains of a single Edge server</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-eLE2NzM2DkM/VdYh_q-EiLI/AAAAAAAAQ64/Hj03Kuovdhs/clip_image002%25255B10%25255D_thumb.png?imgmax=800" alt="clip_image002[10]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-q3XTmpNxPDQ/VdYh8wPaJgI/AAAAAAAAQ6w/bmt_8xWa9jI/s1600-h/clip_image002%25255B10%25255D%25255B2%25255D.png"></a></p>



<p>Next, you will have to choose if you want to enable federation with partners or other service providers …e.g. (Google)</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-pWVj4HU7CT8/VdYiEozxHSI/AAAAAAAAQ7I/yxPFOVitglg/clip_image003%25255B10%25255D_thumb.png?imgmax=800" alt="clip_image003[10]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-VqHL0naV9Aw/VdYiCCG-5xI/AAAAAAAAQ7A/TRDsS3T3Q5E/s1600-h/clip_image003%25255B10%25255D%25255B2%25255D.png"></a></p>



<p>I am intending to use a single Public IP address with a different ports (nonstandard) since this is a lab. For production use it&#8217;s recommended to have 3 public IP addresses, One is for Access Edge, AV and WebConf services.</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-CofvDYhqSE8/VdYiKabZRzI/AAAAAAAAQ7Y/2zW5wCS9rxA/clip_image004%25255B10%25255D_thumb.png?imgmax=800" alt="clip_image004[10]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-PParZ9wXUEw/VdYiH1HgTPI/AAAAAAAAQ7Q/x0M3d0DUuOw/s1600-h/clip_image004%25255B10%25255D%25255B2%25255D.png"></a></p>



<p>Next I will choose the last option which says that the Edge pool is translated by NAT. I will configure my firewall to NAT ports to the Edge&#8217;s DMZ IP addresses from the Public so I am choosing this option.</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-eps2XJ1RnJg/VdYiORUPdHI/AAAAAAAAQ7o/jKXTOS0ntls/clip_image005%25255B8%25255D_thumb.png?imgmax=800" alt="clip_image005[8]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-Y-O9EcTnJWg/VdYiMUBwsXI/AAAAAAAAQ7g/IRSu7uj8vpY/s1600-h/clip_image005%25255B8%25255D%25255B2%25255D.png"></a></p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-Ll6ASulX9wU/VdYiTf62hLI/AAAAAAAAQ74/uKqFwHf-mgI/clip_image006%25255B8%25255D_thumb.png?imgmax=800" alt="clip_image006[8]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-hDXs7dRmTOo/VdYiRKsk2PI/AAAAAAAAQ7w/PXNRdzxfrxw/s1600-h/clip_image006%25255B8%25255D%25255B2%25255D.png"></a></p>



<p>This is the FQDN&#8217;s the default configuration .. It&#8217;ll only use a single FQDN for all services if you&#8217;re going to use a single public IP address with a different ports.</p>



<h2 class="wp-block-heading"><strong>IMPORTANT NOTE</strong></h2>



<p>When you use a single IP address with a different ports, the Access Edge port will normally change to 5061 (Not 443 like in the _sip._tls.domain.com) SRV record which will cause failure if you forgot to change this port to match the one in your Topology&#8217;s Access Edge settings.</p>



<p>Next I&#8217;ll have to enter my Edge server&#8217;s Local IP address.</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-LL0I9YnKk4o/VdYiZImKXlI/AAAAAAAAQ8I/a7cizhc7ZCo/clip_image007%25255B8%25255D_thumb.png?imgmax=800" alt="clip_image007[8]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-0cUf3zrQEDE/VdYiWKSh7cI/AAAAAAAAQ8A/96Mcq06PcGE/s1600-h/clip_image007%25255B8%25255D%25255B2%25255D.png"></a></p>



<p>Next I will be asked to enter the DMZ&#8217;s IP address which the wizard calls (Private External IP address)</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-K7Df_zq_eqM/VdYioumjC0I/AAAAAAAAQ8o/UUg2lCwdhLw/clip_image001%25255B12%25255D_thumb.png?imgmax=800" alt="clip_image001[12]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-TtTzNJgzFVI/VdYihigYPaI/AAAAAAAAQ8g/_Zykemvg7P0/s1600-h/clip_image001%25255B12%25255D%25255B2%25255D.png"></a></p>



<p>Here I am going to place the NAT IP address which is my Public IP address.</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-FOmoic6xGO8/VdYitl5tzFI/AAAAAAAAQ84/RQLn2vVE52c/clip_image002%25255B12%25255D_thumb.png?imgmax=800" alt="clip_image002[12]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-EgHXJekKxEA/VdYirLkK1QI/AAAAAAAAQ8w/aIwQtayhP5c/s1600-h/clip_image002%25255B12%25255D%25255B2%25255D.png"></a></p>



<p>Next I&#8217;ll have to choose which Lync FE pool will be used as the next hop to the Edge pool. In this case I&#8217;ll be choosing my main pool since the second is only for resilience purpose.</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-SVhMM9754yw/VdYi8q2tFXI/AAAAAAAAQ9I/wo5YMGzSW8I/clip_image003%25255B12%25255D_thumb.png?imgmax=800" alt="clip_image003[12]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-n2QKla9i_ro/VdYiv2ZFEmI/AAAAAAAAQ9A/rhjh3c7Yeh4/s1600-h/clip_image003%25255B12%25255D%25255B2%25255D.png"></a></p>



<p>Then I&#8217;ll associate the mediation pool for Edge server for external media traffic. I can assign both in this case.</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-fbLvjtfoFN4/VdYjGJ1vCqI/AAAAAAAAQ9Y/s6zJzH8bLTw/clip_image004%25255B12%25255D_thumb.png?imgmax=800" alt="clip_image004[12]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-WuA6jLjeFmc/VdYjA9ObOYI/AAAAAAAAQ9Q/mEveCt9-dWE/s1600-h/clip_image004%25255B12%25255D%25255B2%25255D.png"></a></p>



<p>Now I&#8217;ll click on Finish and right click on the Site name&#8217;s properties to enable the SIP federation and XMPP federation then Publish the topology.</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-C3z9Y6ipqe0/VdYjRmDAcbI/AAAAAAAAQ9o/eiUiUM5b9xc/clip_image005%25255B10%25255D_thumb.png?imgmax=800" alt="clip_image005[10]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-7a0xp3w-eWI/VdYjNN4E_bI/AAAAAAAAQ9g/dGakDDg35Ko/s1600-h/clip_image005%25255B10%25255D%25255B2%25255D.png"></a></p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-9l_igww_DuI/VdYjbi9xoaI/AAAAAAAAQ94/mWH6MtrjcYo/clip_image006%25255B10%25255D_thumb.png?imgmax=800" alt="clip_image006[10]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-7JXstSsQj5M/VdYjVT9gpaI/AAAAAAAAQ9w/byHjhsWPqi0/s1600-h/clip_image006%25255B10%25255D%25255B2%25255D.png"></a></p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-8F3qp5qucSw/VdYjjTgXXjI/AAAAAAAAQ-I/IwxEYcbtNt4/clip_image007%25255B10%25255D_thumb.png?imgmax=800" alt="clip_image007[10]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-La281E0n_Kw/VdYjex644vI/AAAAAAAAQ-A/z9x7YSuGQ50/s1600-h/clip_image007%25255B10%25255D%25255B2%25255D.png"></a></p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-Y3nckkNQ-fo/VdYjrQH1uKI/AAAAAAAAQ-Y/ZrJt0AjyYv0/clip_image008%25255B10%25255D_thumb.png?imgmax=800" alt="clip_image008[10]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-IDkgJ_HAPkI/VdYjmEFfmgI/AAAAAAAAQ-Q/mo2vR4mPGhM/s1600-h/clip_image008%25255B10%25255D%25255B2%25255D.png"></a></p>



<p>Now I will setup Azure Active Directory Sync on my DC server in order to sync the required users for the test purpose.</p>



<p>My domain is adeo.local so I want to change the UPN for users to match the synced domain. (Adeo-office365.ga) and moh10ly.com</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-dXk-iOx6lio/VdYj2zytQyI/AAAAAAAAQ-o/shKzm7feJF4/clip_image009%25255B8%25255D_thumb.png?imgmax=800" alt="clip_image009[8]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-LvE66DHvxcM/VdYjwAUU0WI/AAAAAAAAQ-g/YjioKQ5z4x4/s1600-h/clip_image009%25255B8%25255D%25255B2%25255D.png"></a></p>



<h2 class="wp-block-heading">Installing Azure Active Directory Sync</h2>



<p>Now I will install the prerequisites which consist of the following</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-FkiEJpRN3lk/VdYkC0F4s6I/AAAAAAAAQ-4/HFqoLAKeNlA/clip_image010%25255B8%25255D_thumb.png?imgmax=800" alt="clip_image010[8]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-tYWb6vA6cXI/VdYj-KRSPcI/AAAAAAAAQ-w/3qMFCzeW0DY/s1600-h/clip_image010%25255B8%25255D%25255B2%25255D.png"></a></p>



<p>Net framework 4.5.2 is required for AADS but it&#8217;s already installed on my server</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-F0OJH2Xft1o/VdYkMBMFHaI/AAAAAAAAQ_I/cw3UksQU2B0/clip_image011%25255B8%25255D_thumb.png?imgmax=800" alt="clip_image011[8]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-zJQpWAZQ--Q/VdYkIIewRqI/AAAAAAAAQ_A/8JY00v2bb-g/s1600-h/clip_image011%25255B8%25255D%25255B2%25255D.png"></a></p>



<p>Next I will install Microsoft Online Service Sign in assistant</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-dyBMGLqyTLI/VdYtdNIIqHI/AAAAAAAAQ_g/Pl0LuF60fls/clip_image012%25255B8%25255D_thumb.png?imgmax=800" alt="clip_image012[8]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-t3vMNS3DPU8/VdYkTN93CkI/AAAAAAAAQ_Q/SvO69FqwCDA/s1600-h/clip_image012%25255B8%25255D%25255B2%25255D.png"></a></p>



<p>Next I will install Azure AD Module</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/--9eT1-XKjjk/VdYthjxiiQI/AAAAAAAAQ_w/dzx42bHFxKE/clip_image001%25255B14%25255D_thumb.png?imgmax=800" alt="clip_image001[14]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-yunNQowtMuc/VdYtfuhxRWI/AAAAAAAAQ_o/JNGSv51vBuI/s1600-h/clip_image001%25255B14%25255D%25255B2%25255D.png"></a></p>



<h2 class="wp-block-heading"><strong>Finally Azure AD Sync</strong></h2>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-HCpFLGYNVMc/VdYtlU4quDI/AAAAAAAARAA/btkogyaiDqM/clip_image002%25255B14%25255D_thumb.png?imgmax=800" alt="clip_image002[14]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-oKQ8wrN1Rjk/VdYtjpTsq-I/AAAAAAAAQ_4/tkHurxnjdAI/s1600-h/clip_image002%25255B14%25255D%25255B2%25255D.png"></a></p>



<p>Before moving forward, I&#8217;ll have to go to the Office 365 portal and activate DirSync</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-M58J612IJYg/VdYtqCTWdpI/AAAAAAAARAQ/r_4p-4q4sps/clip_image003%25255B14%25255D_thumb.png?imgmax=800" alt="clip_image003[14]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-vjoFEQc5K78/VdYtngeA4qI/AAAAAAAARAI/q4mT5yLiR_c/s1600-h/clip_image003%25255B14%25255D%25255B2%25255D.png"></a></p>



<p>Then use a global admin credentials from O365.</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-wSI-7mvPMr4/VdYttqXtisI/AAAAAAAARAg/DnGzOrDGnA8/clip_image004%25255B14%25255D_thumb.png?imgmax=800" alt="clip_image004[14]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-MQTdPxtBAwI/VdYtri_SJpI/AAAAAAAARAY/uF2DEr4RvZI/s1600-h/clip_image004%25255B14%25255D%25255B2%25255D.png"></a></p>



<p>Adding the forest using an enterprise admin user account</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-0Ge3CltnB_k/VdYtxh0WWBI/AAAAAAAARAw/J3v24wdlCqk/clip_image005%25255B12%25255D_thumb.png?imgmax=800" alt="clip_image005[12]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-lR6skBuCX9I/VdYtvvIUbLI/AAAAAAAARAo/-qtdfbxlq8M/s1600-h/clip_image005%25255B12%25255D%25255B2%25255D.png"></a></p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-suuE6vyARvQ/VdYt1u30PFI/AAAAAAAARBA/myxd7CWA1vY/clip_image006%25255B12%25255D_thumb.png?imgmax=800" alt="clip_image006[12]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-OEfu0UasLgo/VdYtzawpaOI/AAAAAAAARA4/zAGnr7FKjn4/s1600-h/clip_image006%25255B12%25255D%25255B2%25255D.png"></a></p>



<p>Due to the fact that my domain adeo-office365.ga&#8217;s public dns host doesn&#8217;t have SRV configuration because it&#8217;s hosted by the famous free domain service (Freenom) so I&#8217;ll have to add my original domain moh10ly.com as Lync (S4B) requires SRV records to point to the on-premises lync.</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/--o4XAN0saAU/VdYt7qmcVZI/AAAAAAAARBQ/3ulUN4mgWG0/clip_image007%25255B12%25255D_thumb.png?imgmax=800" alt="clip_image007[12]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-XHCH74318O0/VdYt4RvhlcI/AAAAAAAARBI/oGoTBUR00hA/s1600-h/clip_image007%25255B12%25255D%25255B2%25255D.png"></a></p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-FzGFXha1SzE/VdYt_0g2CDI/AAAAAAAARBg/5NqbbCJh2UY/clip_image008%25255B12%25255D_thumb.png?imgmax=800" alt="clip_image008[12]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-R0AOvqDiOQw/VdYt9oUlw4I/AAAAAAAARBY/57qSR6ZVDfs/s1600-h/clip_image008%25255B12%25255D%25255B2%25255D.png"></a></p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-YAq1_Li5HLA/VdYuENY4awI/AAAAAAAARBw/ON3X_TtevgM/clip_image001%25255B16%25255D_thumb.png?imgmax=800" alt="clip_image001[16]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-iTfrLNCEs_Y/VdYuCN3T8kI/AAAAAAAARBo/2W2V59gxNfE/s1600-h/clip_image001%25255B16%25255D%25255B2%25255D.png"></a></p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-OFiNW5iJZ_0/VdYuHu78oAI/AAAAAAAARCA/pSgAJu7PQrE/clip_image002%25255B16%25255D_thumb.png?imgmax=800" alt="clip_image002[16]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-p6oW2z6gb7Y/VdYuFxcToWI/AAAAAAAARB4/4a8dpQPOBRE/s1600-h/clip_image002%25255B16%25255D%25255B2%25255D.png"></a></p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-o23CbotvIa8/VdYuLBeJItI/AAAAAAAARCQ/H1AQx8NhLLg/clip_image003%25255B16%25255D_thumb.png?imgmax=800" alt="clip_image003[16]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-We9Riy38EI8/VdYuJV5OlzI/AAAAAAAARCI/9ejz6AK7zVU/s1600-h/clip_image003%25255B16%25255D%25255B2%25255D.png"></a></p>



<p>I will only sync one OU, so I will untick the Sync now box and click on Finish</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-pEdTSxqyp24/VdYuPTUkftI/AAAAAAAARCg/MXF8B5qoogc/clip_image004%25255B16%25255D_thumb.png?imgmax=800" alt="clip_image004[16]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-6Q90gMDPgAQ/VdYuNe9cNMI/AAAAAAAARCY/ux3fBILdiys/s1600-h/clip_image004%25255B16%25255D%25255B2%25255D.png"></a></p>



<h2 class="wp-block-heading">I will go to the following path</h2>



<p>&#8220;C:\Program Files\Microsoft Azure AD Sync\UIShell&#8221; and create a shortcut for the GUI application of AADS on the desktop</p>



<p>&#8220;C:\Program Files\Microsoft Azure AD Sync\UIShell\miisclient.exe&#8221;</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-xr7iM7Y99n4/VdYuS3oH9fI/AAAAAAAARCw/Tpqsz9cpxKA/clip_image005%25255B14%25255D_thumb.png?imgmax=800" alt="clip_image005[14]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-bW4GmEQ0iIU/VdYuRG_BUwI/AAAAAAAARCo/HNq6FZg7-Tg/s1600-h/clip_image005%25255B14%25255D%25255B2%25255D.png"></a></p>



<p>To get this GUI app to work, you will have to sign out of your account and sign back in as your username will be added to the local administrators and have the authority to open it</p>



<p>Log off, log back in</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-_clCZutXRJQ/VdYuYZh_5xI/AAAAAAAARDA/pHouOKcBiBU/clip_image006%25255B14%25255D_thumb.png?imgmax=800" alt="clip_image006[14]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-xBmGhskmvn4/VdYuU7cLApI/AAAAAAAARC4/jawDz6SDHlo/s1600-h/clip_image006%25255B14%25255D%25255B2%25255D.png"></a></p>



<p>Next I will go to the connectors tab and double click on the ADDS connector (Adeo.local)</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-l2D-du4nIEk/VdYuckIlTcI/AAAAAAAARDQ/6Ij6qtW6sX4/clip_image007%25255B14%25255D_thumb.png?imgmax=800" alt="clip_image007[14]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-CHpzv6cL9lI/VdYuaUBfMII/AAAAAAAARDI/kkfYwRp9EiM/s1600-h/clip_image007%25255B14%25255D%25255B2%25255D.png"></a></p>



<p>I will go to the Configure Directory Partitions and under Credentials I&#8217;ll choose &#8220;Alternate credentials for this directory partition&#8221; then enter my on-premises AD Enterprise admin credentials</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-7lh25ZwGM74/VdYugmuzazI/AAAAAAAARDg/uYa1TVF4deE/clip_image008%25255B14%25255D_thumb.png?imgmax=800" alt="clip_image008[14]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-SS3DQVmAdW0/VdYufBJjd9I/AAAAAAAARDY/F2usld5LmAc/s1600-h/clip_image008%25255B14%25255D%25255B2%25255D.png"></a></p>



<p>I&#8217;ll click on Containers</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-_Eo1ySRhc7w/VdYulI3X6iI/AAAAAAAARDw/nm7auzI_NdI/clip_image001%25255B18%25255D_thumb.png?imgmax=800" alt="clip_image001[18]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-6Qj0kOLnYSI/VdYui1E5c6I/AAAAAAAARDo/hHpUwxNL4wM/s1600-h/clip_image001%25255B18%25255D%25255B2%25255D.png"></a></p>



<p>I&#8217;ll untick the DC=Adeo,Dc=Local box and only choose Dirsync OU then click OK and apply</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-7f9VGDbVlqc/VdYupO894vI/AAAAAAAAREA/hKnRU-QNoEI/clip_image002%25255B18%25255D_thumb.png?imgmax=800" alt="clip_image002[18]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-jp163uEoWQg/VdYumtfhRAI/AAAAAAAARD4/n1g7W260CD0/s1600-h/clip_image002%25255B18%25255D%25255B2%25255D.png"></a></p>



<p>Before I start syncing my AD , I will go to Skype for Business Server and add my domain moh10ly.com as a SIP domain</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-6d3IYHIyLAc/VdYuvBFO7YI/AAAAAAAAREQ/Ley-JsHBKmw/clip_image003%25255B18%25255D_thumb.png?imgmax=800" alt="clip_image003[18]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-Vj5ok8uZTBI/VdYur-15XjI/AAAAAAAAREI/OUwBkU8UUj0/s1600-h/clip_image003%25255B18%25255D%25255B2%25255D.png"></a></p>



<p>Next I am going to change the FQDN of the SIP access edge for public domain to moh10ly.com and the default port for the Access Edge to 443 and publish the topology</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-jE1diCbah_I/VdYuyXXjRgI/AAAAAAAAREg/fTGdJIo7XmE/clip_image004%25255B18%25255D_thumb.png?imgmax=800" alt="clip_image004[18]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-8k9AlwSOnpQ/VdYuwxJ6Y-I/AAAAAAAAREY/3nD8GWMbJa8/s1600-h/clip_image004%25255B18%25255D%25255B2%25255D.png"></a></p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-12riPotck8Y/VdYu1-k5YkI/AAAAAAAAREw/5Q0VZulSoss/clip_image005%25255B16%25255D_thumb.png?imgmax=800" alt="clip_image005[16]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-P3VcjUhIxuY/VdYu0SMK_0I/AAAAAAAAREo/SvOEbtv0TU0/s1600-h/clip_image005%25255B16%25255D%25255B2%25255D.png"></a></p>



<p>I needed to finally check if all my FE servers are replicating. So then I can move to Edge server to install Lync components</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-RFka6Lax6Uo/VdYu6A_b2EI/AAAAAAAARFA/A4Bf-7jcVcs/clip_image006%25255B16%25255D_thumb.png?imgmax=800" alt="clip_image006[16]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-h0ydoXQTEtM/VdYu35wOmgI/AAAAAAAARE4/70ojivWmOcM/s1600-h/clip_image006%25255B16%25255D%25255B2%25255D.png"></a></p>



<p>On the Edge server, I&#8217;ll use ISO for Skype 4 business to install the setup</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-rT42TujSLcg/VdYu-8T-rPI/AAAAAAAARFQ/ciVPOI7rLxI/clip_image007%25255B16%25255D_thumb.png?imgmax=800" alt="clip_image007[16]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-v-tGbioLlHI/VdYu87oKc7I/AAAAAAAARFI/UaPnL03ARF0/s1600-h/clip_image007%25255B16%25255D%25255B2%25255D.png"></a></p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-UXl0OP8ELlk/VdYvD2pe5PI/AAAAAAAARFg/57WU9bpLMWs/clip_image008%25255B16%25255D_thumb.png?imgmax=800" alt="clip_image008[16]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-4YMMnmaeEq0/VdYvBdw82WI/AAAAAAAARFY/Xsw56CEkgII/s1600-h/clip_image008%25255B16%25255D%25255B2%25255D.png"></a></p>



<p>First thing I&#8217;ll install the local Configuration Store</p>



<p>I&#8217;ll click on Run and then I&#8217;ll be asked to import the configuration file which I&#8217;ll must export from Lync FE (Skype 4 b FE) server</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-rkCwzJAXkjY/VdYvHtlOI5I/AAAAAAAARFw/d8v0lBhiUEw/clip_image009%25255B10%25255D_thumb.png?imgmax=800" alt="clip_image009[10]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-MAO0H_DQsek/VdYvFuZNOgI/AAAAAAAARFo/6zuZ00_mf30/s1600-h/clip_image009%25255B10%25255D%25255B2%25255D.png"></a></p>



<p>In this case, I&#8217;ll go to Lync FE and open Lync Management shell and enter the following Cmdlet</p>



<p><strong>Export-CsConfiguration -FileName c:\top.zip</strong></p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-k86U1B16iFM/VdYvLCaibNI/AAAAAAAARGA/ZpFHQMj8ysE/clip_image010%25255B10%25255D_thumb.png?imgmax=800" alt="clip_image010[10]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-VFzX-8DtklU/VdYvJTQM3mI/AAAAAAAARF4/kSkNFpK9sTs/s1600-h/clip_image010%25255B10%25255D%25255B2%25255D.png"></a></p>



<p>This cmdlet will export a file to the root C drive . I&#8217;ll copy this file to the edge server.</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-_ywtt1T7iXA/VdYvQDekWkI/AAAAAAAARGQ/ekMQKbPkRvw/clip_image011%25255B10%25255D_thumb.png?imgmax=800" alt="clip_image011[10]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-M8s-fguLw4I/VdYvNDrH8TI/AAAAAAAARGI/vCRSRlrPJQs/s1600-h/clip_image011%25255B10%25255D%25255B2%25255D.png"></a></p>



<p>I&#8217;ll click next to continue, this should start installing the local store</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-WnSYxl4wcJQ/VdYvUBdYqKI/AAAAAAAARGg/svyAMxSfih8/clip_image012%25255B10%25255D_thumb.png?imgmax=800" alt="clip_image012[10]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-E_6D0V8ZmOI/VdYvSWoGCJI/AAAAAAAARGY/z7vaorpH1GU/s1600-h/clip_image012%25255B10%25255D%25255B2%25255D.png"></a></p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-XYBxx8eiPNw/VdYvaQtFNKI/AAAAAAAARGw/MYy7SWKb_rw/clip_image013%25255B8%25255D_thumb.png?imgmax=800" alt="clip_image013[8]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-FOXEdZsO5ZY/VdYvYL5fz_I/AAAAAAAARGo/yBOP9SpZmHM/s1600-h/clip_image013%25255B8%25255D%25255B2%25255D.png"></a></p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-fE-Bou-7p0k/VdYve2i4AVI/AAAAAAAARHA/3Oi9fhkFXIM/clip_image014%25255B8%25255D_thumb.png?imgmax=800" alt="clip_image014[8]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-LtI8bwBUy4U/VdYvcj-YYUI/AAAAAAAARG4/PZCdEep_IgY/s1600-h/clip_image014%25255B8%25255D%25255B2%25255D.png"></a></p>



<p>Next I&#8217;ll request a certificate for Internal NIC For edge server</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-IWDQOZeADZM/VdYviimDQuI/AAAAAAAARHQ/M06O29i46gE/clip_image015%25255B8%25255D_thumb.png?imgmax=800" alt="clip_image015[8]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-9AU1JSVmIZg/VdYvgbMgtLI/AAAAAAAARHI/aqOBuPQgDco/s1600-h/clip_image015%25255B8%25255D%25255B2%25255D.png"></a></p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-C_kBbiR8EsM/VdYvmCKBC0I/AAAAAAAARHg/XXDJ1aRZeD8/clip_image016%25255B8%25255D_thumb.png?imgmax=800" alt="clip_image016[8]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-r2G5HRvf-tc/VdYvkYmlWkI/AAAAAAAARHY/n80inY2EWHY/s1600-h/clip_image016%25255B8%25255D%25255B2%25255D.png"></a></p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-KBcrpzsqBE0/VdYvpcE6nGI/AAAAAAAARHw/g_GITksR_K8/clip_image017%25255B8%25255D_thumb.png?imgmax=800" alt="clip_image017[8]"/></figure>



<h2 class="wp-block-heading">Configure Certificate<a href="http://lh3.googleusercontent.com/-6wORM8CVl4c/VdYvnr8fKzI/AAAAAAAARHo/GTKztDHZu2U/s1600-h/clip_image017%25255B8%25255D%25255B2%25255D.png"></a></h2>



<p>I&#8217;ll take the CSR (Certificate sign request) code and get a certificate from my local CA</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-UjquZ6aPLb8/VdYvtJvGKrI/AAAAAAAARIA/hgFf-ybYbd0/clip_image018%25255B8%25255D_thumb.png?imgmax=800" alt="clip_image018[8]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-6JHGsnm4DMA/VdYvrEfSakI/AAAAAAAARH4/9n4TttfQ_No/s1600-h/clip_image018%25255B8%25255D%25255B2%25255D.png"></a></p>



<p>I&#8217;ll open MMC and add Certificates console and import the PKCS certificate</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-_2-TW0r6MQ0/VdYvxgJAaoI/AAAAAAAARIQ/Ivs_jXAZF-8/clip_image001%25255B20%25255D_thumb.png?imgmax=800" alt="clip_image001[20]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-AMFvler5pgM/VdYvvYe2gkI/AAAAAAAARII/5E-gzpsPxeU/s1600-h/clip_image001%25255B20%25255D%25255B2%25255D.png"></a></p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-7IiMqKkJ9Ok/VdYv2m7xufI/AAAAAAAARIg/PZVaQ-F-SNo/clip_image002%25255B20%25255D_thumb.png?imgmax=800" alt="clip_image002[20]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-BAVrmTq99sY/VdYv0dNlkbI/AAAAAAAARIY/1PNakTjsl8c/s1600-h/clip_image002%25255B20%25255D%25255B2%25255D.png"></a></p>



<p>After importing the certificate I&#8217;ll assign it to the internal NIC by clicking on Assign to the Edge Internal</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-Nzq2BO_Lw6M/VdYv6XqIuuI/AAAAAAAARIw/slgQeBTRoHE/clip_image003%25255B20%25255D_thumb.png?imgmax=800" alt="clip_image003[20]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-4bTTIY0lkwU/VdYv4E890GI/AAAAAAAARIo/NwvWuWbZU-U/s1600-h/clip_image003%25255B20%25255D%25255B2%25255D.png"></a></p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-QjpvYftCPUI/VdYv9oP4MLI/AAAAAAAARJA/WibUlIZDQ2w/clip_image004%25255B20%25255D_thumb.png?imgmax=800" alt="clip_image004[20]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-X7Tjfd2p-ho/VdYv8Etm8OI/AAAAAAAARI4/1SVhVO5Yv8M/s1600-h/clip_image004%25255B20%25255D%25255B2%25255D.png"></a></p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-ayenHxH2dPY/VdYwBhallTI/AAAAAAAARJQ/9ednPIvTK10/clip_image005%25255B18%25255D_thumb.png?imgmax=800" alt="clip_image005[18]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-oeWP1sFG-s4/VdYv_acHdII/AAAAAAAARJI/OunJTPrKvZM/s1600-h/clip_image005%25255B18%25255D%25255B2%25255D.png"></a></p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-8Ir_aw9XeOg/VdYwFLo2ZDI/AAAAAAAARJg/YcE87xZ-s8g/clip_image006%25255B18%25255D_thumb.png?imgmax=800" alt="clip_image006[18]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-K5eQ6jVTAZQ/VdYwDc9lvdI/AAAAAAAARJY/-snxrQCjKjQ/s1600-h/clip_image006%25255B18%25255D%25255B2%25255D.png"></a></p>
<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2523 " id="quads-ad2523" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>




<p>Once we assign the certfiicate to the internal edge. The replication service for Edge and FE will start working</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-3X4oKAJzwOk/VdYwJz6S1zI/AAAAAAAARJw/1_Aas9HmseQ/clip_image007%25255B18%25255D_thumb.png?imgmax=800" alt="clip_image007[18]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-i1ujFeFA2t0/VdYwGw___sI/AAAAAAAARJo/begP9tYaiUw/s1600-h/clip_image007%25255B18%25255D%25255B2%25255D.png"></a></p>



<h2 class="wp-block-heading">Now I&#8217;ll import my Public Certificate to Edge Server&#8217;s DMZ NIC</h2>



<p>I already imported my public certificate, now I&#8217;ll go to the S4B wizard and assign it there</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-ock6Aw6XQjo/VdYwNkSKwUI/AAAAAAAARKA/R6vTCITQSA4/clip_image008%25255B18%25255D_thumb.png?imgmax=800" alt="clip_image008[18]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-jci4RKq7lAA/VdYwLmiAH6I/AAAAAAAARJ4/peCkfIjac2k/s1600-h/clip_image008%25255B18%25255D%25255B2%25255D.png"></a></p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-7rgUTq6ZRDQ/VdYwRmNYK6I/AAAAAAAARKQ/gPwPLgfrxuM/clip_image009%25255B12%25255D_thumb.png?imgmax=800" alt="clip_image009[12]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-6cVw4Wjfw2Q/VdYwPADFcgI/AAAAAAAARKI/kt-U8v0pd0k/s1600-h/clip_image009%25255B12%25255D%25255B2%25255D.png"></a></p>



<p>Unlike IN lync 2013 when you Click on Start service in the Wizard all services start on their own but on Skype for business you &#8216;ll have to start the services manually by yourself.</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-mmQB2EMXEog/VdYwWfZktcI/AAAAAAAARKg/sVxElj3kQdE/clip_image010%25255B12%25255D_thumb.png?imgmax=800" alt="clip_image010[12]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-PkhxNiJpsnM/VdYwULWyy1I/AAAAAAAARKY/hVaGbScWX_0/s1600-h/clip_image010%25255B12%25255D%25255B2%25255D.png"></a></p>



<p>So Instead I used the service console to start the services.</p>



<p>Now I&#8217;ll go back to the FE And enable remote connectivity to Skype for Business from outside and make sure that replication works fine by checking the Topology or from cmdlet</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/--81XceSIe_c/VdYwapyrNwI/AAAAAAAARKw/nJjgRjRECRU/clip_image011%25255B12%25255D_thumb.png?imgmax=800" alt="clip_image011[12]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-gx5haY2v3D4/VdYwYgV87VI/AAAAAAAARKo/fXwxJ9TFArA/s1600-h/clip_image011%25255B12%25255D%25255B2%25255D.png"></a></p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-knPkcwaE_fk/VdYwehFka4I/AAAAAAAARLA/4Pux7LjsL5o/clip_image012%25255B12%25255D_thumb.png?imgmax=800" alt="clip_image012[12]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-Xd-LjfS8wN4/VdYwc6OSfXI/AAAAAAAARK4/Ln07iNMI5pU/s1600-h/clip_image012%25255B12%25255D%25255B2%25255D.png"></a><strong><a href="http://old.moh10ly.com/blog/VoIP/skype4business/skype-for-business-edge-server-deployment-and-hybrid-integration-with-skype-for-business-online/Rep_1.png?attredirects=0"></a></strong><strong><br></strong><strong><a href="http://old.moh10ly.com/blog/VoIP/skype4business/skype-for-business-edge-server-deployment-and-hybrid-integration-with-skype-for-business-online/Rep_2.png?attredirects=0"></a></strong></p>



<p>After the replication is finished, I was able to login remotely with my Skype for Business on-premises accounts.</p>



<p>&#8212;</p>



<h2 class="wp-block-heading"><strong>Setting up Hybrid integration with Skype online for Business (O365)</strong></h2>



<p><a href="https://technet.microsoft.com/en-us/library/jj205126.aspx">https://technet.microsoft.com/en-us/library/jj205126.aspx</a></p>



<p><a href="https://technet.microsoft.com/en-us/library/jj204669.aspx">https://technet.microsoft.com/en-us/library/jj204669.aspx</a></p>



<p>In order to allow Hybrid environment to function properly, we&#8217;ll have to federate our Skype for Business on-premises&#8217;s Edge server as ;Microsoft ;says below</p>



<p>Federation allows users in your on-premises deployment to communicate with Office 365 users in your organization. To configure federation, run the following cmdlets in the Skype for Business Server Management Shell:</p>



<p>From <;<a href="https://technet.microsoft.com/en-us/library/jj205126.aspx">https://technet.microsoft.com/en-us/library/jj205126.aspx</a>>;</p>



<p>On the front end server, we&#8217;ll run the following CMDlet</p>



<p>Set-CSAccessEdgeConfiguration -AllowOutsideUsers 1 -AllowFederatedUsers 1 -UseDnsSrvRouting -EnablePartnerDiscovery $true</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-jGYdAI06rxg/VdYwmXHC-yI/AAAAAAAARLg/r3RHKKg0ufs/clip_image014%25255B10%25255D_thumb.png?imgmax=800" alt="clip_image014[10]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-sXVxoo-ZMO4/VdYwkbe4AQI/AAAAAAAARLY/X6LM7gM_STQ/s1600-h/clip_image014%25255B10%25255D%25255B2%25255D.png"></a></p>



<p>Next cmdlet will create a new public federated provider for skype for business online.. However it already exists by default as in the below snapshot but just to avoid any issues I will delete the default provider from control panel and recreate it again. ;</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-d3BghjKBZZI/VdYwqCxJzmI/AAAAAAAARLw/zqvjhDw2l0s/clip_image015%25255B10%25255D_thumb.png?imgmax=800" alt="clip_image015[10]"/></figure>



<h2 class="wp-block-heading"><strong>I&#8217;ll delete the hosted provider &#8220;Skype for Business Online&#8221;</strong></h2>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-iBHqaOBtxII/VdYwumhIm9I/AAAAAAAARMA/S1mM3RW0A-M/clip_image016%25255B10%25255D_thumb.png?imgmax=800" alt="clip_image016[10]"/></figure>



<p>I&#8217;ll try the cmdlet again after deleting the provider ..</p>



<p>New-CSHostingProvider -Identity SkypeforBusinessOnline -ProxyFqdn &#8220;sipfed.online.lync.com&#8221; -Enabled $true -EnabledSharedAddressSpace $true -HostsOCSUsers $true -VerificationLevel UseSourceVerification -IsLocal $false -AutodiscoverUrl ;<a href="https://webdir.online.lync.com/Autodiscover/AutodiscoverService.svc/root">https://webdir.online.lync.com/Autodiscover/AutodiscoverService.svc/root</a></p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-iXyllKI1qSc/VdYwyLyQ14I/AAAAAAAARMQ/46Xf9Doh1OM/clip_image017%25255B10%25255D_thumb.png?imgmax=800" alt="clip_image017[10]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-uJ7YByyHE8M/VdYwwNYx2yI/AAAAAAAARMI/S_LMh0aESFQ/s1600-h/clip_image017%25255B10%25255D%25255B2%25255D.png"></a></p>



<p>Since it worked already, I will go back to the control panel and make sure it is enabled</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-Q6V7rfHjIa4/VdYw1qzGdCI/AAAAAAAARMg/w8XCBhBTl-0/clip_image018%25255B10%25255D_thumb.png?imgmax=800" alt="clip_image018[10]"/></figure>



<p>Next is : Configure your Skype for Business Online tenant for a shared SIP address space</p>



<h2 class="wp-block-heading"><strong>Note:</strong></h2>



<p>To configure a shared SIP address space, establish a remote PowerShell session with Skype for Business Online, and then run the following cmdlet:</p>



<p>We&#8217;ll have to download skype for business online powershell</p>



<p><a href="https://onedrive.live.com/redir?resid=82488EABA4ACDB15!38849&;authkey=!AKW6Ln4Rkn6QuUI&;ithint=file%2cexe">https://onedrive.live.com/redir?resid=82488EABA4ACDB15!38849&;authkey=!AKW6Ln4Rkn6QuUI&;ithint=file%2cexe</a></p>



<p>After launching the PowerShell module as an administrator I&#8217;ll run the following cmdlet</p>



<p>Import-Module SkypeOnlineConnector</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-r8RrrLaFN5M/VdYw5J_r7sI/AAAAAAAARMw/TRU_Y-J2-Mo/clip_image019%25255B8%25255D_thumb.png?imgmax=800" alt="clip_image019[8]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-E5-aVU75NSg/VdYw3WbgsdI/AAAAAAAARMo/EdWwB3Gr3r0/s1600-h/clip_image019%25255B8%25255D%25255B2%25255D.png"></a></p>



<p>Now I&#8217;ll connect to my Office 365 tenant</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-GV6K3B-YSg4/VdYw8QbfjCI/AAAAAAAARNA/oZ8ghTMIJIw/clip_image020%25255B8%25255D_thumb.png?imgmax=800" alt="clip_image020[8]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-XAZ8v5XreTQ/VdYw6zHlEWI/AAAAAAAARM4/Cal2dFR7tgY/s1600-h/clip_image020%25255B8%25255D%25255B2%25255D.png"></a></p>



<p>$cred = Get-Credential</p>



<p>$CSSession = New-CsOnlineSession -Credential $cred</p>



<p>Import-PSSession $CSSession -AllowClobber</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-Ionvc8QzB9U/VdYw_zm5XlI/AAAAAAAARNQ/1VhsAxQz3tY/clip_image021%25255B8%25255D_thumb.png?imgmax=800" alt="clip_image021[8]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-vh_4XBU2Cwk/VdYw9-1a6GI/AAAAAAAARNI/_5PYtimCm-U/s1600-h/clip_image021%25255B8%25255D%25255B2%25255D.png"></a></p>



<p>Now I&#8217;ll configure the shared sip address</p>



<p>Set-CsTenantFederationConfiguration -SharedSipAddressSpace $true</p>



<p>From <;<a href="https://technet.microsoft.com/en-us/library/jj205126.aspx">https://technet.microsoft.com/en-us/library/jj205126.aspx</a>>;</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/---Grd1bS7qs/VdYxDHsm3fI/AAAAAAAARNg/uTscrS8M4sI/clip_image001%25255B22%25255D_thumb.png?imgmax=800" alt="clip_image001[22]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-LYbeNh7bZLU/VdYxB68q5EI/AAAAAAAARNY/GGDMzalHNEQ/s1600-h/clip_image001%25255B22%25255D%25255B2%25255D.png"></a></p>



<p>To double check my configuration I will see if the SharedSipAddresSpace is enabled or not</p>



<p>Get-CsTenantFederationConfiguration</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-FoixBJkeY40/VdYxHItXTwI/AAAAAAAARN0/XwiQ6OH9lUg/clip_image002%25255B22%25255D_thumb.png?imgmax=800" alt="clip_image002[22]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-SeJZgOorpxQ/VdYxE3IwqzI/AAAAAAAARNo/_YMXxNIWnTo/s1600-h/clip_image002%25255B22%25255D%25255B2%25255D.png"></a></p>



<p>To double check that the hybrid configuration is setup properly we can use the Skype for business on-premises Hybrid UI wizard from the Home Menu under &#8220;Connection to Skype for Business Online&#8221;</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-uZUGh6ELGeo/VdYxLUZG2PI/AAAAAAAAROE/dJhtJsAR0wQ/clip_image003%25255B22%25255D_thumb.png?imgmax=800" alt="clip_image003[22]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-v0NntjPX5IM/VdYxJUhyffI/AAAAAAAARN8/LwQ4Vmy6MdM/s1600-h/clip_image003%25255B22%25255D%25255B2%25255D.png"></a></p>



<h2 class="wp-block-heading"><strong>Using the Skype for Business 2015 User interface to setup Hybrid configuration:</strong></h2>



<p>After you sign in it does automatically logs you in and configure the three following options</p>



<ol class="wp-block-list"><li>Federation for the Edge server</li><li>Federation with Office 365.</li><li>Shared SIP address space.</li></ol>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-FMxX7lOOUUY/VdYxPg7i0mI/AAAAAAAAROU/8V4mYBOdFfQ/clip_image004%25255B22%25255D_thumb.png?imgmax=800" alt="clip_image004[22]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-mADt_a1122E/VdYxNvo29pI/AAAAAAAAROM/1CfMmrtkS6o/s1600-h/clip_image004%25255B22%25255D%25255B2%25255D.png"></a></p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-x-HJjsgZJEA/VdYxTU3kEkI/AAAAAAAAROk/ZL34fjKWIVo/clip_image005%25255B20%25255D_thumb.png?imgmax=800" alt="clip_image005[20]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-mfurlXVV9dk/VdYxRThRmkI/AAAAAAAAROc/wcvJHgURehI/s1600-h/clip_image005%25255B20%25255D%25255B2%25255D.png"></a></p>



<p>Now I will configure my DNS Settings as recommended by Microsoft for the Hybrid Integration scenario</p>



<h2 class="wp-block-heading"><strong>DNS Settings</strong></h2>



<p>When creating DNS SRV records for hybrid deployments, the records, _sipfederationtls._tcp.<;domain>; and _sip._tls.<;domain>;, should point to the on-premises Access Proxy.</p>



<p>From <;<a href="https://technet.microsoft.com/en-us/library/jj205403.aspx">https://technet.microsoft.com/en-us/library/jj205403.aspx</a>>;</p>



<ol class="wp-block-list"><li>Update some DNS records to direct all SIP traffic to Skype for Business on-premises:</li></ol>



<ul class="wp-block-list"><li>The lyncdiscover.contoso.com A record to point to the FQDN of the on-premises reverse proxy server.</li><li>Update the _sip._tls.contoso.com SRV record to resolve to the public IP or VIP address of the Access Edge service of Skype for Business on-premises.</li><li>Update the _sipfederationtls._tcp.contoso.com SRV record to resolve to the public IP or VIP address of the Access Edge service of Skype for Business on-premises.</li><li>If your organization uses split DNS (sometimes called “split-brain DNS”), make sure that users resolving names through the internal DNS zone are directed to the Front End Pool.</li></ul>



<p>From <;<a href="https://support.office.com/en-us/article/Configure-Skype-for-Business-Server-2015-Hybrid-b06ee805-4349-4519-82fb-b06ed57c0bd0">https://support.office.com/en-us/article/Configure-Skype-for-Business-Server-2015-Hybrid-b06ee805-4349-4519-82fb-b06ed57c0bd0</a>>;</p>



<p>According to Microsoft&#8217;s configuration of the Public DNS, you will have to configure only the SRV records to point to your edge server however, running a simple wireshark on your Skype for business client machine you can notice the following:</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-iKDAe0GfahY/VdYxYS6H3QI/AAAAAAAARO0/2dqvH-0itc4/clip_image006%25255B20%25255D_thumb.png?imgmax=800" alt="clip_image006[20]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-ikK45xjTtIo/VdYxVvKCtSI/AAAAAAAAROs/N2_VMm26wbY/s1600-h/clip_image006%25255B20%25255D%25255B2%25255D.png"></a></p>



<p>Microsoft Lync / Skype client first requires the Lyncdiscover / Lyncdiscoverinternal record in order to see where the user is located… then gets redirected to webdir.online.lync.com which is the Cname value to the Lyncdiscover Cname in the public DNS and tries to login the user through Login.microsoftonline.com then finds no user there and logs in using the SRV eventually in the end as in the below snapshot which I&#8217;ve used Wireshark for to monitor the DNS traffic that the Lync Client requests upon login request.</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-499mJtyVASU/VdYxeZTyojI/AAAAAAAARPE/3vx3xctVbaM/clip_image007%25255B20%25255D_thumb.png?imgmax=800" alt="clip_image007[20]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-jduc9w03C5s/VdYxbABTqHI/AAAAAAAARO8/kkti-iix6js/s1600-h/clip_image007%25255B20%25255D%25255B2%25255D.png"></a></p>



<h2 class="wp-block-heading"><strong>NOTE:</strong></h2>



<p>What have me confused here is that Microsoft says only SRV records must be pointing to your On-premises Lync/Skype for Business Edge server.. So you must enter something else other than SIP.domain.com (Which in normal cases might be the common name of your Edge certificate) for the value of the SRV Record since the SIP.domain.com and Lyncdiscover.domain.com must be pointing to Office 365.</p>



<p>I tried using the Public IP address of my Edge server just to check if my on-premises user will connect without any issue however I did have an issue with the Certificate saying &#8220;There was a problem verifying the certificate from the server&#8221;.</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-lGvrY3uhL7c/VdYxhk3qfvI/AAAAAAAARPU/Zk-Unt1BIPY/clip_image008%25255B20%25255D_thumb.png?imgmax=800" alt="clip_image008[20]"/></figure>



<p>Error:<a href="http://lh3.googleusercontent.com/-QQCu-H8sFGQ/VdYxf1yJtJI/AAAAAAAARPM/Ltmct7FJ04g/s1600-h/clip_image008%25255B20%25255D%25255B2%25255D.png"></a></p>



<p>Luckily the Public certificate that I had on my edge server had multiple SANs (Subject Alternative Names) and one of them was WAC.moh10ly.com which I was intending to use for the WAC Server (Office Web Apps Server) and then I created an A record on my public DNS WAC.moh10ly.com that points to my Edge server&#8217;s Public IP address…. although the Wac.moh10ly.com is not a common name but it worked and I was able to federate with Office 365 users and was able to move users from on-premises to office 365 and back to on-premises as demonstrated later in the article.</p>



<p>&#8220;When creating DNS SRV records for hybrid deployments, the records, _sipfederationtls._tcp.<;domain>; and _sip._tls.<;domain>;, should point to the on-premises Access Proxy.&#8221;</p>



<p>From <;<a href="https://support.office.com/en-us/article/Configure-Skype-for-Business-Server-2015-Hybrid-b06ee805-4349-4519-82fb-b06ed57c0bd0">https://support.office.com/en-us/article/Configure-Skype-for-Business-Server-2015-Hybrid-b06ee805-4349-4519-82fb-b06ed57c0bd0</a>>;</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-bjBLMPH3R1o/VdYxl5vfZYI/AAAAAAAARPk/6Kc0nUw9Q5c/clip_image009%25255B14%25255D_thumb.png?imgmax=800" alt="clip_image009[14]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-RuU81hrPsfA/VdYxjgRDUzI/AAAAAAAARPc/bi9ktDtOpSI/s1600-h/clip_image009%25255B14%25255D%25255B2%25255D.png"></a></p>



<p>Now I have changed all the SRV records to direct to the new A record</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-6aB0cJA7h60/VdYxpN8RomI/AAAAAAAARP0/s1m3JI9QIFM/clip_image010%25255B14%25255D_thumb.png?imgmax=800" alt="clip_image010[14]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-yCB1_3nvQvA/VdYxnizB-rI/AAAAAAAARPs/mgNkhR30CEc/s1600-h/clip_image010%25255B14%25255D%25255B2%25255D.png"></a></p>



<p>And finally deleted the A sip record and created a new CNAME record that points to sipdir.online.lync.com</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-4joLGL8vaJ4/VdYxsjswwXI/AAAAAAAARQE/-Gr-StC06go/clip_image011%25255B14%25255D_thumb.png?imgmax=800" alt="clip_image011[14]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-NbhG6tDwWYk/VdYxqmzB5qI/AAAAAAAARP8/u9HZBRC9CFI/s1600-h/clip_image011%25255B14%25255D%25255B2%25255D.png"></a></p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-fL6sGB14vK8/VdYxvy17c1I/AAAAAAAARQU/FRMpJxT4iuM/clip_image012%25255B14%25255D_thumb.png?imgmax=800" alt="clip_image012[14]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-7mlgIGHQE30/VdYxt5mmgtI/AAAAAAAARQM/HC3JH8uD85M/s1600-h/clip_image012%25255B14%25255D%25255B2%25255D.png"></a></p>



<p>I have already a user synced from my local AD to the cloud (office 365) that&#8217;s not enabled for Skype for business on-premises .. Once this user is synced and have been assigned a license it should be directly enabled for Skype for Business Online and I should be able to sign in to it without any issue.</p>



<h2 class="wp-block-heading"><strong>Note:</strong></h2>



<p>In order for both users (homed online and On-premises) to see eachother&#8217;s presence the synced user must be enabled on the On-premises Server before moved to the cloud or else the presence and M will fail.</p>



<p>Time to test, I was able to sign in to the Online homed user (admin) and now I&#8217;ll be adding the on-premises homed user to the list to check the presence, IM ..etc</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-ykz2SQr8sGY/VdYx5DWr7iI/AAAAAAAARQk/48zwtMZjjWA/clip_image001%25255B24%25255D_thumb.png?imgmax=800" alt="clip_image001[24]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-claUGxmafw8/VdYx0RY2G3I/AAAAAAAARQc/w4WwhxDhquE/s1600-h/clip_image001%25255B24%25255D%25255B2%25255D.png"></a></p>



<p>Here I added the user admin to my other account Mohammed.hamada and vice versa.</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-INonbG-RYTQ/VdYx-N8_fnI/AAAAAAAARQ0/aiTHcXo9-5g/clip_image002%25255B24%25255D_thumb.png?imgmax=800" alt="clip_image002[24]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-iatUCquvKQE/VdYx7kpVvnI/AAAAAAAARQs/QWJwv9aeX8o/s1600-h/clip_image002%25255B24%25255D%25255B2%25255D.png"></a></p>



<p>The Presence appears to be working fine for user homed on-premises as it shows when I changed it to &#8220;busy, be right back..etc&#8221; on the cloud user&#8217;s Client however the Office 365 homed user&#8217;s presence takes time to change on the on-premises user&#8217;s list and the IM doesn&#8217;t seem to work properly as messages sometimes doesn&#8217;t go through and fail.</p>



<p>Sending a message from the on-premises User (Mohammed Hamada) to (ADMIN)</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-qa1xKJbYFRE/VdYyDtMvU6I/AAAAAAAARRE/_fH1iMkNB3I/clip_image003%25255B24%25255D_thumb.png?imgmax=800" alt="clip_image003[24]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-TQoH64iW4JA/VdYyA9MewDI/AAAAAAAARQ8/lpU_F8wP9EM/s1600-h/clip_image003%25255B24%25255D%25255B2%25255D.png"></a></p>



<p>Now sending an IM from Admin to Mohammed Hamada</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-DJVgWbJd-sE/VdYyHK_2OYI/AAAAAAAARRU/i1d-M_ngRYI/clip_image004%25255B24%25255D_thumb.png?imgmax=800" alt="clip_image004[24]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-RRAo-yCJ5vA/VdYyE718kYI/AAAAAAAARRM/yiHyzlcSG78/s1600-h/clip_image004%25255B24%25255D%25255B2%25255D.png"></a></p>



<p>To make sure that the issue is not within my on-premises server, I will use a different Skype for Business online account and see if IM work both ways.</p>



<p>This is my other user.. The presence information seems to work properly and now I&#8217;ll test the IM</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-wyppRre3Ch0/VdYyM4c__OI/AAAAAAAARRk/UURRTjLtBCI/clip_image005%25255B22%25255D_thumb.png?imgmax=800" alt="clip_image005[22]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-xBzr_yj-FEc/VdYyI-e649I/AAAAAAAARRc/-yOhVkesRDE/s1600-h/clip_image005%25255B22%25255D%25255B2%25255D.png"></a></p>



<p>IM between my On-premises and another user on another Office 365 tenant seems to be working fine back and forth as in the below snapshots so the issue might be related to Office 365 tenant which I am using for this test (could be related to trial version)</p>



<p>I am going to open a case with MS and see why this issue happens since my on-premises work fine with other tenants.</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-dx4lvmcMDpM/VdYyRv6jHOI/AAAAAAAARR0/ny5Oubvg7B4/clip_image006%25255B22%25255D_thumb.png?imgmax=800" alt="clip_image006[22]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-08-jnGRNKUA/VdYyO3866VI/AAAAAAAARRs/s65Lde0DQXM/s1600-h/clip_image006%25255B22%25255D%25255B2%25255D.png"></a></p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-FcKRl1xeL84/VdYyVUYuPQI/AAAAAAAARSI/IDplqROIUOo/clip_image007%25255B22%25255D_thumb.png?imgmax=800" alt="clip_image007[22]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-ROJQV9v1bMo/VdYyTAre5DI/AAAAAAAARSA/BcsZCP3GHc8/s1600-h/clip_image007%25255B22%25255D%25255B2%25255D.png"></a></p>



<p>Now It&#8217;s time to move users from and to cloud and on-premises to check how easy, flexible or hard this process is.</p>



<p>I currently have 2 users, one on cloud and one synced and homed online (Office 365)</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-MojC5Pnp7Ec/VdYyZM7EIfI/AAAAAAAARSY/g_lRXSDxkNA/clip_image008%25255B22%25255D_thumb.png?imgmax=800" alt="clip_image008[22]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-_U9NpMzUxVM/VdYyXiZbCfI/AAAAAAAARSQ/jFziaHSI_MQ/s1600-h/clip_image008%25255B22%25255D%25255B2%25255D.png"></a></p>



<p>In order to move users, you can go to Users tab after the hybrid config is finished and find the user you want to move then click on Actions and chose to move the users to the Skype for Business Online as in the below snapshot</p>



<p>Note:</p>



<p>Before you move the user to Office 365, you must assign license to the user or else the move will fail.</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-vj4sDjWXbLY/VdYyddfdM-I/AAAAAAAARSo/6GaIXKkt9Q8/clip_image009%25255B16%25255D_thumb.png?imgmax=800" alt="clip_image009[16]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-5kqcogM1AdI/VdYybYuzrAI/AAAAAAAARSg/e-UFlm6-xk8/s1600-h/clip_image009%25255B16%25255D%25255B2%25255D.png"></a></p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-TtlHi6ukXok/VdYyhPQa1UI/AAAAAAAARS4/miZAvJOXHFA/clip_image010%25255B16%25255D_thumb.png?imgmax=800" alt="clip_image010[16]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-EgQCOJd9UK0/VdYyfEc3siI/AAAAAAAARSw/4CDZGngK-xQ/s1600-h/clip_image010%25255B16%25255D%25255B2%25255D.png"></a></p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-L-__7dks3nI/VdYykgpQuII/AAAAAAAARTI/d-I2eDfCOlI/clip_image011%25255B16%25255D_thumb.png?imgmax=800" alt="clip_image011[16]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-DZ0vnOSxORU/VdYyi4bbAaI/AAAAAAAARTA/5gEKzN-PVJE/s1600-h/clip_image011%25255B16%25255D%25255B2%25255D.png"></a></p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-Lv2ffy8xH88/VdYyoAd1OhI/AAAAAAAARTY/MjVrWM8LF1s/clip_image012%25255B16%25255D_thumb.png?imgmax=800" alt="clip_image012[16]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-B1CA_rGmJMQ/VdYymAJe1WI/AAAAAAAARTQ/MvVynUcF84s/s1600-h/clip_image012%25255B16%25255D%25255B2%25255D.png"></a></p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-X4IpS04KceY/VdYyrWhTOPI/AAAAAAAARTo/dVDkIzhtBGQ/clip_image013%25255B12%25255D_thumb.png?imgmax=800" alt="clip_image013[12]"/></figure>



<p><a href="http://lh3.googleusercontent.com/--NZVUB1TQvc/VdYypgTQJgI/AAAAAAAARTg/wLmQEFMqUZo/s1600-h/clip_image013%25255B12%25255D%25255B2%25255D.png"></a></p>



<p>You can move the user back from Office 365 to your on-premises Skype for Business server with the same process exactly except that you&#8217;ll have to choose which pool you need to move the user to.</p>



<p>Checking where the user is hosted from Skype for business Management shell</p>



<p>The Hosting Provider will show you where the user is working from now.</p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-6iUvN0I4D84/VdYyvRtvC3I/AAAAAAAART4/1dYRAK4REbE/clip_image014%25255B12%25255D_thumb.png?imgmax=800" alt="clip_image014[12]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-Z5KdrKZ8FlM/VdYytnTlzDI/AAAAAAAARTw/4Ji-vYehWy8/s1600-h/clip_image014%25255B12%25255D%25255B2%25255D.png"></a></p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-qMyDa4Y7In0/VdYyy5Vx7BI/AAAAAAAARUI/_HH4uuiiLPA/clip_image015%25255B12%25255D_thumb.png?imgmax=800" alt="clip_image015[12]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-R4U7m2H0IfQ/VdYyxLkTi2I/AAAAAAAARUA/foDeUbdovFo/s1600-h/clip_image015%25255B12%25255D%25255B2%25255D.png"></a></p>



<figure class="wp-block-image"><img src="http://lh3.googleusercontent.com/-U1NYvxtHvy0/VdYy2NCq_4I/AAAAAAAARUY/yzsw5P091pY/clip_image016%25255B12%25255D_thumb.png?imgmax=800" alt="clip_image016[12]"/></figure>



<p><a href="http://lh3.googleusercontent.com/-2Si3hTOcHLQ/VdYy0iD-kSI/AAAAAAAARUQ/56LvnLx2Sg4/s1600-h/clip_image016%25255B12%25255D%25255B2%25255D.png"></a></p>



<p>Hope this has been helpful</p>



<h2 class="wp-block-heading">References:</h2>



<p><a href="https://technet.microsoft.com/en-us/library/jj204967.aspx">https://technet.microsoft.com/en-us/library/jj204967.aspx</a></p>



<p><a href="https://technet.microsoft.com/en-us/library/jj205403.aspx">https://technet.microsoft.com/en-us/library/jj205403.aspx</a></p>



<p><a href="https://technet.microsoft.com/en-us/library/jj205126.aspx">https://technet.microsoft.com/en-us/library/jj205126.aspx</a></p>



<p><a href="https://technet.microsoft.com/en-us/library/jj204669.aspx">https://technet.microsoft.com/en-us/library/jj204669.aspx</a></p>



<p><a href="https://support.office.com/en-us/article/Configure-Skype-for-Business-Server-2015-Hybrid-b06ee805-4349-4519-82fb-b06ed57c0bd0">https://support.office.com/en-us/article/Configure-Skype-for-Business-Server-2015-Hybrid-b06ee805-4349-4519-82fb-b06ed57c0bd0</a></p>
<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2522 " id="quads-ad2522" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>




<p><a href="https://channel9.msdn.com/Events/Ignite/2015/BRK4129">https://channel9.msdn.com/Events/Ignite/2015/BRK4129</a></p>

<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2527 " id="quads-ad2527" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>


Reset and manage your Active Directory users' Passwords Active Directory is one of the most…
Finding Exchange Database hidden mailboxes. Story:Maybe you have been in this situation before, trying to…
If you're using a Proxy server in your firewall or in your network and have…
Story:I got some clients that have reported some of their users being locked out and…
Delegate Permissions This is a code that I have wrote recently to check if an…
Story: I got a request from a client who constantly gets CVs and have to…
View Comments
Hi Mohammed,
Interesting article... .
I was wondering since you mention Lync 2013 FE as next hop pool for the Skype Edge: is this actually working?
I'm considering to temporarily use this kind of setup before migrating a Lync Front-End to a Skype Front-End.
Thx,
Vincent
UC Consultant
Hi Vincent,
Normally it should point to Skype For business Frontend (The new FE) since this will proxy the connection for non-migrated users to the old Lync FE however, in my case when I did the migration it also worked if you set the next hop as the old Lync FE server.
God bless you