<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2524 " id="quads-ad2524" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>
<h1 align="left">The story</h1>
<p>I had a project few weeks ago where my client wanted to install Skype for Business 2019 but had installed Lync before and removed the server without doing proper decommissioning which kept dirty records in AD database and had to be removed manually in order to make a new clean installation of Skype for Business 2019</p>
<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2528 " id="quads-ad2528" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>

<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2522 " id="quads-ad2522" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>

<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2530 " id="quads-ad2530" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>

<h1>To do so:</h1>
<p>There are two days of doing so, One is using ADSIEdit and ADUC to remove Computer Objects and Users related attributes and Security Groups.</p>
<p>I normally would prefer PowerShell but since we can demonstrate both ways for people who like to work with GUI</p>
<h1>Starting with GUI</h1>
<p>Removing Legacy Lync server from the AD Schema</p>
<h1>Prerequisites</h1>
<ol>
<li>Using a domain or enterprise admin</li>
<li>Access to the ADSIEdit.</li>
</ol>
<p>Goal of removing Legacy Lync server from your AD environment.</p>
<ol>
<li>Preparing AD schema and domain for a new deployment after you improperly deleted Lync Servers without uninstalling them.</li>
<li>Cleaning Users&#8217; Lync related attributes for the new deployment.</li>
</ol>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2019/12/clip_image001-1.png"><img width="1229" height="479" title="clip_image001" style="margin: 0px; display: inline; background-image: none;" alt="clip_image001" src="https://www.moh10ly.com/wp-content/uploads/2019/12/clip_image001_thumb-1.png" border="0"></a> 

<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2523 " id="quads-ad2523" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>
 
</p>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2019/12/clip_image002.png"><img width="1305" height="467" title="clip_image002" style="margin: 0px; display: inline; background-image: none;" alt="clip_image002" src="https://www.moh10ly.com/wp-content/uploads/2019/12/clip_image002_thumb.png" border="0"></a></p>
<h1>Step#1: Remove permissions</h1>
<p>This step removes the original Lync permissions from the active director.</p>
<ol>
<li>Open Active Directory Users and Computers</li>
<li>Right click on your top level domain being cleaned and select Properties</li>
<li>From the Properties windows, select the Security tab.</li>
<li>Remove all security users titled RTC*<br />
These are usually<br />
&#8211; RTCUniversalServerReadOnlyGroup<br />
&#8211; RTCUniversalUserReadOnlyGroup<br />
&#8211; RTCUniversalUniversalServices<br />
&#8211; RTCUniversalUserAdmins</li>
</ol>
<p><cite>From <;<a href="http://blog.armgasys.com/?p=320">http://blog.armgasys.com/?p=320</a>>; </cite></p>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2019/12/clip_image003.png"><img width="263" height="346" title="clip_image003" style="margin: 0px; display: inline; background-image: none;" alt="clip_image003" src="https://www.moh10ly.com/wp-content/uploads/2019/12/clip_image003_thumb.png" border="0"></a></p>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2019/12/clip_image004.png"><img width="392" height="440" title="clip_image004" style="margin: 0px; display: inline; background-image: none;" alt="clip_image004" src="https://www.moh10ly.com/wp-content/uploads/2019/12/clip_image004_thumb.png" border="0"></a></p>
<ol>
<li>
<h1>Repeat the same steps for each of the following AD Folders and</h1>
<p>OUs<br />
NOTE: Not all RTC permissions will exist in each AD Folder or OU, but these three OUs do:<br />
&#8211; Domain Controllers<br />
&#8211; System<br />
&#8211; Users</li>
</ol>
<h2>Domain Controllers</h2>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2019/12/clip_image005.png"><img width="491" height="469" title="clip_image005" style="margin: 0px; display: inline; background-image: none;" alt="clip_image005" src="https://www.moh10ly.com/wp-content/uploads/2019/12/clip_image005_thumb.png" border="0"></a></p>
<h2>Systems</h2>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2019/12/clip_image006.png"><img width="441" height="413" title="clip_image006" style="margin: 0px; display: inline; background-image: none;" alt="clip_image006" src="https://www.moh10ly.com/wp-content/uploads/2019/12/clip_image006_thumb.png" border="0"></a></p>
<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2531 " id="quads-ad2531" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>

<h2>Users</h2>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2019/12/clip_image007.png"><img width="430" height="368" title="clip_image007" style="display: inline; background-image: none;" alt="clip_image007" src="https://www.moh10ly.com/wp-content/uploads/2019/12/clip_image007_thumb.png" border="0"></a></p>
<p>Step#3: Additional AD cleanup</p>
<ol>
<li>Open Active Directory Users and Computers</li>
<li>Drill down as follows<br />
[Your Domain] \ Program Data \ Distributed \ KeyMan</li>
<li>Delete LyncCertificates<br />
NOTE: This may not exist in all scenarios.</li>
<li>Drill down as follows<br />
[Your Domain] Users</li>
<li>Delete all RTC* and CS* users created by Lync<br />
I.E. CSAdministrator, CSHelpDesk, RTCComponentUniversalServices, Etc.</li>
</ol>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2019/12/image-1.png"><img width="766" height="624" title="image" style="margin: 0px; display: inline; background-image: none;" alt="image" src="https://www.moh10ly.com/wp-content/uploads/2019/12/image_thumb-1.png" border="0"></a></p>
<p>Deleting users from the User OU</p>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2019/12/clip_image0016-1.png"><img width="933" height="229" title="clip_image001[6]" style="margin: 0px; display: inline; background-image: none;" alt="clip_image001[6]" src="https://www.moh10ly.com/wp-content/uploads/2019/12/clip_image0016_thumb-1.png" border="0"></a></p>
<p>Deleting CS Users</p>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2019/12/clip_image0024.png"><img width="932" height="461" title="clip_image002[4]" style="margin: 0px; display: inline; background-image: none;" alt="clip_image002[4]" src="https://www.moh10ly.com/wp-content/uploads/2019/12/clip_image0024_thumb.png" border="0"></a></p>
<p>Step#4: Cleanup existing users</p>
<p>This steps resets Lync attributes for any domain users and contacts.</p>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2019/12/image-2.png"><img width="712" height="570" title="image" style="margin: 0px; display: inline; background-image: none;" alt="image" src="https://www.moh10ly.com/wp-content/uploads/2019/12/image_thumb-2.png" border="0"></a></p>
<h1>The Second way: Using PowerShell</h1>
<p>get-aduser -filter {msRTCSIP-PrimaryUserAddress -like &#8220;*&#8221;}|set-aduser -clear msRTCSIP-PrimaryUserAddress,msRTCSIP-PrimaryHomeServer,msRTCSIP-UserEnabled,msRTCSIP-OptionFlags,msRTCSIP-UserPolicies, msRTCSIP-DeploymentLocator, msRTCSIP-FederationEnabled, msRTCSIP-InternetAccessEnabled</p>
<h1>Result:</h1>
<p>Users attribute are clean and AD has nothing left over of Previous installation of Lync or Skype for Business .</p>
<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2529 " id="quads-ad2529" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>

<p><a href="https://www.moh10ly.com/wp-content/uploads/2019/12/clip_image0018.png"><img width="413" height="454" title="clip_image001[8]" style="margin: 0px; display: inline; background-image: none;" alt="clip_image001[8]" src="https://www.moh10ly.com/wp-content/uploads/2019/12/clip_image0018_thumb.png" border="0"></a></p>

<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2527 " id="quads-ad2527" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>


Reset and manage your Active Directory users' Passwords Active Directory is one of the most…
Finding Exchange Database hidden mailboxes. Story:Maybe you have been in this situation before, trying to…
If you're using a Proxy server in your firewall or in your network and have…
Story:I got some clients that have reported some of their users being locked out and…
Delegate Permissions This is a code that I have wrote recently to check if an…
Story: I got a request from a client who constantly gets CVs and have to…