<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2523 " id="quads-ad2523" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>
<h2> </h2>
<h2>Hybrid Integration</h2>
<p>In my <a href="https://www.moh10ly.com/2-skype-for-business-edge-server-deployment-and-hybrid-integration-with-skype-for-business-online/" target="_blank" rel="noopener">last post about Skype for Business</a> / Office 365 Skype for Business Online/Teams migration article I discussed the steps of how to create a hybrid environment between Skype for Business on-premises and went through the troubleshooting of each issue I have been through. In this article I am going to discuss the migration of users from on-premises to the cloud through UI and PowerShell.</p>
<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2531 " id="quads-ad2531" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>

<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2528 " id="quads-ad2528" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>

<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2524 " id="quads-ad2524" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>

<h2>Migrating users</h2>
<p>This article will assume that you are planning to migrate users from Skype for Business Frontend 2015 Server and that you already have a hybrid configuration in place. If so then you&#8217;re going to fulfill the following prerequisites:</p>
<ul>
<li>Update your PowerShell to 5.1 Framework <a href="https://www.microsoft.com/en-us/download/details.aspx?id=54616">https://www.microsoft.com/en-us/download/details.aspx?id=54616</a></li>
<li>Install Skype for Business Online Powershell Module <a href="https://www.microsoft.com/en-us/download/details.aspx?id=39366">https://www.microsoft.com/en-us/download/details.aspx?id=39366</a></li>
<li>Create a temporary admin user with MFA disabled.</li>
</ul>
<h5>To check the currently installed PowerShell run the following cmdlet</h5>
<p>$PSVersionTable</p>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2021/01/clip_image001.png"><img style="display: inline; background-image: none;" title="clip_image001" src="https://www.moh10ly.com/wp-content/uploads/2021/01/clip_image001_thumb.png" alt="clip_image001" width="391" height="147" border="0" /></a> 

<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2526 " id="quads-ad2526" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>
 
</p>
<p>After you Download and install PowerShell 5.1 you might need to restart the server. In which case the PowerShell will show that it is updated to the required version.</p>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2021/01/image-3.png"><img style="margin: 0px; display: inline; background-image: none;" title="image" src="https://www.moh10ly.com/wp-content/uploads/2021/01/image_thumb-3.png" alt="image" width="604" height="200" border="0" /></a></p>
<p>After Installing the Skype Online Connector Module, We will be able to connect right after launching PowerShell</p>
<p>To do so type:</p>
<p>Import-Module SkypeOnlineConnector</p>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2021/01/image-4.png"><img style="margin: 0px; display: inline; background-image: none;" title="image" src="https://www.moh10ly.com/wp-content/uploads/2021/01/image_thumb-4.png" alt="image" width="510" height="92" border="0" /></a></p>
<h2>Connecting to Office 365 (Teams Online or Skype for Business Online)</h2>
<p>The process of connecting to Office 365 Online PowerShell sounds easy but with MFA enforced in your environment you’ll have a nightmare mix of errors when you try so.</p>
<p>I have came through a lot of errors trying to force the use of PowerShell with MFA user authentication but eventually came to realize that Microsoft still does not support MFA for some cmdlets like Move-CsUser for instance.</p>
<p>So In short, to connect you’ll need to have a global or Teams admin user with MFA disabled to do so.</p>
<h2>To create a new Skype Online Session enter:</h2>
<p>&#8211; Make sure you start the regular PowerShell as admin and not Skype for Business Management Shell.</p>
<p>If you run these commands from SfB Management Shell you’ll get an error</p>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2021/01/image-5.png"><img style="margin: 0px; display: inline; background-image: none;" title="image" src="https://www.moh10ly.com/wp-content/uploads/2021/01/image_thumb-5.png" alt="image" width="1028" height="147" border="0" /></a></p>
<p>So first, We will import the Skype Online connector Module</p>
<p><strong>Import-Module SkypeOnlineConnector</strong></p>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2021/01/image-6.png"><img style="margin: 0px; display: inline; background-image: none;" title="image" src="https://www.moh10ly.com/wp-content/uploads/2021/01/image_thumb-6.png" alt="image" width="476" height="100" border="0" /></a></p>
<p>Then get the OverRidePowershell URI using the command:</p>
<p><strong>Get-CsOnlinePowerShellEndPoint</strong></p>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2021/01/image-7.png"><img style="margin: 0px; display: inline; background-image: none;" title="image" src="https://www.moh10ly.com/wp-content/uploads/2021/01/image_thumb-7.png" alt="image" width="519" height="333" border="0" /></a></p>
<p> </p>
<p>Next, We will connect and authenticate to our tenant using the following cmdlet</p>
<p>$sfbsess = New-CsOnlineSession -Username <a>User@domain.onmicrosoft.com</a> -OverRidePowerShellUri <a href="https://admin4a.online.lync.com/OcsPowershellOAuth">https://admin4a.online.lync.com/OcsPowershellOAuth</a> –Verbose</p>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2021/01/image-8.png"><img style="display: inline; background-image: none;" title="image" src="https://www.moh10ly.com/wp-content/uploads/2021/01/image_thumb-8.png" alt="image" width="761" height="572" border="0" /></a></p>
<h2>Moving Users to Teams</h2>
<p>To Move users to Office 365, You need to first provide credentials of the User with MFA disabled and then use the command Move-CsUser</p>
<h2>An Example:</h2>
<p>$Creds = Get-Credential</p>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2021/01/image-9.png"><img style="display: inline; background-image: none;" title="image" src="https://www.moh10ly.com/wp-content/uploads/2021/01/image_thumb-9.png" alt="image" width="436" height="162" border="0" /></a></p>
<h2>Moving User</h2>
<p>Move-CsUser –Identity <a href="mailto:user@domain.com">user@domain.com</a> –target “sipfed.online.lync.com” –hostedMigrationOverRideUri <a href="https://admin4a.online.lync.com/HostedMigration/hostedmigrationservice.svc">https://admin4a.online.lync.com/HostedMigration/hostedmigrationservice.svc</a> –ProxyPool “YourFEPool.Domain.local” –Credential $Creds</p>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2021/01/image-10.png"><img style="display: inline; background-image: none;" title="image" src="https://www.moh10ly.com/wp-content/uploads/2021/01/image_thumb-10.png" alt="image" width="764" height="119" border="0" /></a></p>
<p>Let’s check the status of the migrated user, The hosting provider attribute is what we care about as it tells us where the user is homed at.</p>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2021/01/image-11.png"><img style="display: inline; background-image: none;" title="image" src="https://www.moh10ly.com/wp-content/uploads/2021/01/image_thumb-11.png" alt="image" width="695" height="397" border="0" /></a></p>
<p> </p>
<h2>Checking the user from Teams Portal</h2>
<p>Users seems to be licensed, online and can now login using the Microsoft Teams app.</p>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2021/01/image-12.png"><img style="display: inline; background-image: none;" title="image" src="https://www.moh10ly.com/wp-content/uploads/2021/01/image_thumb-12.png" alt="image" width="1028" height="259" border="0" /></a></p>
<h2>Bulk Enable Users and assign Tel URI numbers to them</h2>
<p>In case you have a big number of users that you want to enable them online</p>
<p># Please provide your O365 admin credential</p>
<p>$creds = Get-Credential</p>
<p>-PSSession (New-CsOnlineSession $cred) -AllowClobber</p>
<p>$csv = Import-csv &#8220;C:\Users\Mohammed\users.csv&#8221;</p>
<p>ForEach ($user in $csv) {</p>
<p>Write-host now enabling $user.alias</p>
<p>Move-CsUser –Identity <a>$user.alias</a> –target “sipfed.online.lync.com” –hostedMigrationOverRideUri <a href="https://admin4a.online.lync.com/HostedMigration/hostedmigrationservice.svc">https://admin4a.online.lync.com/HostedMigration/hostedmigrationservice.svc</a> –ProxyPool “YourFEPool.Domain.local” –Credential $creds</p>
<p>}</p>
<p>The CSV File will look like this</p>
<p>Alias</p>
<p><a href="mailto:user@domain.com">user@domain.com</a></p>
<p><a href="mailto:user2@domain.com">user2@domain.com</a></p>
<p> </p>
<h2>Moving User back to On-premises (From Office 365 to SfB 2015 )</h2>
<p>On Frontend Server Launch PowerShell as Administrator then:</p>
<p>A- Import-Module MicrosoftTeams</p>
<p>B- Connect-MicrosoftTeams</p>
<p>After you connect you&#8217;ll get the following result:</p>
<p><img class="alignnone size-full wp-image-8195" src="https://www.moh10ly.com/wp-content/uploads/2021/01/teams-error06.jpg" alt="" width="725" height="171" /></p>
<p>Now that you&#8217;re connected to your tenant, Try to create a Skype for Business session with the following commands</p>
<p>C- $sfbsession = New-CsOnlineSession</p>
<p>D- Import-PsSession $Sfbsession</p>
<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2525 " id="quads-ad2525" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>

<p>You should get the following result</p>
<p><img class="alignnone wp-image-8196" src="https://www.moh10ly.com/wp-content/uploads/2021/01/teams-error07-1024x374.jpg" alt="" width="553" height="202" /></p>
<p>Type the following command to move the user back to On-premises environment:</p>
<p>Now last and most important note is that since I am using Skype for Business 2015 Server, I have to use the parameter -UseOAuth which uses modern authentication.</p>
<p>Move-csuser -Identity User@domain.com -target PoolHostname.Domain.Local -UseOAuth -Verbose</p>
<p>This should get it to work finally</p>
<p><img class="alignnone size-large wp-image-8197" src="https://www.moh10ly.com/wp-content/uploads/2021/01/teams-error08-1024x129.jpg" alt="" width="474" height="60" /></p>
<p> </p>
<h2>Errors you might face</h2>
<h2>Error 1:</h2>
<p>When you have your on-premises user enabled for dialin you will probably get the following error if you try to migrate them to Skype for Business online or teams.</p>
<p>Move-Csuser :: HostedMisrat ion fault: Error=(511), Description=(The user could not be moved because he or she is enabled for dial-in conferencing on-premises, but has not been an assigned an Audio Conferencing license in Office 365. Users must be licensed before they can be moved to Teams or Skype for Business Online.)</p>
<p>If you are sure do want to use migrate this user without an Audio Conferencing license, specify the</p>
<p>&#8220;BypassAudioConferencingCheck&#8221; switch. ) At line: 1 char: 1</p>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2021/01/clip_image0014.png"><img style="margin: 0px; display: inline; background-image: none;" title="clip_image001[4]" src="https://www.moh10ly.com/wp-content/uploads/2021/01/clip_image0014_thumb.png" alt="clip_image001[4]" width="1028" height="55" border="0" /></a></p>
<p>The Solution is to either provide an audio conferencing license or as it is showing in the error itself as it says use the switch -BypassAudioConferencingCheck to ignore that.</p>
<h2>Error 2:</h2>
<p>When trying to import the session, I got the following error</p>
<p>the runspace state is not valid for this operation for PowerShell Online.</p>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2021/01/clip_image0016.png"><img style="margin: 0px; display: inline; background-image: none;" title="clip_image001[6]" src="https://www.moh10ly.com/wp-content/uploads/2021/01/clip_image0016_thumb.png" alt="clip_image001[6]" width="739" height="92" border="0" /></a></p>
<p>Solution: To overcome this problem you&#8217;ll need to use the overridePowershellUri Parameter in the New-CsOnlineSession in order to connect to Skype online powershell.</p>
<p>To get your tenant&#8217;s PowerShell URI use the cmdlet Get-CsOnlinePowerShellEndPoint</p>
<p>What you need to use is the AbsoluteUri</p>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2021/01/clip_image0018.png"><img style="margin: 0px; display: inline; background-image: none;" title="clip_image001[8]" src="https://www.moh10ly.com/wp-content/uploads/2021/01/clip_image0018_thumb.png" alt="clip_image001[8]" width="765" height="560" border="0" /></a></p>
<h2>Error 3:</h2>
<p>When you try to import the SkypeOnlineConnector module and then run the New-CsOnlineSession cmdlet from Skype for Business Management Shell you’ll get the following error after authenticating.</p>
<p>Sign in</p>
<p>Sorry, but we’re having trouble signing you in.</p>
<p>AADSTS50011: The reply URL specified in the request does not match the reply URLs configured for the application: &#8216;7716031e-6f8b-45a4-b82b-922b1af0fbb4&#8217;. More details: Reply address did not match because of case sensitivity.</p>
<p>Troubleshooting details</p>
<p>If you contact your administrator, send this info to them.<br />Copy info to clipboard <br /> <br />Request Id: f0f97265-4669-4e4f-bcf7-609469e92f00 <br /> <br />Correlation Id: 829c8a2b-f697-416f-bfa6-4a794a229a13</p>
<p>Timestamp: 2021-01-10T23:00:10Z <br /> <br />Message: AADSTS50011: The reply URL specified in the request does not match the reply URLs configured for the application: &#8216;7716031e-6f8b-45a4-b82b-922b1af0fbb4&#8217;. More details: Reply address did not match because of case sensitivity. <br /> </p>
<p>Advanced diagnostics: Disable <br /> <br />If you plan on getting support for an issue, turn this on and try to reproduce the error. This will collect additional information that will help troubleshoot the issue.</p>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2021/01/image-13.png"><img style="margin: 0px; display: inline; background-image: none;" title="image" src="https://www.moh10ly.com/wp-content/uploads/2021/01/image_thumb-13.png" alt="image" width="1028" height="548" border="0" /></a></p>
<h2>Solution:</h2>
<p>Run the cmdlets from Windows PowerShell as admin not Skype for Business Management shell.</p>
<h2>Error 4 </h2>
<p>Get-CsOnlinePowerShellAccessInformation : Unable to get response from https://admin4a.online.lync.com/OcsPowershellOAuth.<br />At C:\Program Files\Common Files\Skype for Business Online\Modules\SkypeOnlineConnector\SkypeOnlineConnectorStartup.psm1:160 char:20<br />+ &#8230; pAuthInfo = Get-CsOnlinePowerShellAccessInformation -PowerShellEndpoi &#8230;<br />+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~<br />+ CategoryInfo : NotSpecified: (:) [Get-CsOnlinePowerShellAccessInformation], Exception<br />+ FullyQualifiedErrorId : System.Exception,Microsoft.Rtc.Management.OnlineConnector.GetPowerShellAccessInformationCmdlet</p>
<p><img class="alignnone wp-image-8194 " src="https://www.moh10ly.com/wp-content/uploads/2021/07/teams-error04.jpg" alt="" width="605" height="54" /></p>
<h2>Error 5</h2>
<p>Move-CsUser<br />[Y] Yes [A] Yes to All [N] No [L] No to All [S] Suspend [?] Help (default is &#8220;Y&#8221;): y<br />move-csuser : The underlying connection was closed: An unexpected error occurred on a send.<br />At line:1 char:1<br />+ move-csuser -identity user@domain.com -target D2-POOL01.clou &#8230;<br />+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~<br />+ CategoryInfo : InvalidOperation: (CN=user &#8230;domain,DC=net:OCSADUser) [Move-CsUser], WebException<br />+ FullyQualifiedErrorId : MoveError,Microsoft.Rtc.Management.AD.Cmdlets.MoveOcsUserCmdlet</p>
<h2>Solution:</h2>
<p>1- Make sure you have the proper Powershell version.</p>
<p>2- Make sure you enable TLS1.2 as default, for a quick solution use this PowerShell script </p>
<p>[System.Net.ServicePointManager]::SecurityProtocol = [System.Net.SecurityProtocolType]::Tls12;</p>
<p>3- Use MFA enabled account by following these steps to login and move user.</p>
<p>A- Import-Module MicrosoftTeams</p>
<p>B- Connect-MicrosoftTeams</p>
<p>After you connect you&#8217;ll get the following result:</p>
<p><img class="alignnone size-full wp-image-8195" src="https://www.moh10ly.com/wp-content/uploads/2021/01/teams-error06.jpg" alt="" width="725" height="171" /></p>
<p>Now that you&#8217;re connected to your tenant, Try to create a Skype for Business session with the following commands</p>
<p>C- $sfbsession = New-CsOnlineSession</p>
<p>D- Import-PsSession $Sfbsession</p>
<p>You should get the following result</p>
<p><img class="alignnone wp-image-8196" src="https://www.moh10ly.com/wp-content/uploads/2021/01/teams-error07-1024x374.jpg" alt="" width="553" height="202" /></p>
<p>Now last and most important note is that since I am using Skype for Business 2015 Server, I have to use the parameter -UseOAuth which uses modern authentication.</p>
<p>This should get it to work finally</p>
<p><img class="alignnone size-large wp-image-8197" src="https://www.moh10ly.com/wp-content/uploads/2021/01/teams-error08-1024x129.jpg" alt="" width="474" height="60" /></p>
<p>References:</p>
<p><a title="https://docs.microsoft.com/en-us/microsoftteams/upgrade-to-teams-on-prem-overview" href="https://docs.microsoft.com/en-us/microsoftteams/upgrade-to-teams-on-prem-overview">https://docs.microsoft.com/en-us/microsoftteams/upgrade-to-teams-on-prem-overview</a></p>
<p><a title="https://social.technet.microsoft.com/wiki/contents/articles/34339.skype-for-business-online-enable-your-tenant-for-modern-authentication.aspx" href="https://social.technet.microsoft.com/wiki/contents/articles/34339.skype-for-business-online-enable-your-tenant-for-modern-authentication.aspx">https://social.technet.microsoft.com/wiki/contents/articles/34339.skype-for-business-online-enable-your-tenant-for-modern-authentication.aspx</a></p>
<p><a title="https://docs.microsoft.com/en-us/skypeforbusiness/hybrid/move-users-from-on-premises-to-skype-for-business-online" href="https://docs.microsoft.com/en-us/skypeforbusiness/hybrid/move-users-from-on-premises-to-skype-for-business-online">https://docs.microsoft.com/en-us/skypeforbusiness/hybrid/move-users-from-on-premises-to-skype-for-business-online</a></p>
<p><a title="https://docs.microsoft.com/en-us/microsoftteams/teams-powershell-install" href="https://docs.microsoft.com/en-us/microsoftteams/teams-powershell-install">https://docs.microsoft.com/en-us/microsoftteams/teams-powershell-install</a></p>
<p><a title="https://docs.microsoft.com/en-us/skypeforbusiness/troubleshoot/hybrid-move-sfb-online/move-csuser-hostedmigration-fault-507" href="https://docs.microsoft.com/en-us/skypeforbusiness/troubleshoot/hybrid-move-sfb-online/move-csuser-hostedmigration-fault-507">https://docs.microsoft.com/en-us/skypeforbusiness/troubleshoot/hybrid-move-sfb-online/move-csuser-hostedmigration-fault-507</a></p>
<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2530 " id="quads-ad2530" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>

<p><a href="_wp_link_placeholder" data-wplink-edit="true">https://docs.microsoft.com/en-us/powershell/module/skype/move-csuser?view=skype-ps</a></p>


<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2529 " id="quads-ad2529" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>


Reset and manage your Active Directory users' Passwords Active Directory is one of the most…
Finding Exchange Database hidden mailboxes. Story:Maybe you have been in this situation before, trying to…
If you're using a Proxy server in your firewall or in your network and have…
Story:I got some clients that have reported some of their users being locked out and…
Delegate Permissions This is a code that I have wrote recently to check if an…
Story: I got a request from a client who constantly gets CVs and have to…
View Comments
this procedure takes long time go to Attribute Editor of particullar user and change the value of msRTCSIP-DeploymentLocator to sipfed.online.lync.com thats it no need this long command