Installation & Admin Accounts To install Skype for Business Server, it is recommended to create a dedicated installation account with the required permissions to servers, resources and supporting applications. Whilst the installation rights can be delegated into a least privileged model, experience shows that this can be problematic. For the purpose of this book, I am using least administrative effort. The following table contains a list of user accounts that need to be provisioned ahead of the installation. User Accounts Username Security Group Membership Role Domain\skypeinstall Enterprise Admins Installation Account Schema Admins Domain Admins Local Administrators SysAdmin on SQL Instances RTCUniversalServerAdmins CsAdministrator Domain\SkypeAdmin Domain Users Administrative Account CsAdministrator Domain\SkypeUser1 Domain Users End User Test Account Domain\SkypeUser2 Domain Users End User Test Account Domain\SkypeUser3 Domain Users End User Test Account Group membership to CsAdministrator can only be granted once forest and domain preparation has been performed. Please do not create this group manually. Domain Names Domain names are an important consideration when deploying Skype for Business. Skype for Business depends on what is referred to as a SIP domain. The SIP domain is like any other namespace and is often the same name as the businesses E-mail domain. In order to communicate to the outside world using federation or hybrid features, this SIP domain must be publically routable. By publically routable, I mean this domain must be resolved across the internet and therefore contain a supported Top Level Domain (TLD) i.e. .com or .co.uk etc. Employing a namespace with internal TLDs such as .local and .internal, although will work for internal communications, will not be supported for external access, mobile connectivity, federation and hybrid scenarios. Within Skype for Business you can add your SIP domains (e.g. hostedhouse.co.uk) into the configuration even though your internal Active Directory Domain name may be hostedhouse.local or instance.
Installation & Admin Accounts To install Skype for Business Server, it is recommended to create a dedicated installation account with the required permissions to servers, resources and supporting applications. Whilst the installation rights can be delegated into a least privileged model, experience shows that this can be problematic. For the purpose of this book, I am using least administrative effort. The following table contains a list of user accounts that need to be provisioned ahead of the installation. User Accounts Username Security Group Membership Role Domain\skypeinstall Enterprise Admins Schema Admins Domain Admins Local Administrators SysAdmin on SQL Instances RTCUniversalServerAdmins CsAdministrator Installation Account Domain\SkypeAdmin Domain Users CsAdministrator Administrative Account Domain\SkypeUser1 Domain Users End User Test Account Domain\SkypeUser2 Domain Users End User Test Account Domain\SkypeUser3 Domain Users End User Test Account Group membership to CsAdministrator can only be granted once forest and domain preparation has been performed. Please do not create this group manually. Domain Names Domain names are an important consideration when deploying Skype for Business. Skype for Business depends on what is referred to as a SIP domain. The SIP domain is like any other namespace and is often the same name as the businesses E-mail domain. In order to communicate to the outside world using federation or hybrid features, this SIP domain must be publically routable. By publically routable, I mean this domain must be resolved across the internet and therefore contain a supported Top Level Domain (TLD) i.e. .com or .co.uk etc. Employing a namespace with internal TLDs such as .local and .internal, although will work for internal communications, will not be supported for external access, mobile connectivity, federation and hybrid scenarios. Within Skype for Business you can add your SIP domains (e.g. hostedhouse.co.uk) into the configuration even though your internal Active Directory Domain name may be hostedhouse.local or instance.
Preparing%20for%20Skype%20for%20Business%20-%20Feb%202016.docx