Skype for Business In-Place upgrade – reassign Kerberos account and password reset

After an In-Place upgrade from Lync Server 2013 to Skype for Business Server 2015 if your using and have assigned Kerberos authentication this will be removed as part of the upgrade and you have to reassign this afterwards.

Before the upgrade from Lync Server 2013 using Lync Management Shell use the below and note the existing Kerberos account name and site name.

Get-CsKerberosAccountAssignment

Mine were

  • Site Name – Site1
  • Account  – ucmart\lynckerbsite1

After the In-Place upgrade you need to assign the existing Kerberos account, reset the password and assign the account. Then its always good to test and check its working 🙂

Steps after the In-Place upgrade to Skype for Business

1. Assign existing Kerberos account already created in AD to the site and use enable-cstopology using Skype for Business Management Shell

New-CsKerberosAccountAssignment -UserAccount "ucmart\lynckerbsite1" –Identity "site:Site1"

Enable-cstopology

2. Set up Kerberos authentication account password in Skype for Business Management Shell

Set-CsKerberosAccountPassword -UserAccount "ucmart\lynckerbsite1"

3. Synchronise Kerberos account password to IIS using Skype for Management Shell

This must be done on all Enterprise Edition Front End Servers, Standard Editions Front Ends and Directors.

I have two additional Front End Servers in my Pool.

Set-CsKerberosAccountPassword -FromComputer lyncfe01.ucmart.co.uk -ToComputer lyncfe02.ucmart.co.uk

Set-CsKerberosAccountPassword -FromComputer lyncfe01.ucmart.co.uk -ToComputer lyncfe03.ucmart.co.uk

After setting the account you must run

enable-cstopology

4.Test the assignment and view the HTML report to check all is good, again from Skype for Business Management Shell.

Test-CsKerberosAccountAssignment -Identity "site:Site1" -Report "c:\temp\KerbTest.htm" -Verbose

image

5.Check Kerberos Assignment account again using SfB Management Shell

get-cskerberosAccountAssignment

Job Done !

Advertisements

One thought on “Skype for Business In-Place upgrade – reassign Kerberos account and password reset

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s