After an In-Place upgrade from Lync Server 2013 to Skype for Business Server 2015 if your using and have assigned Kerberos authentication this will be removed as part of the upgrade and you have to reassign this afterwards.
Before the upgrade from Lync Server 2013 using Lync Management Shell use the below and note the existing Kerberos account name and site name.
Get-CsKerberosAccountAssignment
Mine were
- Site Name – Site1
- Account – ucmart\lynckerbsite1
After the In-Place upgrade you need to assign the existing Kerberos account, reset the password and assign the account. Then its always good to test and check its working 🙂
Steps after the In-Place upgrade to Skype for Business
1. Assign existing Kerberos account already created in AD to the site and use enable-cstopology using Skype for Business Management Shell
New-CsKerberosAccountAssignment -UserAccount "ucmart\lynckerbsite1" –Identity "site:Site1"
Enable-cstopology
2. Set up Kerberos authentication account password in Skype for Business Management Shell
Set-CsKerberosAccountPassword -UserAccount "ucmart\lynckerbsite1"
3. Synchronise Kerberos account password to IIS using Skype for Management Shell
This must be done on all Enterprise Edition Front End Servers, Standard Editions Front Ends and Directors.
I have two additional Front End Servers in my Pool.
Set-CsKerberosAccountPassword -FromComputer lyncfe01.ucmart.co.uk -ToComputer lyncfe02.ucmart.co.uk
Set-CsKerberosAccountPassword -FromComputer lyncfe01.ucmart.co.uk -ToComputer lyncfe03.ucmart.co.uk
After setting the account you must run
enable-cstopology
4.Test the assignment and view the HTML report to check all is good, again from Skype for Business Management Shell.
Test-CsKerberosAccountAssignment -Identity "site:Site1" -Report "c:\temp\KerbTest.htm" -Verbose
5.Check Kerberos Assignment account again using SfB Management Shell
get-cskerberosAccountAssignment
Job Done !
One thought on “Skype for Business In-Place upgrade – reassign Kerberos account and password reset”